0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) 12:32:57 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x5500) 12:32:57 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x10000000}) 12:32:57 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}) 12:32:57 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3c01, 0x0, &(0x7f0000000000)) 12:32:58 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x68) 12:32:58 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x20000000}) 12:32:58 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x60ff) 12:32:58 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) 12:32:58 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = socket(0x6, 0x6, 0x5) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x394, &(0x7f0000000080)=0x2) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000040)={0xffffffffffffffff, 0x1}) 12:32:58 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3d00, 0x0, &(0x7f0000000000)) [ 2959.507837][ T38] audit: type=1326 audit(1621341178.545:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=25948 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:32:58 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x9700) 12:32:58 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3d01, 0x0, &(0x7f0000000000)) 12:32:58 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 12:32:58 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x20801, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x101403, 0x0) 12:32:58 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0xff000000}) [ 2959.704009][ T38] audit: type=1326 audit(1621341178.745:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26002 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:32:58 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x104000) 12:32:59 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x6c) 12:32:59 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:32:59 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 12:32:59 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3e00, 0x0, &(0x7f0000000000)) 12:32:59 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x105400) 12:32:59 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) fcntl$getown(r0, 0x9) [ 2960.501632][ T38] audit: type=1326 audit(1621341179.545:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26002 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:32:59 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x400000) 12:32:59 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3e01, 0x0, &(0x7f0000000000)) 12:32:59 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 12:32:59 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2}) 12:32:59 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) [ 2960.701255][ T38] audit: type=1326 audit(1621341179.735:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26049 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:32:59 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 12:33:00 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x74) 12:33:00 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x401000) 12:33:00 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x3}) 12:33:00 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3f00, 0x0, &(0x7f0000000000)) 12:33:00 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x0, {0x6a3}}, 0x18) 12:33:00 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) [ 2961.512884][ T38] audit: type=1326 audit(1621341180.555:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26049 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:00 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x4}) 12:33:00 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x2) 12:33:00 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x4af000) 12:33:00 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 12:33:00 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3f01, 0x0, &(0x7f0000000000)) [ 2961.692856][ T38] audit: type=1326 audit(1621341180.735:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26084 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:00 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x5}) [ 2962.501602][ T38] audit: type=1326 audit(1621341181.545:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26084 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:01 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x7a) 12:33:01 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x40028, 0x1000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000003c0)={0x6, 0x6, 0x6, 0x3, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}]}) rt_tgsigqueueinfo(0x0, 0x0, 0x3a, &(0x7f0000000000)={0x1b, 0x1, 0x2}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000001c0)={0x6, 0xa, &(0x7f00000000c0)=[0x30, 0x81, 0x9, 0x1, 0x3, 0x1, 0xbe5a, 0x3, 0x3, 0x0], &(0x7f0000000100)=[0x78, 0x40, 0x1ff], &(0x7f0000000140)=[0x72, 0x200, 0x9], &(0x7f0000000180)=[0x81, 0x8, 0x1f]}) 12:33:01 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x4fd000) 12:33:01 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4000, 0x0, &(0x7f0000000000)) 12:33:01 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 12:33:01 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x6}) 12:33:01 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x7}) 12:33:01 executing program 2: gettid() prctl$PR_MCE_KILL(0x3, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) 12:33:01 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4001, 0x0, &(0x7f0000000000)) [ 2962.682074][ T38] audit: type=1326 audit(1621341181.725:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26120 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:01 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 12:33:01 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x541000) 12:33:01 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x8}) [ 2963.501743][ T38] audit: type=1326 audit(1621341182.545:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26120 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:02 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0xe7) 12:33:02 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0xbe, 0xdf, 0x1, 0x9}, {0x8000, 0xc8, 0x5, 0x401}, {0x9, 0xbb, 0x0, 0xc00000}, {0x7e0, 0x2c, 0x7f, 0xfffffff9}, {0x4, 0x81, 0x7, 0x200}, {0x400, 0x19, 0x4, 0x4}]}) 12:33:02 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) 12:33:02 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4100, 0x0, &(0x7f0000000000)) 12:33:02 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x10}) 12:33:02 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x550000) 12:33:02 executing program 2: prctl$PR_MCE_KILL(0x3, 0x1, 0x2) 12:33:02 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x300}) 12:33:02 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4101, 0x0, &(0x7f0000000000)) 12:33:02 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x970000) 12:33:02 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) [ 2963.691655][ T38] audit: type=1326 audit(1621341182.735:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26159 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:02 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) write$fb(0xffffffffffffffff, &(0x7f0000000040)="9dfdacc4a312f71646a7d714982dd7cc539471bb6ab852238027c1ef1b01840b08bf7c0d6247a1dea6efa5b231a159ee9d4929a71337eb72e88a151a55ed5c3db8409cb58679547f657aefacb287c834a415eb4b7027051d7eb0a0f970556e90ad431104f55715f34e5f15a217a3b3d944dbc3866541f6d55baedf5c186f237fb9b9ac849a5d0c294c28142b074e2b605da0dff9f2677fb6ee7cd04a3b9531002c866ba8c76c4ffc951d6221fbe36b84c8c80dd3", 0xb4) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x400040, 0x0) 12:33:03 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x300) 12:33:03 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x500}) 12:33:03 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4200, 0x0, &(0x7f0000000000)) 12:33:03 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0xc04a01) 12:33:03 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) 12:33:03 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) [ 2964.508261][ T38] audit: type=1326 audit(1621341183.545:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26159 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 2964.635364][ T38] audit: type=1326 audit(1621341183.675:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26181 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:03 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4201, 0x0, &(0x7f0000000000)) 12:33:03 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x600}) 12:33:03 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0xd04f00) 12:33:03 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x80) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x1d, r0, 0x3, {0x0, 0x1, 0x3}, 0x1}, 0x18) 12:33:03 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:33:03 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x700}) 12:33:04 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x500) 12:33:04 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4300, 0x0, &(0x7f0000000000)) 12:33:04 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0xf04a00) 12:33:04 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 12:33:04 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x2) 12:33:04 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000}) [ 2965.461666][ T38] audit: type=1326 audit(1621341184.495:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26181 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:04 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4301, 0x0, &(0x7f0000000000)) 12:33:04 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0xff00}) 12:33:04 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x14ac000) 12:33:04 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000002080)={0x20, 0x0, r0, {0x10001, 0x0, 0x8, 0x1f}}, 0x20) prctl$PR_MCE_KILL(0x3, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x1f, 0x40200) 12:33:04 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 2965.652922][ T38] audit: type=1326 audit(1621341184.695:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26212 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:04 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4400, 0x0, &(0x7f0000000000)) 12:33:05 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x600) 12:33:05 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x10000000) 12:33:05 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x30000}) 12:33:05 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 12:33:05 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4401, 0x0, &(0x7f0000000000)) 12:33:05 executing program 2: r0 = fork() sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0xfffffffffffffffc) prctl$PR_MCE_KILL(0x3, 0x0, 0x2) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000000)) [ 2966.468714][ T38] audit: type=1326 audit(1621341185.505:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26212 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:05 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0xff600000) 12:33:05 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4500, 0x0, &(0x7f0000000000)) 12:33:05 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 12:33:05 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 12:33:05 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) [ 2966.653494][ T38] audit: type=1326 audit(1621341185.695:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26247 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:05 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x400000000000) 12:33:06 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x2) 12:33:06 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4501, 0x0, &(0x7f0000000000)) 12:33:06 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x700) 12:33:06 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 12:33:06 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x550000000000) 12:33:06 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x1000000}) 12:33:06 executing program 2: prctl$PR_MCE_KILL(0x3, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 12:33:06 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2000000}) 12:33:06 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 12:33:06 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4600, 0x0, &(0x7f0000000000)) 12:33:06 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x60ffffffffff) [ 2967.699654][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 2967.699671][ T38] audit: type=1326 audit(1621341186.735:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26276 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:06 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 12:33:06 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x3000000}) 12:33:06 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x7fffffffefff) 12:33:06 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x458800, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r2, 0x24}, 0x10) 12:33:07 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x900) 12:33:07 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4601, 0x0, &(0x7f0000000000)) 12:33:07 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x4000000}) 12:33:07 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 12:33:07 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x970000000000) 12:33:07 executing program 2: prctl$PR_MCE_KILL(0x3, 0x1, 0x2) [ 2968.515556][ T38] audit: type=1326 audit(1621341187.555:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26276 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:07 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4700, 0x0, &(0x7f0000000000)) 12:33:07 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x5000000}) 12:33:07 executing program 2: socketpair(0x21, 0x2, 0x182c, &(0x7f0000000000)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000a40)=[{{&(0x7f0000000040)=@vsock, 0xffffffffffffff2e, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=""/210, 0xd2}, 0x6}, {{&(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000380)=""/24, 0x18}, {&(0x7f00000003c0)=""/18, 0x12}, {&(0x7f0000000b00)=""/127, 0x7f}, {&(0x7f00000000c0)=""/95, 0x35}, {&(0x7f0000000500)=""/192, 0xc0}, {&(0x7f00000005c0)=""/60, 0x3c}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/158, 0x9e}, {&(0x7f0000000780)=""/45, 0x2d}, {&(0x7f00000007c0)=""/232, 0xe8}], 0xa, &(0x7f0000000980)=""/141, 0x9a}, 0x4}], 0x2, 0x41, &(0x7f0000000ac0)={r1, r2+60000000}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x20032, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x3, 0x0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x10010, 0xffffffffffffffff, 0x8000000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000140)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000400)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r5, 0x4, 0x0, 0x46, 0x1}, 0x6) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 12:33:07 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x10400000000000) 12:33:07 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4701, 0x0, &(0x7f0000000000)) 12:33:07 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4800, 0x0, &(0x7f0000000000)) [ 2968.722075][ T38] audit: type=1326 audit(1621341187.755:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26313 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:08 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0xa00) 12:33:08 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 12:33:08 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x6000000}) 12:33:08 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4801, 0x0, &(0x7f0000000000)) 12:33:08 executing program 2: shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffc000/0x3000)=nil) prctl$PR_MCE_KILL(0x3, 0x0, 0x0) 12:33:08 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x10540000000000) [ 2969.542667][ T38] audit: type=1326 audit(1621341188.585:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26313 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:08 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4900, 0x0, &(0x7f0000000000)) 12:33:08 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 12:33:08 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0xc04a0100000000) 12:33:08 executing program 2: write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x21, 0x1f, 0x49a0c, 0xfff, 0x1, 0x6, 0x1}}, 0x50) r0 = fork() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000140)) ptrace$cont(0x7, r0, 0x40, 0x4) prctl$PR_MCE_KILL(0x3, 0x0, 0x0) [ 2969.715889][ T38] audit: type=1326 audit(1621341188.755:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26340 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:08 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x7000000}) 12:33:08 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4901, 0x0, &(0x7f0000000000)) 12:33:09 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0xc00) 12:33:09 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x8000000}) 12:33:09 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0xd04f0000000000) 12:33:09 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 12:33:09 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4a00, 0x0, &(0x7f0000000000)) 12:33:09 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) [ 2970.535809][ T38] audit: type=1326 audit(1621341189.575:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26340 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:09 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0xf04a0000000000) [ 2970.686105][ T38] audit: type=1326 audit(1621341189.725:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26371 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:09 executing program 2: prctl$PR_MCE_KILL(0x3, 0x1, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x7}, 0x10) 12:33:09 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) 12:33:09 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x10000000}) 12:33:09 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4a01, 0x0, &(0x7f0000000000)) 12:33:09 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x1000000000000000) 12:33:10 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x1f00) 12:33:10 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x20000000}) 12:33:10 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4b00, 0x0, &(0x7f0000000000)) 12:33:10 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0xffefffffff7f0000) 12:33:10 executing program 2: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000140)={0xfc, 0x2}, 0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) read$FUSE(r2, &(0x7f0000002180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r1, &(0x7f00000041c0)={0x18, 0x0, r3}, 0x18) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_IOCTL(r4, &(0x7f00000001c0)={0x20, 0xffffffffffffffb4, r3, {0x0, 0x4, 0x395, 0x6}}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x81, 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x8004e500, &(0x7f0000000100)=r5) prctl$PR_MCE_KILL(0x3, 0x0, 0x2) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000040)={@none, 0x4}) 12:33:10 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}) [ 2971.490644][ T38] audit: type=1326 audit(1621341190.525:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26371 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:10 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0xffffffffff600000) 12:33:10 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) 12:33:10 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0xff000000}) 12:33:10 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4b01, 0x0, &(0x7f0000000000)) [ 2971.657181][ T38] audit: type=1326 audit(1621341190.695:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26404 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:10 executing program 2: prctl$PR_MCE_KILL(0x3, 0x1, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 12:33:10 executing program 5: prctl$PR_MCE_KILL(0x2, 0x1, 0x0) 12:33:11 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x2000) 12:33:11 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4c00, 0x0, &(0x7f0000000000)) 12:33:11 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 12:33:11 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:33:11 executing program 2: socketpair(0x2c, 0x4, 0x81, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) prctl$PR_MCE_KILL(0x3, 0x0, 0x2) 12:33:11 executing program 5: prctl$PR_MCE_KILL(0x2, 0x1, 0x1) [ 2972.471109][ T38] audit: type=1326 audit(1621341191.505:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26404 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:11 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4c01, 0x0, &(0x7f0000000000)) 12:33:11 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 12:33:11 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) 12:33:11 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:33:11 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 12:33:11 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 12:33:12 executing program 5: setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), 0x4) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 12:33:12 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4d00, 0x0, &(0x7f0000000000)) 12:33:12 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x3f00) 12:33:12 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}) 12:33:12 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 12:33:12 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x2) [ 2973.463112][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 2973.463128][ T38] audit: type=1326 audit(1621341192.505:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26438 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:12 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x4}) 12:33:12 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 12:33:12 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x2) 12:33:12 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4d01, 0x0, &(0x7f0000000000)) 12:33:12 executing program 5: prctl$PR_MCE_KILL(0x2, 0x1, 0x0) [ 2973.647179][ T38] audit: type=1326 audit(1621341192.685:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26471 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:12 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x5}) 12:33:12 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4e00, 0x0, &(0x7f0000000000)) 12:33:12 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 12:33:13 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x4000) 12:33:13 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x25a) 12:33:13 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) clock_gettime(0x6, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:33:13 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x6}) 12:33:13 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4e01, 0x0, &(0x7f0000000000)) 12:33:13 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) [ 2974.462150][ T38] audit: type=1326 audit(1621341193.505:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26471 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:13 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) [ 2974.630056][ T38] audit: type=1326 audit(1621341193.665:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26502 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:13 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 12:33:13 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4f00, 0x0, &(0x7f0000000000)) 12:33:13 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1, 0x7, 0x4, 0x2}, {0x0, 0x1f, 0x2, 0x7fff}]}) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) 12:33:13 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7}) 12:33:13 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x1) 12:33:14 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x4800) 12:33:14 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) 12:33:14 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @ipx={0x4, 0x9, 0xf67c, "3acf6e204fc9", 0x3}, @hci={0x1f, 0x3, 0x1}, @l2={0x1f, 0x6, @any, 0xff01}, 0xfbff, 0x0, 0x0, 0x0, 0xffd2, &(0x7f0000000040)='xfrm0\x00', 0x1, 0x22d1}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000048c0)={'ip6gre0\x00', &(0x7f0000004840)={'ip6gre0\x00', 0x0, 0x4, 0x7f, 0x0, 0x1, 0x28, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x40, 0x8000, 0xffffff80, 0x400}}) sendmsg$can_j1939(r0, &(0x7f0000005980)={&(0x7f0000004900)={0x1d, r1, 0x2, {0x2, 0xff}}, 0x18, &(0x7f0000005940)={&(0x7f0000004940)="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", 0x1000}}, 0xc0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 12:33:14 executing program 2: r0 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r0, 0x9, 0xa60) r1 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) ptrace$poke(0x4, r0, &(0x7f0000000100), 0x2) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/219) prctl$PR_MCE_KILL(0x3, 0x1, 0x1) 12:33:14 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x8}) 12:33:14 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4f01, 0x0, &(0x7f0000000000)) [ 2975.447507][ T38] audit: type=1326 audit(1621341194.485:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26502 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:14 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x10}) 12:33:14 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5000, 0x0, &(0x7f0000000000)) 12:33:14 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x2509c1) 12:33:14 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 12:33:14 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) [ 2975.677642][ T38] audit: type=1326 audit(1621341194.715:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26548 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:14 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x300}) 12:33:15 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x4c00) 12:33:15 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5001, 0x0, &(0x7f0000000000)) 12:33:15 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000040), 0x4) 12:33:15 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) 12:33:15 executing program 5: ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:33:15 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x500}) [ 2976.476090][ T38] audit: type=1326 audit(1621341195.515:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26548 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:15 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:33:15 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x600}) 12:33:15 executing program 2: ptrace$poke(0x1, 0x0, &(0x7f0000000000), 0x0) prctl$PR_MCE_KILL(0x3, 0x0, 0x0) 12:33:15 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000004480)) recvmmsg(r1, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) socketpair(0x18, 0x5, 0x8, &(0x7f00000043c0)={0xffffffffffffffff}) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000004400), &(0x7f0000004440)=0x4) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @can={0x1d, 0x0}, @phonet={0x23, 0x20, 0xff, 0x7}, @l2tp={0x2, 0x0, @empty, 0x2}, 0xfff7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x4c}) sendmsg$can_j1939(r0, &(0x7f0000001140)={&(0x7f00000000c0)={0x1d, r4, 0x2, {0x1, 0x0, 0x1}, 0xfd}, 0x18, &(0x7f0000001100)={&(0x7f0000000100)="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", 0x1000}, 0x1, 0x0, 0x0, 0x80}, 0x20040001) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4b, 0x20, &(0x7f0000000000)=0x1) getresuid(&(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200)) getresuid(&(0x7f0000001240), &(0x7f0000001280), &(0x7f00000012c0)) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 12:33:15 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5100, 0x0, &(0x7f0000000000)) [ 2976.648594][ T38] audit: type=1326 audit(1621341195.685:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26576 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:15 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 12:33:16 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x6800) 12:33:16 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x109200, 0x0) prctl$PR_MCE_KILL(0x3, 0x0, 0x0) 12:33:16 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x700}) 12:33:16 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5101, 0x0, &(0x7f0000000000)) 12:33:16 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0xc4, 0xa}, 0x2) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:33:16 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) [ 2977.475512][ T38] audit: type=1326 audit(1621341196.515:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26576 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:16 executing program 2: prctl$PR_MCE_KILL(0x3, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f00000020c0)=0x5) 12:33:16 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 12:33:16 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x2000}) 12:33:16 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5200, 0x0, &(0x7f0000000000)) 12:33:16 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(0x0, r2, 0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000002080)={{0x2, 0xee00, r1, r2, 0xffffffffffffffff, 0x30, 0x99d2}, 0xffff, 0x2, 0x81, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xce82}) lstat(&(0x7f0000002100)='./file0\x00', &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, r3, r2) memfd_create(&(0x7f0000000000)='!@-&)', 0x5) [ 2977.691708][ T38] audit: type=1326 audit(1621341196.735:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26609 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:16 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0xff00}) 12:33:17 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x6c00) 12:33:17 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 12:33:17 executing program 2: prctl$PR_MCE_KILL(0x3, 0x1, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 12:33:17 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5201, 0x0, &(0x7f0000000000)) 12:33:17 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) getpid() prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0x7fff) 12:33:17 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x30000}) [ 2978.499967][ T38] audit: type=1326 audit(1621341197.535:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26609 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:17 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5300, 0x0, &(0x7f0000000000)) 12:33:17 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 12:33:17 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1ff, 0x3, 0x3146}) 12:33:17 executing program 2: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0xf1}, 0x4) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0xfffffffffffffffa, 0x200000) clock_gettime(0x5, &(0x7f0000000080)={0x0, 0x0}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000000c0)={0x1, 0xc, 0x4, 0x2000, 0x4, {r2, r3/1000+60000}, {0x5, 0x1, 0x51, 0x6, 0xf7, 0xdb, "8019d9b5"}, 0xc5babb84, 0x3, @userptr=0x2}) 12:33:17 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x40000}) [ 2978.717127][ T38] audit: type=1326 audit(1621341197.755:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26642 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:17 executing program 5: r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000002fc0)={0x0, 0x0}) recvmmsg(r0, 0x0, 0x0, 0x3100, &(0x7f0000000040)={0x0, r1+60000000}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x180, 0x2001, 0x23456}, 0x200) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) [ 2979.518466][ T38] audit: type=1326 audit(1621341198.555:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26642 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:18 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x7400) 12:33:18 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5301, 0x0, &(0x7f0000000000)) 12:33:18 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 12:33:18 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 12:33:18 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 12:33:18 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0xdc, &(0x7f0000000000)=0x1) 12:33:18 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1f, 0x101040) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x7f, 0x2, 0x0, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, 0x40, 0x20, 0x2, 0x3}}) 12:33:18 executing program 2: prctl$PR_MCE_KILL(0x3, 0x1, 0x2) modify_ldt$write2(0x11, &(0x7f0000000000)={0x0, 0x20001000, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) 12:33:18 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 12:33:18 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 12:33:18 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x4100) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @short={0x2, 0xffff, 0xaa22297d3a479104}}, 0x14) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:33:18 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5400, 0x0, &(0x7f0000000000)) [ 2979.757750][ T38] audit: type=1326 audit(1621341198.795:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26672 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:19 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x7a00) 12:33:19 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) r4 = fork() read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) shmctl$IPC_SET(r0, 0x1, &(0x7f0000002240)={{0x2, r1, r2, r3, 0xffffffffffffffff, 0x186, 0x3}, 0x8, 0xfffffffeffffffff, 0xe369, 0x3c, r4, r5, 0x401}) prctl$PR_MCE_KILL(0x3, 0x0, 0x0) 12:33:19 executing program 5: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x573280, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x3) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x40, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd_index=0x6, 0x7, 0x0, 0x1, 0x0, 0x1}, 0x200) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:33:19 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 12:33:19 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 12:33:19 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5401, 0x0, &(0x7f0000000000)) [ 2980.565817][ T38] audit: type=1326 audit(1621341199.605:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26672 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:19 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5500, 0x0, &(0x7f0000000000)) 12:33:19 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 12:33:19 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) shmdt(0x0) 12:33:19 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) [ 2980.737091][ T38] audit: type=1326 audit(1621341199.775:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26697 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:19 executing program 2: getpgid(0x0) prctl$PR_MCE_KILL(0x3, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x2020) 12:33:19 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000000)=0x2) 12:33:20 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0xe700) 12:33:20 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 12:33:20 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5501, 0x0, &(0x7f0000000000)) 12:33:20 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 12:33:20 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0x9}) prctl$PR_MCE_KILL(0x3, 0x0, 0x0) 12:33:20 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000140)={@none, 0x8}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000100)={0x800, 0x4, &(0x7f0000000000)=[0x0, 0x9, 0xdf, 0x40], &(0x7f0000000040)=[0x8, 0x6, 0x1, 0x7, 0x5, 0x57], &(0x7f0000000080)=[0x6, 0x400, 0x4, 0x9, 0x20, 0x7], &(0x7f00000000c0)=[0x20, 0x4, 0x9]}) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) [ 2981.564203][ T38] audit: type=1326 audit(1621341200.605:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26697 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:20 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 12:33:20 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5600, 0x0, &(0x7f0000000000)) 12:33:20 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 12:33:20 executing program 5: r0 = fork() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000140)) sched_rr_get_interval(r0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:33:20 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="9c1853a7782ec414eeee17cf595fb5b93164a42ac2aaf6a20f40b3bef9ac4382a750d67d2be807d13450d0f0fcf51864d1d7cf59532c4297a731de0073eb5ccc087ea30fe76b14593d4c60b1551e2df907f15623220ede70f14805f1c59c16019e0a1edb4ff351e7ece45337dd7bd7bf0af5f565b2b681c455714e6b69bdc954ec08f4d30a11fad63bee44961616c181c9d4b68c59b3718ec137b65c3f571661fdca42556ba0656e", 0xa8}, 0x1, 0x0, 0x0, 0x4824}, 0x200000c0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x10003, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x2004, @fd_index=0x2, 0x1f, 0x7, 0x40, 0x19, 0x1, {0x3}}, 0x8) [ 2981.778377][ T38] audit: type=1326 audit(1621341200.815:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26730 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:20 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) 12:33:21 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x200000) 12:33:21 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5601, 0x0, &(0x7f0000000000)) 12:33:21 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 12:33:21 executing program 5: ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) prctl$PR_MCE_KILL(0x2, 0x0, 0x1) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x2) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x75) read$snapshot(0xffffffffffffffff, &(0x7f0000000000)=""/152, 0x98) 12:33:21 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}) 12:33:21 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x4500) r0 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(0xffffffffffffffff, r0, 0x20, &(0x7f0000000040)={0x1, 0x100, 0x4712}) [ 2982.591272][ T38] audit: type=1326 audit(1621341201.625:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26730 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:21 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 12:33:21 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5700, 0x0, &(0x7f0000000000)) 12:33:21 executing program 5: prctl$PR_MCE_KILL(0x2, 0x1, 0x0) [ 2982.699690][ T38] audit: type=1326 audit(1621341201.735:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26755 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:21 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) epoll_create(0x9fa) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xe78481178bdbefa3, 0x0) write$6lowpan_enable(r0, &(0x7f0000000040)='0', 0x1) 12:33:21 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) 12:33:21 executing program 5: write$fb(0xffffffffffffffff, &(0x7f0000000000)="f9f846de81578a9489eb6ddea00288cfe9f36659c5364b53525fa94c7493feac3213d11aa4976a4b5ea9a88704ce3f8c9e6fce1915cff19cfe129ea24d76df8f9b994c2158515329bb63618bda0838117dcab85ab85ede87415b4bf408e22248662f35ee453718c776c62e021b9ac478690df3727a7e931937ccd68a8d1d9a352116b5c7a100a4ec0945bfed0b7ad6bbb172068a49cbd5477b691757dfe5c67012afbc4c1cfb2a40a93245692908", 0xae) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x341d01, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000100)={0x15, 0x1}) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) [ 2983.527103][ T38] audit: type=1326 audit(1621341202.565:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26755 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:22 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x1000000) 12:33:22 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x10000000}) 12:33:22 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5701, 0x0, &(0x7f0000000000)) 12:33:22 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x8001, 0x200801) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) 12:33:22 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 12:33:22 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:33:22 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5800, 0x0, &(0x7f0000000000)) 12:33:22 executing program 5: prctl$PR_MCE_KILL(0x2, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040)) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x72}, 0x4) 12:33:22 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x20000000}) 12:33:22 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 12:33:22 executing program 2: prctl$PR_MCE_KILL(0x3, 0x1, 0xaebfb19848bd3169) [ 2983.698659][ T38] audit: type=1326 audit(1621341202.735:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26794 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:22 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 12:33:23 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5801, 0x0, &(0x7f0000000000)) 12:33:23 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 12:33:23 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x2000000) 12:33:23 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 12:33:23 executing program 5: recvmmsg(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=""/211, 0xd3}, {&(0x7f0000004ac0)=""/110, 0x6e}, {&(0x7f0000000200)=""/146, 0x92}], 0x3, &(0x7f0000000300)=""/180, 0xb4}, 0xffff}, {{&(0x7f00000003c0)=@can, 0x80, &(0x7f0000001940)=[{&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/56, 0x38}, {&(0x7f0000001480)=""/170, 0xaa}, {&(0x7f0000001540)=""/94, 0x5e}, {&(0x7f00000015c0)=""/181, 0xb5}, {&(0x7f0000001680)=""/124, 0x7c}, {&(0x7f0000001740)=""/156, 0x9c}, {&(0x7f0000001ec0)=""/29, 0x1d}, {&(0x7f0000001840)=""/29, 0x1d}, {&(0x7f0000002300)=""/130, 0x82}], 0xa, &(0x7f0000001a00)=""/136, 0x88}, 0x56b}, {{&(0x7f0000001ac0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001b40)=""/189, 0xbd}, {&(0x7f0000001c40)=""/235, 0xeb}, {&(0x7f0000001d40)=""/191, 0xbf}, {&(0x7f0000001e00)=""/182, 0xb6}, {&(0x7f0000004a40)=""/94, 0x5e}, {&(0x7f0000001f40)=""/184, 0xb8}, {&(0x7f0000002000)=""/208, 0xd0}], 0x7, &(0x7f0000002180)=""/39, 0x27}, 0x7}, {{0x0, 0x0, &(0x7f00000021c0), 0x0, &(0x7f0000002200)=""/243, 0xf3}, 0x8b8}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001880)=""/67, 0x43}, {&(0x7f00000024c0)=""/173, 0xad}, {&(0x7f0000001700)=""/3, 0x3}, {&(0x7f0000002580)=""/81, 0x51}, {&(0x7f0000002600)=""/147, 0x93}], 0x5, &(0x7f0000004880)=""/90, 0x5a}, 0x9}], 0x5, 0x40000002, 0x0) prctl$PR_MCE_KILL(0x2, 0x1, 0x1) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x48400, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x9) openat$full(0xffffffffffffff9c, &(0x7f0000001800), 0x418080, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) read$snapshot(r1, &(0x7f00000023c0)=""/204, 0xcc) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) 12:33:23 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) [ 2984.505546][ T38] audit: type=1326 audit(1621341203.545:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26794 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:23 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 12:33:23 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5900, 0x0, &(0x7f0000000000)) 12:33:23 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) 12:33:23 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) 12:33:23 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) [ 2984.741731][ T38] audit: type=1326 audit(1621341203.785:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26825 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:23 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 12:33:23 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5901, 0x0, &(0x7f0000000000)) 12:33:23 executing program 5: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x31e600, 0x0) 12:33:23 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x40400, 0x0) prctl$PR_MCE_KILL(0x3, 0x0, 0x0) 12:33:24 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x3000000) 12:33:24 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:33:24 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) 12:33:24 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 12:33:24 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x1) 12:33:24 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5a00, 0x0, &(0x7f0000000000)) [ 2985.551989][ T38] audit: type=1326 audit(1621341204.595:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26825 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:24 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:33:24 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 12:33:24 executing program 2: prctl$PR_MCE_KILL(0x3, 0x1, 0x0) 12:33:24 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5a01, 0x0, &(0x7f0000000000)) 12:33:24 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) [ 2985.732041][ T38] audit: type=1326 audit(1621341204.775:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26853 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:24 executing program 5: clock_getres(0x3, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:33:25 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x4000000) 12:33:25 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 12:33:25 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_MCE_KILL(0x3, 0x0, 0x0) 12:33:25 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5b00, 0x0, &(0x7f0000000000)) 12:33:25 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) 12:33:25 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) [ 2986.549352][ T38] audit: type=1326 audit(1621341205.585:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26853 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:25 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5b01, 0x0, &(0x7f0000000000)) 12:33:25 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 12:33:25 executing program 5: write$qrtrtun(0xffffffffffffffff, &(0x7f0000000000)="8e7e23885e522aa1d596e1f9aceee73ec430e9744e1fa175d02c2396101d79d5213f12440b1ec804200383f8a69a643d4f1cd824d1cc1430b2937dd863266329af3b5013117cb57039a1e1b70c5e2de4ccef4a906361c259570f618eceff4dfe6c8dcde38075c1d5c803412d47e5d5377ae95bd0c6bcf1f1f41d9fa4706d5a77d3876a7a659bcba6aaa99dff3c8ea67e091190c159b7410cc07f71fd340fe3e7fb76b0474ed0bbf46e35ac2225206d697b1fe86799eea95c47c62146", 0xbc) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0xe3, 0x9, 0x30, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x8, 0x10, 0x1, 0x7}}) prctl$PR_MCE_KILL(0x2, 0x0, 0x2) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x48c80, 0x0) 12:33:25 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 12:33:25 executing program 2: r0 = socket(0x28, 0x800, 0x3) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000), 0x4) prctl$PR_MCE_KILL(0x3, 0x0, 0x0) [ 2986.737054][ T38] audit: type=1326 audit(1621341205.775:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26886 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:25 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) 12:33:26 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x5000000) 12:33:26 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5c00, 0x0, &(0x7f0000000000)) 12:33:26 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) 12:33:26 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 12:33:26 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 12:33:26 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 2987.554375][ T38] audit: type=1326 audit(1621341206.595:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26886 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:26 executing program 5: ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x5, 0x1, 0x4, 0x1, 0x3f25, {}, {0x5, 0xc, 0x3f, 0xff, 0x5, 0x9, "0567360f"}, 0x8000, 0x1, @fd, 0x7fff}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x7fff, 0x2, 0x4, 0x100000, 0xa9, {0x0, 0x2710}, {0x3, 0x1, 0x7f, 0x8, 0x81, 0x0, "63f53e7d"}, 0x726, 0x4, @planes=&(0x7f0000000080)={0xffffffff, 0x0, @userptr=0x10001, 0x7}, 0x2}) 12:33:26 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5c01, 0x0, &(0x7f0000000000)) 12:33:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) prctl$PR_MCE_KILL(0x3, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x24002) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080), 0x8) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040)={{0x2, 0x5}, 0x22}, 0x10) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {@none}, {}]}) 12:33:26 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 2987.712329][ T38] audit: type=1326 audit(1621341206.745:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26915 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:26 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 12:33:26 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5d00, 0x0, &(0x7f0000000000)) 12:33:27 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x6000000) 12:33:27 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000040)={0x18}, 0x18) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:33:27 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000080)={{0x1, 0xffffffffffffffff, 0xee00, 0x0, r1, 0x8, 0x1}, 0x0, 0x81, 0xa0a, 0xec, 0x0, 0xffffffffffffffff, 0x853}) prctl$PR_MCE_KILL(0x3, 0x0, 0x1) 12:33:27 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5d01, 0x0, &(0x7f0000000000)) 12:33:27 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 12:33:27 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 12:33:27 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 12:33:27 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) 12:33:27 executing program 2: prctl$PR_MCE_KILL(0x16, 0x1, 0x3000000) 12:33:27 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5e00, 0x0, &(0x7f0000000000)) 12:33:27 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x1) 12:33:27 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) [ 2988.724648][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 2988.724665][ T38] audit: type=1326 audit(1621341207.765:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26946 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 2988.846157][ T38] audit: type=1326 audit(1621341207.885:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26953 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:28 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x7000000) 12:33:28 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 12:33:28 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5e01, 0x0, &(0x7f0000000000)) 12:33:28 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 12:33:28 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) [ 2989.548677][ T38] audit: type=1326 audit(1621341208.585:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26946 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:28 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 12:33:28 executing program 2: prctl$PR_MCE_KILL(0x16, 0x1, 0x1000000) 12:33:28 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x1) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0xff2d) r0 = syz_io_uring_setup(0x611f, &(0x7f0000000040)={0x0, 0xcb9d, 0x8, 0x3, 0x106}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x10, r0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000140)) [ 2989.682144][ T38] audit: type=1326 audit(1621341208.725:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26970 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:28 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5f00, 0x0, &(0x7f0000000000)) 12:33:28 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 12:33:28 executing program 5: prctl$PR_MCE_KILL(0x2, 0x1, 0x0) 12:33:28 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) [ 2989.834297][ T38] audit: type=1326 audit(1621341208.875:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26980 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:29 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x8000000) 12:33:29 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 12:33:29 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5f01, 0x0, &(0x7f0000000000)) 12:33:29 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 12:33:29 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x2) [ 2990.494677][ T38] audit: type=1326 audit(1621341209.535:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=26970 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:29 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6000, 0x0, &(0x7f0000000000)) 12:33:29 executing program 2: prctl$PR_MCE_KILL(0x2, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040)) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x72}, 0x4) 12:33:29 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 12:33:29 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x402040, 0x0) write$fb(0xffffffffffffffff, &(0x7f0000000000)="cce08f22e066bdaeaf827febe2adeda002672874be6004b97da2da328a42b16ca54d3debf7c5b3631cdb816d37726c7a9f097866512b7e2024cf45d9ad4787764866263e8d4a232cdb2700e18ff14d598b9f3def348d1a14bd91e7e1a7006f26c1e55e710d2e568722b141094ba5dafcb4cfd099a3d794bc113e9961b2818fb0d8ec02f5cc420ac32bb6d51421f69c6143e5a36508e26f35bffde3246012a55695111faa90757667c8b0406cbf5c61daa640236b3856d442a5b9367dfde48d306bf6de694fe52c23cfefb758b04899d5aaf25fb20342ed12c71a8b89506834", 0xdf) write$FUSE_LSEEK(r0, &(0x7f0000000140)={0x18, 0x0, 0x0, {0x1f}}, 0x18) 12:33:29 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6001, 0x0, &(0x7f0000000000)) 12:33:29 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) [ 2990.678056][ T38] audit: type=1326 audit(1621341209.715:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27009 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:29 executing program 2: prctl$PR_MCE_KILL(0x2, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040)) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000000)={0x72}, 0x4) 12:33:30 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}) 12:33:30 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x9000000) 12:33:30 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 12:33:30 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6100, 0x0, &(0x7f0000000000)) 12:33:30 executing program 2: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5701, 0x0, &(0x7f0000000000)) 12:33:30 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) [ 2991.510191][ T38] audit: type=1326 audit(1621341210.545:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27009 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:30 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) 12:33:30 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) sendmsg$can_j1939(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)="9c1853a7782ec414eeee17cf595fb5b93164a42ac2aaf6a20f40b3bef9ac4382a750d67d2be807d13450d0f0fcf51864d1d7cf59532c4297a731de0073eb5ccc087ea30fe76b14593d4c60b1551e2df907f15623220ede70f14805f1c59c16019e0a1edb4ff351e7ece45337dd7bd7bf0af5f565b2b681c455714e6b69bdc954ec08f4d30a11fad63bee44961616c181c9d4b68c59b3718ec137b65c3f571661fdca42556ba0656e", 0xa8}, 0x1, 0x0, 0x0, 0x4824}, 0x200000c0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x10003, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x2004, @fd_index=0x2, 0x1f, 0x7, 0x40, 0x19, 0x1, {0x3}}, 0x8) 12:33:30 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0x401) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) [ 2991.660932][ T38] audit: type=1326 audit(1621341210.695:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27037 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:30 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 12:33:30 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6101, 0x0, &(0x7f0000000000)) 12:33:30 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 12:33:30 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000004480)) recvmmsg(r1, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) socketpair(0x18, 0x5, 0x8, &(0x7f00000043c0)={0xffffffffffffffff}) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000004400), &(0x7f0000004440)=0x4) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @can={0x1d, 0x0}, @phonet={0x23, 0x20, 0xff, 0x7}, @l2tp={0x2, 0x0, @empty, 0x2}, 0xfff7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x4c}) sendmsg$can_j1939(r0, &(0x7f0000001140)={&(0x7f00000000c0)={0x1d, r4, 0x2, {0x1, 0x0, 0x1}, 0xfd}, 0x18, &(0x7f0000001100)={&(0x7f0000000100)="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", 0x1000}, 0x1, 0x0, 0x0, 0x80}, 0x20040001) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4b, 0x20, &(0x7f0000000000)=0x1) getresuid(&(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200)) getresuid(&(0x7f0000001240), &(0x7f0000001280), &(0x7f00000012c0)) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 12:33:31 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0xa000000) 12:33:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000200)={0x2, 0x8001, 0x6}) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)) prctl$PR_MCE_KILL(0x2, 0x1, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz1\x00') r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x140, 0x0) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f0000000140)={0x10, 0x55, {0x57, 0x5, 0x1000, {0x98b, 0x2}, {}, @cond=[{0x5, 0x2, 0x200, 0xff1, 0x5, 0x5}, {0x6, 0x800, 0x3, 0x0, 0x81b, 0x80}]}, {0x55, 0x2, 0xbd8e, {0x81}, {0xd0b8, 0x663}, @const={0xff, {0x6, 0x0, 0x200, 0x8}}}}) 12:33:31 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6200, 0x0, &(0x7f0000000000)) 12:33:31 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 12:33:31 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 12:33:31 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000004480)) recvmmsg(r1, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) socketpair(0x18, 0x5, 0x8, &(0x7f00000043c0)={0xffffffffffffffff}) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000004400), &(0x7f0000004440)=0x4) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @can={0x1d, 0x0}, @phonet={0x23, 0x20, 0xff, 0x7}, @l2tp={0x2, 0x0, @empty, 0x2}, 0xfff7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x4c}) sendmsg$can_j1939(r0, &(0x7f0000001140)={&(0x7f00000000c0)={0x1d, r4, 0x2, {0x1, 0x0, 0x1}, 0xfd}, 0x18, &(0x7f0000001100)={&(0x7f0000000100)="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", 0x1000}, 0x1, 0x0, 0x0, 0x80}, 0x20040001) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4b, 0x20, &(0x7f0000000000)=0x1) getresuid(&(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200)) getresuid(&(0x7f0000001240), &(0x7f0000001280), &(0x7f00000012c0)) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) [ 2992.476765][ T38] audit: type=1326 audit(1621341211.515:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27037 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:31 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6201, 0x0, &(0x7f0000000000)) 12:33:31 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 12:33:31 executing program 5: ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:33:31 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000004480)) recvmmsg(r1, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) socketpair(0x18, 0x5, 0x8, &(0x7f00000043c0)={0xffffffffffffffff}) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000004400), &(0x7f0000004440)=0x4) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @can={0x1d, 0x0}, @phonet={0x23, 0x20, 0xff, 0x7}, @l2tp={0x2, 0x0, @empty, 0x2}, 0xfff7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x4c}) sendmsg$can_j1939(r0, &(0x7f0000001140)={&(0x7f00000000c0)={0x1d, r4, 0x2, {0x1, 0x0, 0x1}, 0xfd}, 0x18, &(0x7f0000001100)={&(0x7f0000000100)="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", 0x1000}, 0x1, 0x0, 0x0, 0x80}, 0x20040001) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4b, 0x20, &(0x7f0000000000)=0x1) getresuid(&(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200)) getresuid(&(0x7f0000001240), &(0x7f0000001280), &(0x7f00000012c0)) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 12:33:31 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 12:33:31 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6300, 0x0, &(0x7f0000000000)) 12:33:32 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0xc000000) 12:33:32 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) 12:33:32 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000004480)) recvmmsg(r1, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) socketpair(0x18, 0x5, 0x8, &(0x7f00000043c0)={0xffffffffffffffff}) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000004400), &(0x7f0000004440)=0x4) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @can={0x1d, 0x0}, @phonet={0x23, 0x20, 0xff, 0x7}, @l2tp={0x2, 0x0, @empty, 0x2}, 0xfff7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x4c}) sendmsg$can_j1939(r0, &(0x7f0000001140)={&(0x7f00000000c0)={0x1d, r4, 0x2, {0x1, 0x0, 0x1}, 0xfd}, 0x18, &(0x7f0000001100)={&(0x7f0000000100)="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", 0x1000}, 0x1, 0x0, 0x0, 0x80}, 0x20040001) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4b, 0x20, &(0x7f0000000000)=0x1) getresuid(&(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200)) getresuid(&(0x7f0000001240), &(0x7f0000001280), &(0x7f00000012c0)) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:33:32 executing program 5: ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000100)) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x44001, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x121400, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x40, 0x8001, 0x1, @empty, @empty, 0x1, 0x7, 0xf8, 0x5}}) openat$fb1(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'ip6tnl0\x00', r2, 0x4, 0xf7, 0x6, 0x8e, 0xe, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x3e, 0x0, 0xd14c}}) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000)) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r3, &(0x7f00000041c0)={0x18, 0x0, r4}, 0x18) write$FUSE_WRITE(r0, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, r4, {0x4}}, 0x18) 12:33:32 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 12:33:32 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6301, 0x0, &(0x7f0000000000)) 12:33:32 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 12:33:32 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000004480)) recvmmsg(r1, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) socketpair(0x18, 0x5, 0x8, &(0x7f00000043c0)={0xffffffffffffffff}) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000004400), &(0x7f0000004440)=0x4) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @can={0x1d, 0x0}, @phonet={0x23, 0x20, 0xff, 0x7}, @l2tp={0x2, 0x0, @empty, 0x2}, 0xfff7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x4c}) sendmsg$can_j1939(r0, &(0x7f0000001140)={&(0x7f00000000c0)={0x1d, r4, 0x2, {0x1, 0x0, 0x1}, 0xfd}, 0x18, &(0x7f0000001100)={&(0x7f0000000100)="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", 0x1000}, 0x1, 0x0, 0x0, 0x80}, 0x20040001) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4b, 0x20, &(0x7f0000000000)=0x1) getresuid(&(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200)) getresuid(&(0x7f0000001240), &(0x7f0000001280), &(0x7f00000012c0)) 12:33:32 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}) 12:33:32 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6400, 0x0, &(0x7f0000000000)) 12:33:32 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x40, 0x125200) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) write$qrtrtun(r0, &(0x7f0000000080)="5faeb75230b7665a26b952e8aaedbfb8533698c99668806f74e0b063d59d19e7fe2a2d0e13ad6b64e101ca96ca6e0cdd6d7896bd4e176f82cb2b99070dd3e427be036f38b21063915b1dc3369840067ee969c56e6324c5db150d763f3081520ede04b428fd9eddf8", 0x68) 12:33:32 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 12:33:33 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x10000000) 12:33:33 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000004480)) recvmmsg(r1, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) socketpair(0x18, 0x5, 0x8, &(0x7f00000043c0)={0xffffffffffffffff}) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000004400), &(0x7f0000004440)=0x4) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @can={0x1d, 0x0}, @phonet={0x23, 0x20, 0xff, 0x7}, @l2tp={0x2, 0x0, @empty, 0x2}, 0xfff7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x4c}) sendmsg$can_j1939(r0, &(0x7f0000001140)={&(0x7f00000000c0)={0x1d, r4, 0x2, {0x1, 0x0, 0x1}, 0xfd}, 0x18, &(0x7f0000001100)={&(0x7f0000000100)="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", 0x1000}, 0x1, 0x0, 0x0, 0x80}, 0x20040001) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4b, 0x20, &(0x7f0000000000)=0x1) getresuid(&(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200)) 12:33:33 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6401, 0x0, &(0x7f0000000000)) 12:33:33 executing program 5: keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) sched_getparam(0xffffffffffffffff, &(0x7f0000000080)) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x121800, 0x0) 12:33:33 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) 12:33:33 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) [ 2994.538034][ T38] kauditd_printk_skb: 3 callbacks suppressed [ 2994.538049][ T38] audit: type=1326 audit(1621341213.575:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27101 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:33 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6500, 0x0, &(0x7f0000000000)) 12:33:33 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000004480)) recvmmsg(r1, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) socketpair(0x18, 0x5, 0x8, &(0x7f00000043c0)={0xffffffffffffffff}) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000004400), &(0x7f0000004440)=0x4) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @can={0x1d, 0x0}, @phonet={0x23, 0x20, 0xff, 0x7}, @l2tp={0x2, 0x0, @empty, 0x2}, 0xfff7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x4c}) sendmsg$can_j1939(r0, &(0x7f0000001140)={&(0x7f00000000c0)={0x1d, r4, 0x2, {0x1, 0x0, 0x1}, 0xfd}, 0x18, &(0x7f0000001100)={&(0x7f0000000100)="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", 0x1000}, 0x1, 0x0, 0x0, 0x80}, 0x20040001) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4b, 0x20, &(0x7f0000000000)=0x1) 12:33:33 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 12:33:33 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 12:33:33 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) sendmsg$can_j1939(r0, &(0x7f0000001080)={&(0x7f0000000000)={0x1d, 0x0, 0x3, {0x0, 0xff}, 0xfd}, 0x18, &(0x7f0000001040)={&(0x7f0000000040)="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", 0x1000}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) [ 2994.738844][ T38] audit: type=1326 audit(1621341213.775:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27130 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:33 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000004480)) recvmmsg(r1, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) socketpair(0x18, 0x5, 0x8, &(0x7f00000043c0)={0xffffffffffffffff}) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000004400), &(0x7f0000004440)=0x4) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @can={0x1d, 0x0}, @phonet={0x23, 0x20, 0xff, 0x7}, @l2tp={0x2, 0x0, @empty, 0x2}, 0xfff7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x4c}) sendmsg$can_j1939(r0, &(0x7f0000001140)={&(0x7f00000000c0)={0x1d, r4, 0x2, {0x1, 0x0, 0x1}, 0xfd}, 0x18, &(0x7f0000001100)={&(0x7f0000000100)="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", 0x1000}, 0x1, 0x0, 0x0, 0x80}, 0x20040001) 12:33:34 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x1f000000) 12:33:34 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}) 12:33:34 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6501, 0x0, &(0x7f0000000000)) 12:33:34 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 12:33:34 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 12:33:34 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000004480)) recvmmsg(r1, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) socketpair(0x18, 0x5, 0x8, &(0x7f00000043c0)={0xffffffffffffffff}) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000004400), &(0x7f0000004440)=0x4) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @can, @phonet={0x23, 0x20, 0xff, 0x7}, @l2tp={0x2, 0x0, @empty, 0x2}, 0xfff7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x4c}) [ 2995.544816][ T38] audit: type=1326 audit(1621341214.585:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27130 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:34 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6600, 0x0, &(0x7f0000000000)) 12:33:34 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000004480)) recvmmsg(r1, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) socketpair(0x18, 0x5, 0x8, &(0x7f00000043c0)={0xffffffffffffffff}) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000004400), &(0x7f0000004440)=0x4) 12:33:34 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xc480, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000040)=r1) 12:33:34 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) [ 2995.710541][ T38] audit: type=1326 audit(1621341214.745:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27159 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:34 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 12:33:34 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 12:33:35 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x3f000000) 12:33:35 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 12:33:35 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6601, 0x0, &(0x7f0000000000)) 12:33:35 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000004480)) recvmmsg(r1, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) socketpair(0x18, 0x5, 0x8, &(0x7f00000043c0)) 12:33:35 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:33:35 executing program 5: prctl$PR_MCE_KILL(0x2, 0x1, 0x3) keyctl$set_reqkey_keyring(0xe, 0x4) [ 2996.526482][ T38] audit: type=1326 audit(1621341215.565:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27159 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:35 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6700, 0x0, &(0x7f0000000000)) 12:33:35 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 12:33:35 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:33:35 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x2) r0 = syz_io_uring_setup(0x361, &(0x7f0000000000)={0x0, 0x9ee8, 0x10, 0x0, 0x24c}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10010, r0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 12:33:35 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000004480)) recvmmsg(r1, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) [ 2996.713641][ T38] audit: type=1326 audit(1621341215.755:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:35 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6701, 0x0, &(0x7f0000000000)) 12:33:36 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x40000000) 12:33:36 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 12:33:36 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 12:33:36 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6800, 0x0, &(0x7f0000000000)) 12:33:36 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x1d, 0x0, 0x1, {0x2, 0xf0, 0x2}}, 0x18, &(0x7f0000000080)={&(0x7f0000000040)="337d188117d0fc06e6cae91b3e99b377a87055ab6be3c152f24af776377de3f7794046400daa494f708f1857ad145156b0fd0c1f471f9a53ea54364efa17", 0x3e}, 0x1, 0x0, 0x0, 0x20040080}, 0x10) 12:33:36 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) recvmmsg(r1, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) [ 2997.538661][ T38] audit: type=1326 audit(1621341216.575:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:36 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) recvmmsg(r1, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) 12:33:36 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 12:33:36 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 12:33:36 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6801, 0x0, &(0x7f0000000000)) 12:33:36 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) ptrace$getenv(0x4201, r0, 0xb9a, &(0x7f00000000c0)) r1 = getpgrp(0xffffffffffffffff) ptrace$poke(0x4, r1, &(0x7f0000000000), 0xc91) [ 2997.716297][ T38] audit: type=1326 audit(1621341216.755:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27220 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:36 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r1, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) 12:33:37 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x48000000) 12:33:37 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 12:33:37 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6900, 0x0, &(0x7f0000000000)) 12:33:37 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 12:33:37 executing program 5: socketpair(0x9, 0x4, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) prctl$PR_MCE_KILL(0x2, 0x1, 0x0) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000140)={r2, 0x6}) 12:33:37 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) [ 2998.532286][ T38] audit: type=1326 audit(1621341217.575:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27220 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:37 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 12:33:37 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6901, 0x0, &(0x7f0000000000)) 12:33:37 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) 12:33:37 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6a00, 0x0, &(0x7f0000000000)) [ 2998.691807][ T38] audit: type=1326 audit(1621341217.735:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27261 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:37 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) 12:33:37 executing program 5: prctl$PR_MCE_KILL(0x2, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 12:33:38 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x4c000000) 12:33:38 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 12:33:38 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6a01, 0x0, &(0x7f0000000000)) 12:33:38 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 12:33:38 executing program 5: ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x81) memfd_create(&(0x7f0000000080)='}:&u\x00', 0x6) 12:33:38 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) 12:33:38 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6b00, 0x0, &(0x7f0000000000)) 12:33:38 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 12:33:38 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x800026d5, &(0x7f0000000100)={0x0, 0x65c6, 0x0, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x13, 0x1}, 0x6) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, [@null, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x40) 12:33:38 executing program 3: mmap$qrtrtun(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x10, 0xffffffffffffffff, 0xfc) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, {0x10}, {0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x2000000}, {}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) [ 2999.664462][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 2999.664478][ T38] audit: type=1326 audit(1621341218.705:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:38 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) 12:33:38 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) 12:33:39 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x68000000) 12:33:39 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6b01, 0x0, &(0x7f0000000000)) 12:33:39 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 12:33:39 executing program 3: ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x707401, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) 12:33:39 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) 12:33:39 executing program 5: prctl$PR_MCE_KILL(0x2, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) [ 3000.483135][ T38] audit: type=1326 audit(1621341219.525:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27290 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:39 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6c00, 0x0, &(0x7f0000000000)) 12:33:39 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x1f, 0x800, 0x42, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x7800, 0x7800, 0x5, 0x1000}}) sendmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x1d, r1, 0x0, {0x2, 0xf0, 0x1}, 0xff}, 0x18, &(0x7f0000000340)={&(0x7f0000000240)="2cb59d00966d9d59107c5e52b13005f25366e580b14988331a3422dd9b748efe11ff9644be95320e3d037f9719b6efb64c41c4ec2e95e3f69d28bb7107419096416558030a8296eec81e8a1a5baba956b91914ef4a86f8e90502bddbd193fe895327ad69da8438f585d819f2a40234f5166397b423d3317f25777b3ccacfca92ecc63bf360a8034a1b135fbca8c9f4015f34e0f3c83102ef13227c870a5a4186add70490287da237bdf827a99a244e9f0080a3044591a881372a112579c60f7379ea7b45eb520f5299a808111347671e4dc774", 0xd3}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) prctl$PR_MCE_KILL(0x2, 0x1, 0x3) r2 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x200) write$FUSE_WRITE(r2, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x80000001}}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) write$FUSE_IOCTL(r3, &(0x7f00000000c0)={0x20, 0xfffffffffffffff5, 0x0, {0x80000000, 0x0, 0x7, 0x2}}, 0x20) 12:33:39 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) [ 3000.672183][ T38] audit: type=1326 audit(1621341219.715:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27330 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:39 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) 12:33:39 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x7fffffff, 0x1, &(0x7f0000000000)=[0x5f8a], &(0x7f0000000040)=[0x1, 0x9, 0x3df6, 0x800], &(0x7f0000000080)=[0x8, 0x2, 0x2, 0x40cb, 0xfff8, 0x80], &(0x7f00000000c0)=[0xfffa]}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000180)={0x1e0, 0x1780, 0x1e0, 0x21f0, 0x1000, 0x3ff, 0xf, 0x0, {0x2, 0x7}, {0x8187, 0x4008}, {0x0, 0x100}, {0x3, 0x8000, 0x1}, 0x3, 0x0, 0x80, 0x36, 0x1, 0xffffffff, 0x4, 0x3, 0x11, 0x47, 0x2ba, 0x68, 0x21, 0x200, 0x0, 0x2}) 12:33:39 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6c01, 0x0, &(0x7f0000000000)) 12:33:40 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x6c000000) 12:33:40 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 12:33:40 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x2) 12:33:40 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) 12:33:40 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6d00, 0x0, &(0x7f0000000000)) 12:33:40 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) getsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair(0xa, 0x5, 0x3f, &(0x7f0000000180)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) write$uinput_user_dev(r3, &(0x7f00000003c0)={'syz1\x00', {0x0, 0x3, 0x1f, 0x1ff}, 0x4d, [0x1, 0x80, 0x2, 0x20, 0x2, 0x1ff, 0x7, 0x0, 0xfb, 0x0, 0xe0, 0x7, 0x6, 0x9a4, 0x0, 0x4, 0x5, 0x1000, 0x7, 0x9, 0x7fffffff, 0x0, 0x4220, 0x9, 0x7fff, 0x400, 0xffff, 0x7, 0x8000, 0x4, 0x0, 0x6, 0x8, 0x4, 0x10000, 0xed, 0x6, 0x7fffffff, 0xa67, 0x3, 0x1, 0xffffffff, 0x8, 0x100, 0x101, 0xffff, 0x9, 0x4, 0x2, 0x80000001, 0x7, 0x9, 0x2, 0x7ff, 0xfff, 0x800, 0x8, 0x8, 0x3, 0x1, 0x100, 0x84, 0x20, 0x5], [0xfffffffa, 0x3, 0x1, 0xa6f, 0x6, 0xfffffffe, 0x7, 0x20000000, 0xffffffff, 0x3, 0x9, 0x2, 0x3, 0x2, 0x9, 0x15, 0x800, 0x6cd7, 0x8, 0xe0f3, 0x9, 0x7, 0x0, 0x9, 0x1, 0x200, 0x1480000, 0x5, 0x8, 0x4, 0x3ff, 0x8, 0x0, 0x3, 0x3, 0x8, 0x24, 0xffffb06c, 0x8, 0x7, 0xeb6, 0x8, 0x1, 0x9, 0x169f, 0x9, 0x80000000, 0x6, 0x5, 0x1, 0x3, 0x8, 0x3, 0x6a, 0x0, 0xd63, 0x8, 0xdf48, 0xdce, 0xb, 0x0, 0x3, 0x400, 0xcfa], [0x4cfcc1a1, 0x80, 0x101, 0x5, 0x3, 0x9, 0x8, 0x545b, 0x1, 0x3, 0xfffffffd, 0x8, 0x10001, 0x3, 0x1a39, 0x2, 0x3, 0x7ff, 0x6, 0x101, 0x7, 0x1, 0x8, 0x7, 0x3, 0x4, 0x974, 0xffffffff, 0xb8, 0x0, 0xcf, 0x8, 0x2, 0x9, 0x1, 0x2, 0x7, 0x2, 0x0, 0x5, 0x6, 0x1, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1f, 0x1, 0x7fffffff, 0xfffff001, 0x0, 0x10001, 0x2, 0xffff, 0x9, 0xfd47, 0x3ff, 0x6, 0x0, 0x4, 0x770, 0x1002, 0x7fffffff], [0x1f, 0xfff, 0x1, 0x200, 0x1, 0x9, 0x5c, 0x1, 0x6, 0x100, 0x8, 0x6, 0x42, 0x101, 0x2, 0x2, 0x200, 0x8, 0xffffff2f, 0x8000, 0x20, 0x4ff, 0xff, 0x0, 0x5, 0x5, 0xffffffff, 0xf200, 0x8, 0x1, 0x7fffffff, 0x4, 0x4, 0x4, 0x8, 0x3, 0x101, 0x6a, 0x9, 0x9de1, 0xeb0, 0x6, 0x44f, 0x0, 0x2, 0x80000000, 0x2, 0xff, 0x9, 0xf2a, 0xb89, 0x0, 0x1, 0x81, 0x7fffffff, 0x3ff, 0x7, 0x5, 0x6b287c81, 0x8, 0x5, 0x9, 0x2, 0xd240]}, 0x45c) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000000)={0xf, 0x3, {0x54, 0x7, 0x7f, {0x7, 0x8}, {0x28, 0x3ff}, @rumble={0x1, 0x2f1a}}, {0x52, 0x8, 0x89, {0x0, 0xb1}, {0x2, 0x5}, @const={0x2, {0x0, 0xd7b, 0x7ff, 0x4}}}}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x10}) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000140)='syz1\x00') [ 3001.500815][ T38] audit: type=1326 audit(1621341220.535:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27330 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:40 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x8000000) 12:33:40 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6d01, 0x0, &(0x7f0000000000)) 12:33:40 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}, {{&(0x7f0000003f80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000004140)=[{&(0x7f0000004000)=""/119, 0x77}, {&(0x7f0000004080)=""/180, 0xb4}], 0x2, &(0x7f0000004180)=""/249, 0xf9}, 0x800}], 0x4, 0x2040, &(0x7f0000004380)={0x77359400}) 12:33:40 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) [ 3001.701610][ T38] audit: type=1326 audit(1621341220.735:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27358 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:40 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 12:33:40 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6e00, 0x0, &(0x7f0000000000)) 12:33:41 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x74000000) 12:33:41 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, 0x0, 0x0, 0x2040, &(0x7f0000004380)={0x77359400}) 12:33:41 executing program 3: getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) setitimer(0x1, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000040)) 12:33:41 executing program 5: prctl$PR_MCE_KILL(0x2, 0x1, 0x2) fork() prctl$PR_MCE_KILL(0x21, 0x1, 0x2) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 12:33:41 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) 12:33:41 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6e01, 0x0, &(0x7f0000000000)) [ 3002.517284][ T38] audit: type=1326 audit(1621341221.555:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27358 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:41 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, 0x0, 0x0, 0x2040, &(0x7f0000004380)={0x77359400}) 12:33:41 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @qipcrtr, @xdp={0x2c, 0xd, 0x0, 0x1c}, @phonet={0x23, 0x20, 0x1, 0x5}, 0x8, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='wg2\x00', 0x6, 0x9, 0x8}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r1, 0x3, {0x1}}, 0x18) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000000)={0x28}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_bt_cmtp_CMTPCONNADD(r3, 0x400443c8, &(0x7f00000001c0)={r4, 0xfff}) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000240)) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) 12:33:41 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6f00, 0x0, &(0x7f0000000000)) 12:33:41 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}) 12:33:41 executing program 5: prctl$PR_MCE_KILL(0x2, 0x1, 0x1) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) [ 3002.741784][ T38] audit: type=1326 audit(1621341221.755:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27400 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:41 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, 0x0, 0x0, 0x2040, &(0x7f0000004380)={0x77359400}) 12:33:42 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x7a000000) 12:33:42 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6f01, 0x0, &(0x7f0000000000)) 12:33:42 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) 12:33:42 executing program 3: shmctl$SHM_UNLOCK(0x0, 0xc) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:33:42 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000000)="832f7648b9436eb8c4b352aac930846b83ed099b930065a581f28b7ab5003bcef68c8321d90045347a942ba5c3f2d99c0f708dbcb29d89e53f44df8b373a6b800d11b0d3f07dda1a4aaae022edc09cc40f530c377053100dd97928e9f93b352ae372441e85b2de3249837c85798f2b9cccef125e8d734541186fa0599554926817020f8f131fb43050b9fbb3a729603ee18ed03e381bb8b05ff309941e0715009380f3f7e4ab54a5015b", 0xaa) 12:33:42 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}, {{&(0x7f00000029c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/173, 0xad}, {&(0x7f0000003b00)=""/13, 0xd}, {&(0x7f0000003b40)=""/242, 0xf2}, {&(0x7f0000003c40)=""/130, 0x82}, {&(0x7f0000003d00)=""/127, 0x7f}, {&(0x7f0000003d80)=""/171, 0xab}], 0x7, &(0x7f0000003ec0)=""/161, 0xa1}, 0x43}], 0x3, 0x2040, &(0x7f0000004380)={0x77359400}) [ 3003.533424][ T38] audit: type=1326 audit(1621341222.575:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27400 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:42 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}, {{&(0x7f0000001540)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002880)=[{&(0x7f00000015c0)=""/220, 0xdc}, {&(0x7f00000016c0)=""/177, 0xb1}, {&(0x7f0000001780)=""/104, 0x68}, {&(0x7f0000001800)=""/38, 0x26}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/40, 0x28}], 0x6, &(0x7f0000002900)=""/177, 0xb1}, 0x3ff}], 0x2, 0x2040, &(0x7f0000004380)={0x77359400}) 12:33:42 executing program 5: prctl$PR_MCE_KILL(0x2, 0x1, 0x0) 12:33:42 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 12:33:42 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000400)={0x10, 0x400, 0x640, 0x258, 0x1, 0x800, 0x10, 0x1, {0x3ff, 0x4}, {0x5, 0x80}, {0x0, 0x47, 0x1}, {0x7, 0x800}, 0x1, 0x80, 0x10001, 0x9, 0x0, 0x2, 0x1, 0x80000000, 0x0, 0x7, 0x26a, 0x40, 0x1d, 0x1, 0x1, 0x6}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f00000003c0)={0x3, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0]}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) getsockname(r3, &(0x7f00000004c0)=@ipx, &(0x7f0000000540)=0x80) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000000)={@any, 0x6}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {0xfffffffd}}) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000180)={0x8, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) 12:33:42 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7000, 0x0, &(0x7f0000000000)) [ 3003.709272][ T38] audit: type=1326 audit(1621341222.745:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27434 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:42 executing program 5: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x5010c3, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x2) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2) 12:33:43 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0xa1ffffff) 12:33:43 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000001500)=[{&(0x7f0000001300)=""/178, 0xb2}, {&(0x7f00000013c0)=""/21, 0x15}, {&(0x7f0000001400)=""/107, 0x6b}, {&(0x7f0000001480)=""/93, 0x5d}], 0x4}, 0x10001}], 0x1, 0x2040, &(0x7f0000004380)={0x77359400}) 12:33:43 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7001, 0x0, &(0x7f0000000000)) 12:33:43 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 12:33:43 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOGETCMAP(r1, 0x4020940d, &(0x7f0000000200)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x384, 0x20, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 12:33:43 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_IOCTL(r2, &(0x7f00000020c0)={0x20, 0xfffffffffffffffe, r1, {0xffff3e58, 0x4, 0x3, 0x80}}, 0x20) [ 3004.535289][ T38] audit: type=1326 audit(1621341223.575:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27434 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:43 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 12:33:43 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000004280), 0x0, 0x2040, &(0x7f0000004380)={0x77359400}) 12:33:43 executing program 5: prctl$PR_MCE_KILL(0x2, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 12:33:43 executing program 3: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast2}, &(0x7f0000000080)=0x80) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xc}, {}, {}, {}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f00000000c0)=0x1) 12:33:43 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7100, 0x0, &(0x7f0000000000)) [ 3004.752060][ T38] audit: type=1326 audit(1621341223.795:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27473 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:43 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000004280), 0x0, 0x2040, &(0x7f0000004380)={0x77359400}) 12:33:44 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0xe7000000) 12:33:44 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 12:33:44 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7101, 0x0, &(0x7f0000000000)) 12:33:44 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) 12:33:44 executing program 3: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x40, 0x10, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, {0x4010}, {}, {}, {0x0, 0x0, 0x1}, 0x0, 0x2}) 12:33:44 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000004280), 0x0, 0x2040, &(0x7f0000004380)={0x77359400}) [ 3005.560578][ T38] audit: type=1326 audit(1621341224.595:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27473 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 3005.582606][ C1] vkms_vblank_simulate: vblank timer overrun 12:33:44 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, 0x0}, 0x10001}], 0x1, 0x2040, &(0x7f0000004380)={0x77359400}) 12:33:44 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x505000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x640, 0x140, 0x400, 0x10, 0x8000, 0x8001, 0x8, 0x0, {0x800, 0x63}, {0x9, 0x2, 0x1}, {0x6, 0x4, 0x1}, {0x2, 0x20}, 0x2, 0x10, 0x1, 0x0, 0x1, 0x4, 0x6, 0xfffffff8, 0x1000, 0xffffff81, 0x8, 0x3ff, 0x30, 0x302, 0x0, 0x8}) [ 3005.699902][ T38] audit: type=1326 audit(1621341224.735:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27499 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:44 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 12:33:44 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7200, 0x0, &(0x7f0000000000)) 12:33:44 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x1ff, 0x2) 12:33:44 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, 0x0}}], 0x1, 0x2040, &(0x7f0000004380)={0x77359400}) 12:33:45 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0xfeffffff) 12:33:45 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7201, 0x0, &(0x7f0000000000)) 12:33:45 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x190, 0x0, 0x10000, 0x0, 0x0, 0x0, {0x10, 0x85fc}, {0x5}, {}, {}, 0x3}) 12:33:45 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000004380)={0x77359400}) 12:33:45 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 12:33:45 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000100), 0x3, 0x101880) connect$can_j1939(r0, &(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x2, 0xf0, 0x4}, 0x2}, 0x18) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000080)=0x8) [ 3006.526695][ T38] audit: type=1326 audit(1621341225.565:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27499 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:45 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 12:33:45 executing program 3: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x6}, 0x8) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x18000, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x40, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x5bd71c45, 0x0, 0x0, {0x10}, {0xeeb}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8a, 0x30}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x9}, 0x8) 12:33:45 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$getown(r0, 0x9) read$FUSE(r1, &(0x7f0000002180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f00000041c0)={0x18, 0xffffffffffffffdc, r2}, 0x18) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@isdn, &(0x7f0000000000)=0x80) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x204000, 0x0) write$FUSE_LSEEK(r3, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, r2, {0x5}}, 0x18) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:33:45 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7300, 0x0, &(0x7f0000000000)) [ 3006.718006][ T38] audit: type=1326 audit(1621341225.755:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27533 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:45 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 12:33:45 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}) [ 3007.531795][ T38] audit: type=1326 audit(1621341226.575:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27533 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:46 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0xffffff7f) 12:33:46 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7301, 0x0, &(0x7f0000000000)) 12:33:46 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40) 12:33:46 executing program 3: ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000080)=0x80000001) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000140)=0x3, &(0x7f0000000180)=0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f00000000c0)={0x20, 0xfffffffffffffffe, r3, {0x8, 0x0, 0x1, 0x3}}, 0x20) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f0000000040)={0x20}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x1e0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x400010}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0x7, 0x304}) 12:33:46 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) 12:33:46 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000004380)={0x77359400}) 12:33:46 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7400, 0x0, &(0x7f0000000000)) 12:33:46 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0x0, 0x4}}) 12:33:46 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x1) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000000)={@none, 0x1000}) 12:33:46 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) [ 3007.717789][ T38] audit: type=1326 audit(1621341226.755:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27566 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:46 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7401, 0x0, &(0x7f0000000000)) 12:33:46 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x1000, 0x800, 0xc80, 0x600, 0x6, 0x5, 0x4, 0x2, {0x800005, 0x7}, {0x6, 0x9, 0x1}, {0x6, 0x1f, 0x1}, {0x1, 0x1}, 0x2, 0x150, 0x4, 0x12, 0x0, 0x7, 0x4, 0x59, 0x4, 0x8, 0x3, 0x101, 0xb1a65e931182723b, 0x200, 0x0, 0x8}) 12:33:47 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0xffffffa1) 12:33:47 executing program 5: socket(0xb, 0xa, 0x7fff) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x103200) socket(0x2, 0x80000, 0x40) 12:33:47 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7500, 0x0, &(0x7f0000000000)) 12:33:47 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:33:47 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x6, 0x5, 0x0, 0x100, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1}, 0x40) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r2, 0x0, &(0x7f0000000140)="9f40b10c9a63a9c703e9b1cda6b4875678a4194606c9be0e0f73de828bea8578f1825486f434645fa950930a12a2f8dae6c5ff394cb9c4ff50860ccfc1e2edba8c5fb2847a6466175a39e5b9d52bb7dd04edf278b2218da60b73ad4dd8886f21e462fef51d020c0759795071bb6d587671303b142c3d5b373ff21f7e32b05d6e53b784aa14060eff1a6c21f20081bc181f63", 0x92, 0x40, 0x1}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0x1, 0x80000001, 0xe8, 0x4, r1, 0x9, '\x00', 0x0, r2, 0x4, 0x6, 0x1}, 0x40) 12:33:47 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000004380)={0x77359400}) [ 3008.538127][ T38] audit: type=1326 audit(1621341227.575:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27566 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:47 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:33:47 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, {0x10, 0x7}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0xf00, 0x30, 0xa0, 0x280, 0x2a5, 0x1, 0x10, 0x0, {0x401, 0x8f1, 0x1}, {0x3, 0x6}, {0x10001, 0xfffffffc, 0x1}, {0x4, 0x68, 0x1}, 0x0, 0x40, 0xffffffc0, 0x40, 0x0, 0x80000001, 0x7f, 0x5, 0x9, 0xc76, 0x9, 0x0, 0x4, 0x1, 0x1, 0x1}) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000200)) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000)) [ 3008.731444][ T38] audit: type=1326 audit(1621341227.765:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27599 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:47 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7501, 0x0, &(0x7f0000000000)) 12:33:47 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(0x0, r1, 0x0) r2 = geteuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) r4 = fork() r5 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x2, r1, 0xffffffffffffffff, r2, r3, 0x41, 0x3}, 0x5, 0xf562b9f, 0x5, 0x10001, r4, r5, 0x4}) 12:33:47 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 12:33:47 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7600, 0x0, &(0x7f0000000000)) 12:33:48 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0xfffffffe) 12:33:48 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x1000, 0x0, 0x2000000, 0x0, 0x0, {0x14, 0x0, 0x1}, {}, {}, {}, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x1, 0x6}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x578, 0x258, 0x12e48fba15ea6a32, 0x10, 0x4, 0xff, 0x20, 0x0, {0x8, 0x4, 0x1}, {0x0, 0x7, 0x1}, {0x1, 0x89a}, {0x9, 0x7}, 0x1, 0x80, 0x9, 0x4, 0x1, 0x4, 0x9, 0xfffffffa, 0x5, 0x9, 0x7, 0xed30, 0x2, 0x4, 0x2, 0xa}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r2, &(0x7f0000000140)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x1, @default}, 0x1c) 12:33:48 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 12:33:48 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x20000000}, @vsock={0x28, 0x0, 0x2710, @host}, @ax25={0x3, @default, 0x2}, 0x400, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfff, 0x7, 0x8}) 12:33:48 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7601, 0x0, &(0x7f0000000000)) 12:33:48 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, 0x0}}], 0x1, 0x2040, 0x0) [ 3009.558461][ T38] audit: type=1326 audit(1621341228.595:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27599 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:48 executing program 5: fork() r0 = fork() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000140)) ptrace$cont(0x1f, r0, 0xf5c, 0xe8) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:33:48 executing program 3: ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000000)='syz0\x00') r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xffffffff}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) read$fb(r1, &(0x7f00000003c0)=""/4096, 0x1000) 12:33:48 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7700, 0x0, &(0x7f0000000000)) 12:33:48 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000004280)=[{{0xfffffffffffffffd, 0x0, 0x0}}], 0x1, 0x2040, 0x0) 12:33:48 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 12:33:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) read$qrtrtun(r0, &(0x7f0000000000)=""/208, 0xd0) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:33:49 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x20000000000000) 12:33:49 executing program 2: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffd000/0x2000)=nil) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(0x0, r1, 0x0) r2 = geteuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) r4 = fork() r5 = getpid() shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x2, r1, 0xffffffffffffffff, r2, r3, 0x41, 0x3}, 0x5, 0xf562b9f, 0x5, 0x10001, r4, r5, 0x4}) 12:33:49 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0x20, 0xa0, 0x80, 0x360, 0x8, 0x1, 0xf, 0x0, {0x2, 0x40, 0x1}, {0x7, 0xb8}, {0x9, 0x8}, {0x7f, 0x547e, 0x1}, 0x4, 0x0, 0x60, 0xffff7fff, 0x1, 0x2, 0x7d4, 0x6, 0x6, 0x0, 0x4, 0x10001, 0x0, 0x2, 0x0, 0xb}) 12:33:49 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7701, 0x0, &(0x7f0000000000)) 12:33:49 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 12:33:49 executing program 5: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7, 0x2010, 0xffffffffffffffff, 0x8000000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r1, 0x0, &(0x7f0000000000)='./file0\x00', 0x100, 0x200, 0x23456}, 0x2) prctl$PR_MCE_KILL(0x2, 0x1, 0x2) [ 3010.547664][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 3010.547679][ T38] audit: type=1326 audit(1621341229.585:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27648 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:49 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7800, 0x0, &(0x7f0000000000)) 12:33:49 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x440880, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x7c) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {0x1}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x2f, 0x3f, 0x81, 0x8, 0x48, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x7800, 0x100, 0x10001}}) 12:33:49 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 12:33:49 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) [ 3010.738454][ T38] audit: type=1326 audit(1621341229.775:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27682 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:49 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) read$qrtrtun(r0, &(0x7f0000000000)=""/208, 0xd0) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:33:49 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7801, 0x0, &(0x7f0000000000)) 12:33:50 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x100000000000000) 12:33:50 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f00000001c0)) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000140)={0x80000000, 0x2, 0x2, 0x7, &(0x7f0000000040)=[{}, {}]}) 12:33:50 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x1000, 0x800, 0xc80, 0x600, 0x6, 0x5, 0x4, 0x2, {0x800005, 0x7}, {0x6, 0x9, 0x1}, {0x6, 0x1f, 0x1}, {0x1, 0x1}, 0x2, 0x150, 0x4, 0x12, 0x0, 0x7, 0x4, 0x59, 0x4, 0x8, 0x3, 0x101, 0xb1a65e931182723b, 0x200, 0x0, 0x8}) 12:33:50 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 12:33:50 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7900, 0x0, &(0x7f0000000000)) 12:33:50 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(0x0, r1, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getpid() r4 = fork() rt_tgsigqueueinfo(0x0, r4, 0x0, &(0x7f0000000140)) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000140)={{0x0, r1, r2, 0x0, 0x0, 0x180, 0x81}, 0x8000, 0x203b701a, 0x7, 0x20, r3, r4, 0x6b96}) [ 3011.553069][ T38] audit: type=1326 audit(1621341230.595:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27682 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:50 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOGETCMAP(r1, 0x4020940d, &(0x7f0000000200)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x384, 0x20, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0xffffffff, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 12:33:50 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) 12:33:50 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7901, 0x0, &(0x7f0000000000)) 12:33:50 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) read$fb(r1, &(0x7f0000000040)=""/170, 0xaa) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0x0, 0x2}}) r2 = syz_open_dev$media(&(0x7f0000000140), 0x3, 0x20000) fcntl$getown(r2, 0x9) [ 3011.768534][ T38] audit: type=1326 audit(1621341230.805:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27722 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:50 executing program 5: prctl$PR_MCE_KILL(0x2, 0x1, 0x4) prctl$PR_MCE_KILL(0x21, 0x0, 0xbe7c72df6b6a353e) 12:33:50 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 12:33:51 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x200000000000000) 12:33:51 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 12:33:51 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7a00, 0x0, &(0x7f0000000000)) 12:33:51 executing program 3: ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x3) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) 12:33:51 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 12:33:51 executing program 5: prctl$PR_MCE_KILL(0x2, 0x1, 0x1) [ 3012.580071][ T38] audit: type=1326 audit(1621341231.615:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27722 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 3012.602644][ C0] vkms_vblank_simulate: vblank timer overrun 12:33:51 executing program 2: prctl$PR_MCE_KILL(0x16, 0x1, 0x3f000000) 12:33:51 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7a01, 0x0, &(0x7f0000000000)) 12:33:51 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000000)) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000180)={0x6, 0x2, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) [ 3012.751185][ T38] audit: type=1326 audit(1621341231.785:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27760 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:51 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x140, 0x1e0, 0x190, 0x640, 0x27b05929, 0x7fff, 0x4, 0x0, {0x1ff, 0x9, 0x1}, {0x5, 0x5}, {0x3f, 0x4}, {0x2, 0x5, 0x1}, 0x2, 0x1, 0x285e, 0x6, 0x0, 0x7, 0xe89, 0x8, 0x1ff, 0x8, 0x0, 0x101, 0x4, 0x200, 0x3, 0xf}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 12:33:51 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) [ 3012.842684][ T38] audit: type=1326 audit(1621341231.785:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27761 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:51 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7b00, 0x0, &(0x7f0000000000)) 12:33:52 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x300000000000000) 12:33:52 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 12:33:52 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f00000000c0)={0x2c, 0x2}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) 12:33:52 executing program 5: mlockall(0x4) prctl$PR_MCE_KILL(0x2, 0x1, 0x0) 12:33:52 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7b01, 0x0, &(0x7f0000000000)) 12:33:52 executing program 2: prctl$PR_MCE_KILL(0x2, 0x1, 0x1) [ 3013.579255][ T38] audit: type=1326 audit(1621341232.615:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27760 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 3013.601276][ C0] vkms_vblank_simulate: vblank timer overrun 12:33:52 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 12:33:52 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) [ 3013.726844][ T38] audit: type=1326 audit(1621341232.765:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27792 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:52 executing program 3: shmget(0x0, 0x4000, 0x10, &(0x7f0000ff9000/0x4000)=nil) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0x4}, 0x2) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000000)={0x10, 0x1}) r2 = shmget$private(0x0, 0x1000, 0x200, &(0x7f0000ffa000/0x1000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) 12:33:52 executing program 2: prctl$PR_MCE_KILL(0x16, 0x1, 0x9000000) 12:33:52 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7c00, 0x0, &(0x7f0000000000)) 12:33:52 executing program 5: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000040)={{0x3, 0x3, 0x0, 0x10000, '\x00', 0x81}, 0x4, 0x30, 0x6a, 0x0, 0x1, 0x8fe, 'syz1\x00', &(0x7f0000000000)=['\x00'], 0x1, '\x00', [0x4, 0x8230, 0x8, 0x2]}) prctl$PR_MCE_KILL(0x2, 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 3013.887905][ T38] audit: type=1326 audit(1621341232.925:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27802 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:53 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x400000000000000) 12:33:53 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) 12:33:53 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7c01, 0x0, &(0x7f0000000000)) 12:33:53 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x9}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x1, 0xf0, 0x2}, 0xff}, 0x18) 12:33:53 executing program 5: prctl$PR_MCE_KILL(0x2, 0x1, 0x1) 12:33:53 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7d00, 0x0, &(0x7f0000000000)) 12:33:53 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}) 12:33:53 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 12:33:53 executing program 5: prctl$PR_MCE_KILL(0x2, 0x1, 0x2) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)="fa96105570788fbdc95d15f29c35e5d5ad70b4c04ec4932f0acc177fcb2cb598090056c10013adb4", 0x28}, 0x1, 0x0, 0x0, 0x4014}, 0x2000c001) 12:33:53 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000140)={0xb3, 0x9, &(0x7f0000000000)=[0x6, 0x7ff, 0x88b, 0xbe7d, 0x7fff, 0x40, 0x5, 0x1, 0x5], &(0x7f0000000040)=[0x7, 0x5, 0x799f], &(0x7f0000000080)=[0x5c, 0x7, 0x1], &(0x7f00000000c0)=[0xffe1, 0x7]}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f00000001c0)={0x33, 0x1}) 12:33:53 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) 12:33:53 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7d01, 0x0, &(0x7f0000000000)) 12:33:54 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x500000000000000) 12:33:54 executing program 2: r0 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r0, 0x9, 0xa60) r1 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) ptrace$poke(0x4, r0, &(0x7f0000000100), 0x2) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/219) prctl$PR_MCE_KILL(0x3, 0x1, 0x1) 12:33:54 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) 12:33:54 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) getsockname(r0, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000080)=0x80) 12:33:54 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7e00, 0x0, &(0x7f0000000000)) 12:33:54 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) [ 3015.558153][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 3015.558168][ T38] audit: type=1326 audit(1621341234.595:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27830 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:54 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7e01, 0x0, &(0x7f0000000000)) 12:33:54 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 12:33:54 executing program 2: r0 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r0, 0x9, 0xa60) r1 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) ptrace$poke(0x4, r0, &(0x7f0000000100), 0x2) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/219) prctl$PR_MCE_KILL(0x3, 0x1, 0x1) [ 3015.719440][ T38] audit: type=1326 audit(1621341234.755:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27873 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:54 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x640, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x4}) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x400, 0x600, 0x10, 0x384, 0x7, 0x0, 0x1, 0x0, {0x4, 0x1}, {0xffff07b1, 0xfc}, {0xe8b8, 0x1}, {0x3ff, 0x7fff}, 0x2, 0x1, 0x0, 0x7, 0x0, 0x9, 0x1ff, 0x40, 0x6, 0xcca1, 0x2, 0x9, 0x0, 0x0, 0x3, 0x5}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x21, 0x6, 0x2200, 0x1, 0x5ca, 0xffffffff, 0xffff8000}}, 0x50) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) recvmmsg(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0xfffffffffffffffe, 0x0, &(0x7f0000000240)=""/74, 0x4a}, 0x3}], 0x1, 0x40000040, &(0x7f00000002c0)={0x77359400}) 12:33:54 executing program 5: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x780, 0x80, 0x356, 0xf0, 0x3, 0x2400, 0xf, 0x2, {0xecb, 0x2}, {0x5, 0x9}, {0x6, 0xffffffff, 0x8}, {0xaea7, 0xda, 0x1}, 0x1, 0x80, 0x19c00000, 0x0, 0x0, 0x7fff, 0x80000000, 0x3, 0x8, 0x283, 0x5, 0x5, 0x12, 0x2, 0x1, 0xb}) prctl$PR_MCE_KILL(0x2, 0x0, 0x1) read$fb(0xffffffffffffffff, &(0x7f00000000c0)=""/18, 0x12) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x0) 12:33:54 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7f00, 0x0, &(0x7f0000000000)) 12:33:55 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x600000000000000) 12:33:55 executing program 2: r0 = getpgrp(0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r0, 0x9, 0xa60) r1 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) ptrace$poke(0x4, r0, &(0x7f0000000100), 0x2) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/219) prctl$PR_MCE_KILL(0x3, 0x1, 0x1) 12:33:55 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 12:33:55 executing program 5: prctl$PR_MCE_KILL(0x16, 0x1, 0x400000000000000) 12:33:55 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7f01, 0x0, &(0x7f0000000000)) 12:33:55 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x11, 0x0, 0x4000000}, {}, {}, {0x2004}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x4}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000180), 0x200001, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000001c0)={0x1e0, 0x400, 0x0, 0x1000, 0xffff87f6, 0x6, 0xf, 0x2, {0xbb}, {0x3ed, 0x200}, {0x8000, 0x0, 0x1}, {0x1, 0x20}, 0x0, 0x80, 0x3ff, 0x7fff, 0x1, 0x9, 0xff, 0x8, 0x9, 0xfffffc00, 0x81, 0xf3, 0x8, 0x1, 0x1, 0x8}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80081, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x400002, 0x0) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f0000000040)) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000140)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14) [ 3016.544907][ T38] audit: type=1326 audit(1621341235.585:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27873 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:55 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8100, 0x0, &(0x7f0000000000)) [ 3016.692902][ T38] audit: type=1326 audit(1621341235.735:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27903 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:55 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 12:33:55 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x20000000}) 12:33:55 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000000)) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000080)={0x5, 0x7c, 0x2}) 12:33:55 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8101, 0x0, &(0x7f0000000000)) [ 3016.789762][ T38] audit: type=1326 audit(1621341235.735:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27915 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:55 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 12:33:56 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x700000000000000) 12:33:56 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 12:33:56 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000000)) 12:33:56 executing program 2: prctl$PR_MCE_KILL(0x2, 0x0, 0xf04a0000000000) 12:33:56 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8200, 0x0, &(0x7f0000000000)) 12:33:56 executing program 5: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) [ 3017.524023][ T38] audit: type=1326 audit(1621341236.565:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27915 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:56 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8201, 0x0, &(0x7f0000000000)) 12:33:56 executing program 2: prctl$PR_MCE_KILL(0x3, 0x0, 0x2) 12:33:56 executing program 5: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) 12:33:56 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) [ 3017.706222][ T38] audit: type=1326 audit(1621341236.745:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27954 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:56 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x12, 0x1}) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x9) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000040)) 12:33:56 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8300, 0x0, &(0x7f0000000000)) 12:33:57 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x800000000000000) 12:33:57 executing program 2: prctl$PR_MCE_KILL(0x16, 0x1, 0x600) 12:33:57 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 12:33:57 executing program 5: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) 12:33:57 executing program 3: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0xc80, 0x0, 0x0, 0x800000, 0x18, 0x0, {0x10}, {}, {}, {}, 0x0, 0x1, 0x0, 0xf520, 0x0, 0x0, 0x3, 0x0, 0xffffef26}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000040)={0x3c0, 0x10, 0x3c00, 0x384, 0xe5, 0x81, 0x2, 0x0, {0x1, 0x28000000}, {0x3, 0x9fc, 0x1}, {0x0, 0x81}, {0xffffffc1, 0x9, 0x1}, 0x9bb0235fd2c89861, 0x100, 0x2e, 0xffffffff, 0x0, 0x7, 0x7fffffff, 0x8001, 0x82, 0xf67, 0x10001, 0x7, 0x1c, 0x2, 0x3, 0x7}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0xf9) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x3) 12:33:57 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8301, 0x0, &(0x7f0000000000)) [ 3018.524987][ T38] audit: type=1326 audit(1621341237.565:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27954 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:57 executing program 5: prctl$PR_MCE_KILL(0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) [ 3018.663258][ T38] audit: type=1326 audit(1621341237.705:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27981 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:57 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}) 12:33:57 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8400, 0x0, &(0x7f0000000000)) 12:33:57 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) [ 3018.704907][ T38] audit: type=1326 audit(1621341237.735:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=27993 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:57 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) 12:33:57 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) 12:33:58 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x900000000000000) 12:33:58 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x90001, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x3c0, 0x2000, 0x140, 0x258, 0x3, 0x4, 0x7, 0x2, {0x8a5, 0x1, 0x829}, {0x7, 0xd9, 0x1}, {0x0, 0xffffff72, 0x1}, {0x4, 0x80000000}, 0x0, 0x10, 0x4, 0xfff, 0x0, 0x0, 0x6, 0x3f, 0x1000, 0x6, 0x1ff, 0x5, 0x1, 0x200, 0x0, 0xb}) 12:33:58 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8401, 0x0, &(0x7f0000000000)) 12:33:58 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 12:33:58 executing program 5: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x105000, 0x0) 12:33:58 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) 12:33:58 executing program 5: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x105000, 0x0) 12:33:58 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) [ 3019.683047][ T3246] ieee802154 phy0 wpan0: encryption failed: -22 [ 3019.689580][ T3246] ieee802154 phy1 wpan1: encryption failed: -22 12:33:58 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x10e80, 0x0) 12:33:58 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) 12:33:58 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8500, 0x0, &(0x7f0000000000)) 12:33:58 executing program 5: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x105000, 0x0) 12:33:59 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0xa00000000000000) 12:33:59 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:33:59 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8501, 0x0, &(0x7f0000000000)) 12:33:59 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) 12:33:59 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) r1 = fork() getpgid(r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x402040, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) ptrace$poke(0x5, r3, &(0x7f0000000140), 0x0) getpid() ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f0000000040)={0x28, 0x2}) 12:33:59 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 12:33:59 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8600, 0x0, &(0x7f0000000000)) 12:33:59 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 3020.626337][ T38] kauditd_printk_skb: 3 callbacks suppressed [ 3020.626354][ T38] audit: type=1326 audit(1621341239.665:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28054 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:33:59 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 12:33:59 executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x105000, 0x0) 12:33:59 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0xf0, 0x14d8, 0x640, 0x360, 0x52, 0x9, 0x8, 0x2, {0x5, 0x23}, {0xfffffffb, 0x9, 0x1}, {0x0, 0x1}, {0x6, 0x80000001}, 0x2, 0x1, 0x7ff, 0x9, 0x0, 0x5, 0x20, 0x0, 0x1ab0, 0x2, 0xe2, 0x8, 0x2, 0x4, 0x2, 0x7}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0xfffffffe}, {0x2000000}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0xfffff801, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}) 12:33:59 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8601, 0x0, &(0x7f0000000000)) 12:34:00 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0xc00000000000000) 12:34:00 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 12:34:00 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8700, 0x0, &(0x7f0000000000)) 12:34:00 executing program 5: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 12:34:00 executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x105000, 0x0) 12:34:00 executing program 3: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) [ 3021.453268][ T38] audit: type=1326 audit(1621341240.495:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28054 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:00 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 12:34:00 executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x105000, 0x0) [ 3021.611686][ T38] audit: type=1326 audit(1621341240.655:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28084 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:00 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8701, 0x0, &(0x7f0000000000)) 12:34:00 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x82100, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000300)={0x280, 0x78, 0x140, 0x0, 0x0, 0x800000, 0x0, 0x0, {0x10}, {}, {}, {0x7}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x1c0}, 0x8) 12:34:00 executing program 5: prctl$PR_MCE_KILL(0x16, 0x1, 0x900000000000000) 12:34:00 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) [ 3021.768849][ T38] audit: type=1326 audit(1621341240.805:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28095 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 3022.439399][ T38] audit: type=1326 audit(1621341241.475:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28084 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:01 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x1000000000000000) 12:34:01 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x3c00, 0x640, 0xc80, 0x40, 0x6, 0x6, 0x20, 0x0, {0x10000, 0x4}, {0x491e, 0x2}, {0x3, 0x1ff}, {0x7ff, 0x1000, 0x1}, 0x0, 0x80, 0x387, 0x5bd, 0x1, 0x8000, 0x1000, 0x3ff, 0x81, 0x3f, 0x4, 0xffffffff, 0x1, 0x1, 0x3, 0x3}) 12:34:01 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8800, 0x0, &(0x7f0000000000)) 12:34:01 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 12:34:01 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 12:34:01 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8801, 0x0, &(0x7f0000000000)) 12:34:01 executing program 5: prctl$PR_MCE_KILL(0x16, 0x1, 0x900000000000000) 12:34:01 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 3022.616550][ T38] audit: type=1326 audit(1621341241.655:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28111 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:01 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 12:34:01 executing program 3: socketpair(0x25, 0x4, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair(0xb, 0x2, 0x4, &(0x7f0000000900)={0xffffffffffffffff}) connect$802154_dgram(r2, &(0x7f0000000940)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) getresgid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) 12:34:01 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8900, 0x0, &(0x7f0000000000)) [ 3022.710553][ T38] audit: type=1326 audit(1621341241.745:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28119 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:01 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) 12:34:02 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x1f00000000000000) 12:34:02 executing program 3: getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(0x0, r0, 0x0) r1 = fork() rt_tgsigqueueinfo(0x0, r1, 0x0, &(0x7f0000000140)) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x1, 0xee01, 0xee00, r0, 0xee01, 0x23, 0x6}, 0x80000000, 0x100, 0x9, 0x58a, r1, 0xffffffffffffffff, 0x3f}) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) 12:34:02 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 12:34:02 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8901, 0x0, &(0x7f0000000000)) 12:34:02 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) [ 3023.438020][ T38] audit: type=1326 audit(1621341242.475:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28111 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:02 executing program 5: prctl$PR_MCE_KILL(0x16, 0x1, 0x900000000000000) 12:34:02 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x40000}) 12:34:02 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000040)) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x402300) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x401) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) read$qrtrtun(r1, &(0x7f00000000c0)=""/8, 0x8) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) 12:34:02 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8a00, 0x0, &(0x7f0000000000)) 12:34:02 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) [ 3023.648965][ T38] audit: type=1326 audit(1621341242.685:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28139 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:02 executing program 2: getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(0x0, r0, 0x0) r1 = fork() rt_tgsigqueueinfo(0x0, r1, 0x0, &(0x7f0000000140)) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000000)={{0x1, 0xee01, 0xee00, r0, 0xee01, 0x23, 0x6}, 0x80000000, 0x100, 0x9, 0x58a, r1, 0xffffffffffffffff, 0x3f}) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) [ 3023.740765][ T38] audit: type=1326 audit(1621341242.775:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28148 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:02 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8a01, 0x0, &(0x7f0000000000)) 12:34:03 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x3f00000000000000) 12:34:03 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 12:34:03 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) getsockname(r1, &(0x7f0000000000)=@l2tp={0x2, 0x0, @empty}, &(0x7f0000000080)=0x80) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {0xfffffffd}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a0000, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000500)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000480)=@in={0x2, 0x4e23, @rand_addr=0x64010102}, 0x0, 0x0, 0x1}, 0x3000000) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, 0x0) write$fb(r5, &(0x7f0000000540)="d05665d7d37ff16619207c001c4884d94a05e5913d122518bf21d9c2d11e02bca9eb2053cd4084724c12f90a9e52ec27f26303cab3e10930ee75f90d9ea431f2a4788b015f73c2a53969d6b0db1159e57a01b5154a886b7734660ee9ff3d7ff10f5c73e62e7eae56e28ecb0c37837f10ed6835c940549fa77db01a4dd940bd821751bf403d95a8f0618070abbad2ce840676bf38c363279129fe82", 0x9b) syz_io_uring_setup(0x6cd0, &(0x7f0000000240)={0x0, 0x8e883, 0x2, 0x2, 0x277}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000002c0), &(0x7f00000003c0)=0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r7, 0x89f7, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000440)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, &(0x7f0000000400), 0x0, 0x0, 0x42a0884f860aa736}, 0x2) write$fb(r2, &(0x7f0000000140)="537f598e2fa0b18fe7862bb1bde6b4ae4edc3208e2f0c0dfe726f4bb250dd4893fca3b397a937f3fc07ef803a8fb69c1206a91e4e0f3ccfacbf64c2e845a4f27c2c0906c4b817c0dbcb343514f1076693dbe1d32ceefdc74d34e986e4091ec29060e5b3c902e266aebe624d999fc612d0bf12d8acecadb47e8fe4513bf8cf27d8dd77e38ce5e9c9925886a30301ef9e9531eb814865762d9a609c02dc7d7378e9adb8fae95ed603eb666efd9bd0084", 0xaf) 12:34:03 executing program 2: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3401, 0x0, &(0x7f0000000000)) 12:34:03 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8b00, 0x0, &(0x7f0000000000)) 12:34:03 executing program 5: prctl$PR_MCE_KILL(0x16, 0x0, 0x900000000000000) 12:34:03 executing program 2: prctl$PR_MCE_KILL(0x16, 0x1, 0x1f00000000000000) 12:34:03 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 12:34:03 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8b01, 0x0, &(0x7f0000000000)) 12:34:03 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000140)=0x4) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000000)) openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) 12:34:03 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 12:34:03 executing program 5: prctl$PR_MCE_KILL(0x16, 0x0, 0x900000000000000) 12:34:04 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x4000000000000000) 12:34:04 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8c00, 0x0, &(0x7f0000000000)) 12:34:04 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000280)={0xffffffe1, 0x1, &(0x7f0000000140)=[0x4], &(0x7f0000000180)=[0x7, 0x7, 0x8000, 0x2, 0x9, 0x401, 0x1f, 0x5b41, 0x8000, 0x0], &(0x7f00000001c0)=[0x7a, 0xfff, 0x6, 0x9ac, 0x8001, 0x0, 0x7], &(0x7f0000000240)=[0xf0a, 0xe7f]}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x29e0, 0x640, 0xf0, 0x80, 0x6, 0x10001, 0x8, 0x2, {0x7, 0x3, 0x1}, {0x1, 0x70}, {0x4, 0x2, 0x1}, {0x80000000, 0x2a}, 0x2, 0x0, 0x4, 0xfffffff9, 0x0, 0x80000000, 0x6, 0x7, 0x10001, 0x9, 0x1000, 0x0, 0x12, 0x200, 0x0, 0x3}) 12:34:04 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) 12:34:04 executing program 5: prctl$PR_MCE_KILL(0x16, 0x0, 0x900000000000000) 12:34:04 executing program 2: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8a01, 0x0, &(0x7f0000000000)) 12:34:04 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8c01, 0x0, &(0x7f0000000000)) 12:34:04 executing program 5: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) 12:34:04 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}) 12:34:04 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x280, 0x10, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, {0x10}, {0x4}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}) 12:34:04 executing program 2: prctl$PR_MCE_KILL(0x2, 0xc04a01, 0x0) [ 3025.728618][ T38] kauditd_printk_skb: 4 callbacks suppressed [ 3025.728635][ T38] audit: type=1326 audit(1621341244.765:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28207 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:04 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8d00, 0x0, &(0x7f0000000000)) [ 3025.837348][ T38] audit: type=1326 audit(1621341244.785:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28212 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 3026.546214][ T38] audit: type=1326 audit(1621341245.585:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28207 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:05 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x4800000000000000) 12:34:05 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) 12:34:05 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x10001) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) 12:34:05 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8d01, 0x0, &(0x7f0000000000)) 12:34:05 executing program 2: prctl$PR_MCE_KILL(0x2, 0xc04a01, 0x0) 12:34:05 executing program 5: prctl$PR_MCE_KILL(0x2, 0x970000, 0x0) 12:34:05 executing program 5: prctl$PR_MCE_KILL(0x2, 0x970000, 0x0) 12:34:05 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8e00, 0x0, &(0x7f0000000000)) 12:34:05 executing program 2: prctl$PR_MCE_KILL(0x2, 0xc04a01, 0x0) 12:34:05 executing program 5: prctl$PR_MCE_KILL(0x2, 0x970000, 0x0) 12:34:05 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 12:34:05 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x1, 0x6, 0x4, 0x8, 0x6, {r1, r2/1000+60000}, {0x1, 0xc, 0x80, 0xeb, 0x5, 0x62, "79b0fd19"}, 0x4, 0x7, @fd, 0x80000000, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x5, 0x4, 0x4, 0x10, 0x9, {}, {0x1, 0x1, 0xb9, 0x94, 0x9, 0x81, "a0a7e22b"}, 0x6, 0x1, @offset=0xffff, 0xf22c, 0x0, r3}) write$uinput_user_dev(r0, &(0x7f00000003c0)={'syz1\x00', {0x5, 0x7, 0x2, 0x101}, 0x55, [0x9, 0x1000, 0x0, 0x80000001, 0x1, 0xac, 0x49a, 0xcc, 0x800, 0x2, 0x7, 0xea9a, 0x0, 0x9, 0x7, 0x2, 0x7, 0x5, 0x7fffffff, 0xfffffffa, 0x6, 0x80000000, 0x0, 0x99, 0x8001, 0xfffffe01, 0x20, 0x7, 0x80000000, 0x401, 0x9, 0x4, 0x3, 0x101, 0x26, 0xdbb, 0x5, 0xeefb, 0x401, 0x1, 0x7, 0x7, 0x7, 0xff, 0x7f, 0x8, 0x7f, 0x6, 0xffffff80, 0x1f, 0x20, 0x1ff, 0x3, 0x7, 0x81, 0x117f, 0x101, 0x3, 0x2, 0xfffffff7, 0x81, 0x2, 0x2, 0x10001], [0x12, 0x40000, 0xfffffff9, 0xffffffff, 0x4, 0x3f, 0xd4a, 0x8, 0xfffffff7, 0x1, 0x27, 0x1ff, 0x0, 0x0, 0x9, 0x80000000, 0x8, 0x100, 0x100, 0x3, 0x1e, 0x44ef, 0xffff, 0xd45, 0x3ff, 0x1, 0x3ff, 0x2, 0x3, 0x8, 0x3ba, 0x1, 0x2, 0x9, 0xfffffffa, 0x8, 0x10001, 0x7f, 0x1, 0x10001, 0x7, 0x28cf, 0x3cfb, 0x2, 0x0, 0x400, 0x1ba, 0x7, 0x0, 0xfffffffc, 0x1f, 0x2, 0x400, 0x75e29ae6, 0x0, 0x2, 0x9, 0x2, 0x9, 0x2, 0x5, 0xc, 0x4, 0x8000], [0xffffffff, 0x2, 0x2a, 0x20, 0x800, 0x2, 0x8, 0x3ff, 0x80000001, 0xfffffffb, 0x80000000, 0x5fdf, 0x80000000, 0xe16, 0xfff, 0x4, 0xffff, 0x6, 0x9978, 0x20, 0x10000, 0x9, 0x40, 0x4, 0xff, 0x8, 0x7fffffff, 0x48ac, 0x4, 0x9, 0x7, 0x5, 0x2, 0x1ff, 0xfffff7f9, 0x7fffffff, 0x1, 0x4, 0x400, 0x7, 0x2, 0x400, 0x9, 0xe3ce, 0xb72, 0x8, 0x6, 0x80, 0x3, 0xaab7, 0xc0a1, 0x9, 0x3, 0xb8d0, 0x80000001, 0x1, 0x5, 0x7, 0xb0, 0xae, 0x9, 0x8000, 0x7, 0xffffffe2], [0x3f, 0x9, 0xd3, 0x7fff8, 0xfffff800, 0x40c, 0x2, 0x2, 0x4, 0x3ff, 0x961, 0x4, 0x4, 0x1ff, 0x0, 0x11c, 0x8, 0x7fffffff, 0x101, 0x20, 0x2, 0x1, 0x5, 0xab1, 0x6, 0x1, 0x5d4e, 0x4, 0x80, 0x1f, 0x80000000, 0x6, 0x9, 0x7fff, 0x9, 0x8000, 0x6, 0x7, 0x0, 0x46d4, 0xffff, 0x7fffffff, 0x7f, 0x80000001, 0x4, 0x34ca2464, 0x1, 0x3, 0x2, 0x7, 0x80, 0x1f80000, 0xfff, 0x401, 0x6, 0x1ff, 0x4, 0x3, 0x4, 0x5, 0x7, 0x5, 0x8ae, 0x2]}, 0x45c) r4 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) [ 3026.764379][ T38] audit: type=1326 audit(1621341245.805:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28235 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:06 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 12:34:06 executing program 2: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:34:06 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x4c00000000000000) 12:34:06 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:34:06 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8e01, 0x0, &(0x7f0000000000)) 12:34:06 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x320, 0xf0, 0x30, 0x1e0, 0x5, 0x7, 0x18, 0x2, {0x6, 0x658}, {0x100000, 0x3}, {0xcce0, 0x91, 0x1}, {0x5, 0x101}, 0x3, 0x40, 0x80000000, 0x9, 0x0, 0x8, 0x9, 0x8, 0x10000000, 0x3, 0x7fff, 0x8, 0x1, 0x200, 0x3, 0x5}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) [ 3027.554519][ T38] audit: type=1326 audit(1621341246.595:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28235 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:06 executing program 2: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:34:06 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) [ 3027.702199][ T38] audit: type=1326 audit(1621341246.745:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28261 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:06 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8f00, 0x0, &(0x7f0000000000)) 12:34:06 executing program 3: shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000140)=""/221) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {0x0, 0x0, 0x1}}) accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote, @default, 0x0, [@rose, @netrom, @default, @null, @remote, @default]}, &(0x7f0000000040)=0x40, 0x0) 12:34:06 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:34:06 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 12:34:07 executing program 2: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:34:07 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8f01, 0x0, &(0x7f0000000000)) 12:34:07 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x6800000000000000) 12:34:07 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x147703, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname(r1, &(0x7f0000000000)=@tipc=@name, &(0x7f0000000080)=0x80) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) 12:34:07 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:34:07 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 12:34:07 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9000, 0x0, &(0x7f0000000000)) 12:34:07 executing program 2: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x2d01, 0x0, &(0x7f0000000000)) [ 3028.506234][ T38] audit: type=1326 audit(1621341247.545:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28261 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:07 executing program 5: prctl$PR_MCE_KILL(0x2, 0x400000, 0x0) 12:34:07 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x1000000}) 12:34:07 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x356, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {0x0, 0xb81}}) 12:34:07 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 12:34:07 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9001, 0x0, &(0x7f0000000000)) [ 3028.719634][ T38] audit: type=1326 audit(1621341247.755:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28298 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:07 executing program 5: prctl$PR_MCE_KILL(0x2, 0x400000, 0x0) 12:34:08 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9100, 0x0, &(0x7f0000000000)) 12:34:08 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 12:34:08 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x6c00000000000000) 12:34:08 executing program 2: prctl$PR_MCE_KILL(0x59616d61, 0x0, 0x0) 12:34:08 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000)) 12:34:08 executing program 5: prctl$PR_MCE_KILL(0x2, 0x400000, 0x0) [ 3029.513312][ T38] audit: type=1326 audit(1621341248.555:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28298 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:08 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9101, 0x0, &(0x7f0000000000)) 12:34:08 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:34:08 executing program 2: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) [ 3029.664814][ T38] audit: type=1326 audit(1621341248.705:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28323 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:08 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 12:34:08 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x40800, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40c082, 0x0) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000040)={0x26}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x4, 0x6, 0x8, 0x2, 0x20, @empty, @local, 0x70c0, 0x80, 0x5, 0x5}}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f00000001c0)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x1) 12:34:08 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:34:08 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9200, 0x0, &(0x7f0000000000)) 12:34:08 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}) 12:34:09 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x7400000000000000) 12:34:09 executing program 3: ptrace$getenv(0x4201, 0x0, 0x0, &(0x7f0000000140)) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000), 0x14) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x10, 0x258, 0x10, 0x0, 0x0, 0x0, {0x10, 0x400000}, {0x0, 0x0, 0xfffffffd}, {}, {0x7e160000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2f}) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x141) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0xb) 12:34:09 executing program 5: prctl$PR_MCE_KILL(0x2, 0x0, 0x0) 12:34:09 executing program 2: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:34:09 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9201, 0x0, &(0x7f0000000000)) 12:34:09 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) 12:34:09 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 12:34:09 executing program 2: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:34:09 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) 12:34:09 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9300, 0x0, &(0x7f0000000000)) 12:34:09 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000)) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) 12:34:09 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:34:10 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x7a00000000000000) 12:34:10 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) 12:34:10 executing program 2: prctl$PR_MCE_KILL(0x39, 0x0, 0x0) 12:34:10 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9301, 0x0, &(0x7f0000000000)) 12:34:10 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1, 0x2}) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz0\x00') ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x280, 0x10, 0x1e0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1}) 12:34:10 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) [ 3031.532055][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 3031.532071][ T38] audit: type=1326 audit(1621341250.575:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28357 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:10 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9400, 0x0, &(0x7f0000000000)) 12:34:10 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 12:34:10 executing program 2: prctl$PR_MCE_KILL(0x39, 0x0, 0x0) 12:34:10 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) [ 3031.710244][ T38] audit: type=1326 audit(1621341250.745:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28383 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:10 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x12440, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000180)={0x20, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101400, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f00000003c0)={0x8, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) 12:34:10 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9401, 0x0, &(0x7f0000000000)) 12:34:11 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x8000000000000000) 12:34:11 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 12:34:11 executing program 2: prctl$PR_MCE_KILL(0x39, 0x0, 0x0) 12:34:11 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9500, 0x0, &(0x7f0000000000)) 12:34:11 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x0) 12:34:11 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000000)) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x4100, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f00000003c0)={0x550, 0x300, 0x320, 0x2000, 0x5, 0x0, 0x2, 0x2, {0xfffffff8, 0x7}, {0x7, 0x6, 0x1}, {0x7fff, 0x48000000}, {0x10001}, 0x0, 0x1, 0xfff, 0x4, 0x0, 0x0, 0x4, 0x8, 0x40, 0x9, 0x5, 0x7, 0x18, 0x100, 0x2, 0x3}) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x114) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) ioctl$FBIOPUT_CON2FBMAP(r3, 0x4610, &(0x7f0000000280)={0x10}) read$fb(r2, &(0x7f00000001c0)=""/161, 0xa1) r5 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) shmctl$IPC_RMID(r5, 0x0) shmctl$IPC_RMID(r5, 0x0) write$fb(r1, &(0x7f0000000140)="5b1575654dca7adb65da0099301369e366b9e578039aacbf10df6a1f2a0c0c6a90b6c46820", 0x25) openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) [ 3032.527077][ T38] audit: type=1326 audit(1621341251.565:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28383 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:11 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x0) 12:34:11 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 12:34:11 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9501, 0x0, &(0x7f0000000000)) 12:34:11 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:34:11 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, {0x10}}) [ 3032.743956][ T38] audit: type=1326 audit(1621341251.785:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28414 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:11 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 12:34:12 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0xa1ffffff00000000) 12:34:12 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9600, 0x0, &(0x7f0000000000)) 12:34:12 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:34:12 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x0) 12:34:12 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {0xfffffffe}}) 12:34:12 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) [ 3033.553891][ T38] audit: type=1326 audit(1621341252.595:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28414 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:12 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9601, 0x0, &(0x7f0000000000)) 12:34:12 executing program 3: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000080)={0x8, 0x5}) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x100, 0x2}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x8, 0x7, 0x100, 0x1, 0xffffff8c, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x40) fcntl$getown(r2, 0x9) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000280)={@any, 0x3, 0x0, 0xffffffff}) read$snapshot(r0, &(0x7f0000000140)=""/133, 0x85) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000003c0)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) socket$rds(0x15, 0x5, 0x0) 12:34:12 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 12:34:12 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:34:12 executing program 5: prctl$PR_MCE_KILL(0x1c, 0x1, 0x0) [ 3033.761447][ T38] audit: type=1326 audit(1621341252.795:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:12 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9700, 0x0, &(0x7f0000000000)) 12:34:13 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0xe700000000000000) 12:34:13 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {0x0, 0x0, 0xfffffffd}}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x300, 0x960, 0x20, 0x50, 0x7, 0x5, 0x2, 0x2, {0x401, 0x1e}, {0xff, 0x37e}, {0x4, 0x7}, {0x10001, 0xfffffff7}, 0x1, 0x10, 0x40, 0x80000000, 0x0, 0x8000, 0xfffffffa, 0x7, 0x4, 0x3, 0x7, 0x3f, 0x8, 0x0, 0x1, 0x8}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000240)={0x80000001, 0x4, &(0x7f0000000140)=[0x4, 0x40, 0x9c9, 0x8], &(0x7f0000000180)=[0x7, 0x40, 0x3, 0x7, 0x26, 0x0, 0x4, 0x4], &(0x7f00000001c0)=[0xf0b9], &(0x7f0000000200)=[0x401, 0x4, 0x8001, 0x8000, 0xff]}) 12:34:13 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) 12:34:13 executing program 5 (fault-call:0 fault-nth:0): prctl$PR_MCE_KILL(0x34, 0x1, 0x0) 12:34:13 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) 12:34:13 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9701, 0x0, &(0x7f0000000000)) [ 3034.569796][ T38] audit: type=1326 audit(1621341253.605:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 3034.666355][T28466] FAULT_INJECTION: forcing a failure. [ 3034.666355][T28466] name fail_usercopy, interval 1, probability 0, space 0, times 0 12:34:13 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9800, 0x0, &(0x7f0000000000)) [ 3034.701572][ T38] audit: type=1326 audit(1621341253.735:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28467 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 3034.711212][T28466] CPU: 0 PID: 28466 Comm: syz-executor.5 Not tainted 5.13.0-rc2-syzkaller #0 [ 3034.732119][T28466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 12:34:13 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 12:34:13 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) [ 3034.732135][T28466] Call Trace: [ 3034.732143][T28466] dump_stack+0x141/0x1d7 [ 3034.732168][T28466] should_fail.cold+0x5/0xa [ 3034.732193][T28466] _copy_to_user+0x2c/0x150 [ 3034.732217][T28466] simple_read_from_buffer+0xcc/0x160 12:34:13 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) [ 3034.732241][T28466] proc_fail_nth_read+0x187/0x220 [ 3034.732263][T28466] ? proc_exe_link+0x1d0/0x1d0 [ 3034.732284][T28466] ? security_file_permission+0x248/0x560 [ 3034.732310][T28466] ? proc_exe_link+0x1d0/0x1d0 [ 3034.732329][T28466] vfs_read+0x1b5/0x570 [ 3034.732350][T28466] ksys_read+0x12d/0x250 [ 3034.732374][T28466] ? vfs_write+0xa30/0xa30 [ 3034.732393][T28466] ? syscall_enter_from_user_mode+0x27/0x70 [ 3034.732419][T28466] do_syscall_64+0x3a/0xb0 [ 3034.732438][T28466] entry_SYSCALL_64_after_hwframe+0x44/0xae 12:34:14 executing program 5: prctl$PR_MCE_KILL(0x2, 0x1, 0x0) 12:34:14 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) [ 3034.732456][T28466] RIP: 0033:0x41935c [ 3034.732472][T28466] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3034.732489][T28466] RSP: 002b:00007fdf8124d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3034.732509][T28466] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 000000000041935c [ 3034.732521][T28466] RDX: 000000000000000f RSI: 00007fdf8124d1e0 RDI: 0000000000000003 [ 3034.732533][T28466] RBP: 00007fdf8124d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3034.732544][T28466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3034.732555][T28466] R13: 00007ffc6ffb490f R14: 00007fdf8124d300 R15: 0000000000022000 12:34:14 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0xfeffffff00000000) 12:34:14 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9801, 0x0, &(0x7f0000000000)) 12:34:14 executing program 2 (fault-call:0 fault-nth:0): prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:34:14 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 12:34:14 executing program 3: socket$rds(0x15, 0x5, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x18201, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000040)={0x578, 0x960, 0x40, 0x1e0, 0x0, 0x4bd, 0xf, 0x1, {0x9af0, 0x40, 0x1}, {0x9, 0x4c47c330, 0x1}, {0x3, 0x4, 0x1}, {0xff, 0x5, 0x1}, 0x0, 0x1, 0x2, 0x0, 0x0, 0x80, 0x81, 0x1, 0x8, 0x8d51, 0x4, 0x100, 0x0, 0x200, 0x2, 0xa}) 12:34:14 executing program 5: prctl$PR_MCE_KILL(0x3, 0x1, 0x0) [ 3035.527848][ T38] audit: type=1326 audit(1621341254.565:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28467 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:14 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9900, 0x0, &(0x7f0000000000)) [ 3035.648942][T28494] FAULT_INJECTION: forcing a failure. [ 3035.648942][T28494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3035.729221][T28494] CPU: 1 PID: 28494 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0 [ 3035.738135][T28494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3035.748190][T28494] Call Trace: [ 3035.751469][T28494] dump_stack+0x141/0x1d7 [ 3035.755805][T28494] should_fail.cold+0x5/0xa [ 3035.760316][T28494] _copy_to_user+0x2c/0x150 [ 3035.764824][T28494] simple_read_from_buffer+0xcc/0x160 [ 3035.770229][T28494] proc_fail_nth_read+0x187/0x220 [ 3035.775298][T28494] ? proc_exe_link+0x1d0/0x1d0 [ 3035.780063][T28494] ? security_file_permission+0x248/0x560 [ 3035.785791][T28494] ? proc_exe_link+0x1d0/0x1d0 [ 3035.790560][T28494] vfs_read+0x1b5/0x570 [ 3035.794717][T28494] ksys_read+0x12d/0x250 [ 3035.798954][T28494] ? vfs_write+0xa30/0xa30 [ 3035.803371][T28494] ? syscall_enter_from_user_mode+0x27/0x70 [ 3035.809264][T28494] do_syscall_64+0x3a/0xb0 [ 3035.813672][T28494] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3035.819556][T28494] RIP: 0033:0x41935c [ 3035.823437][T28494] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3035.843034][T28494] RSP: 002b:00007f43a9496170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3035.851437][T28494] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041935c [ 3035.859398][T28494] RDX: 000000000000000f RSI: 00007f43a94961e0 RDI: 0000000000000003 [ 3035.867354][T28494] RBP: 00007f43a94961d0 R08: 0000000000000000 R09: 0000000000000000 12:34:14 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9901, 0x0, &(0x7f0000000000)) 12:34:14 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 12:34:14 executing program 5: prctl$PR_MCE_KILL(0x4, 0x1, 0x0) [ 3035.875312][T28494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3035.883269][T28494] R13: 00007ffc870261bf R14: 00007f43a9496300 R15: 0000000000022000 [ 3035.892090][ T38] audit: type=1326 audit(1621341254.775:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28498 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:15 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x10) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1e}) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000040)={0x18, 0x2}) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f00000001c0)={0x80, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 12:34:15 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:34:15 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0xffffff7f00000000) 12:34:15 executing program 5: prctl$PR_MCE_KILL(0x7, 0x1, 0x0) 12:34:15 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9a00, 0x0, &(0x7f0000000000)) 12:34:15 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 12:34:15 executing program 2: prctl$PR_MCE_KILL(0x2, 0x1, 0x0) 12:34:15 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x80) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r2, &(0x7f00000041c0)={0x18, 0x0, r3}, 0x18) write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x2f, r3, {0x7, 0x21, 0x100, 0x200000, 0x0, 0x7, 0x2, 0x7fff}}, 0x50) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000140)={0xfffffff7, 0x3, 0xffffffe0, 0x5, &(0x7f0000000000)=[{}, {}, {}]}) mount$fuseblk(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x20811c0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x30, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffff}) [ 3036.563528][ T38] audit: type=1326 audit(1621341255.605:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28498 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:15 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9a01, 0x0, &(0x7f0000000000)) 12:34:15 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) r1 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/204) 12:34:15 executing program 5: prctl$PR_MCE_KILL(0x8, 0x1, 0x0) 12:34:15 executing program 2: prctl$PR_MCE_KILL(0x3, 0x1, 0x0) [ 3036.722665][ T38] audit: type=1326 audit(1621341255.765:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28521 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:15 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 12:34:15 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9b00, 0x0, &(0x7f0000000000)) 12:34:16 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0xffffffff00000000) 12:34:16 executing program 5: prctl$PR_MCE_KILL(0xd, 0x1, 0x0) 12:34:16 executing program 2: prctl$PR_MCE_KILL(0x4, 0x1, 0x0) 12:34:16 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0xa0, 0xa0, 0x384, 0x3, 0x0, 0x0, 0x0, {0x10}, {0x0, 0x0, 0x2}, {0xffff8001}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}) read$fb(r0, &(0x7f0000000000)=""/83, 0x53) 12:34:16 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) 12:34:16 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9b01, 0x0, &(0x7f0000000000)) [ 3037.536358][ T38] audit: type=1326 audit(1621341256.575:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28521 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:16 executing program 2: prctl$PR_MCE_KILL(0x7, 0x1, 0x0) 12:34:16 executing program 5: prctl$PR_MCE_KILL(0xe, 0x1, 0x0) 12:34:16 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x50000, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000040)) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000280)={0x3ff, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)}) 12:34:16 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}) 12:34:16 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9c00, 0x0, &(0x7f0000000000)) [ 3037.730179][ T38] audit: type=1326 audit(1621341256.765:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28554 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:16 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x240080, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000040)={0x1000, 0x0, 0x556, 0x300, 0xffffff87, 0x10001, 0x8, 0x2, {0xbc53, 0xe7b, 0x1}, {0x6, 0x6}, {0x8, 0x7}, {0x40, 0x5, 0x1}, 0x2, 0x10, 0x1, 0x4e8, 0x1, 0x5, 0x0, 0x1, 0x1, 0x3ff, 0x7, 0x2, 0x10, 0x0, 0x2, 0x7}) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000140)) 12:34:17 executing program 4: ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000040)={0x2000, 0x40, 0x1fb0, 0xa0, 0x3c5, 0xfffffeff, 0xf, 0x2, {0x8001, 0x7fff, 0x1}, {0x9, 0x9}, {0x7}, {0x0, 0x1f}, 0x0, 0x100, 0x7ff, 0x233, 0x1, 0x5b, 0x8efb, 0xffffff01, 0x81, 0x2, 0x9, 0x8, 0x20, 0x0, 0x2, 0x7}) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000004340)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000004240)=[{{&(0x7f0000000100)=@pppol2tpv3in6, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/87, 0x57}, {&(0x7f0000000200)=""/166, 0xa6}], 0x2, &(0x7f0000000300)=""/251, 0xfb}, 0xfffff001}, {{&(0x7f0000000400)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000480)=""/2, 0x2}], 0x1, &(0x7f0000000500)=""/164, 0xa4}, 0x2}, {{&(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f00000039c0)=[{&(0x7f0000000640)=""/19, 0x13}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/111, 0x6f}, {&(0x7f0000001700)=""/156, 0x9c}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/70, 0x46}, {&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000003840)=""/226, 0xe2}, {&(0x7f0000003940)=""/96, 0x60}], 0x9}, 0x8}, {{&(0x7f0000003a80)=@sco, 0x80, &(0x7f0000004140)=[{&(0x7f0000003b00)=""/221, 0xdd}, {&(0x7f0000003c00)=""/173, 0xad}, {&(0x7f0000003cc0)=""/228, 0xe4}, {&(0x7f0000003dc0)=""/240, 0xf0}, {&(0x7f0000003ec0)=""/69, 0x45}, {&(0x7f0000003f40)=""/68, 0x44}, {&(0x7f0000003fc0)=""/161, 0xa1}, {&(0x7f0000004080)=""/50, 0x32}, {&(0x7f00000040c0)=""/98, 0x62}], 0x9, &(0x7f0000004200)=""/31, 0x1f}, 0x81}], 0x4, 0x0, &(0x7f0000004380)={r0, r1+60000000}) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000043c0)={r3, 0x9356}) getpgrp(0xffffffffffffffff) 12:34:17 executing program 5: prctl$PR_MCE_KILL(0xf, 0x1, 0x0) 12:34:17 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) 12:34:17 executing program 2: prctl$PR_MCE_KILL(0x8, 0x1, 0x0) 12:34:17 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9c01, 0x0, &(0x7f0000000000)) 12:34:17 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x280, 0x300, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}) [ 3038.539717][ T38] audit: type=1326 audit(1621341257.575:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28554 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 3038.563241][ C1] vkms_vblank_simulate: vblank timer overrun 12:34:17 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9d00, 0x0, &(0x7f0000000000)) 12:34:17 executing program 5: prctl$PR_MCE_KILL(0x10, 0x1, 0x0) 12:34:17 executing program 3: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000080)) r0 = fork() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000140)) ptrace$cont(0x9, r0, 0xf9, 0x2) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000000)) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) 12:34:17 executing program 2: prctl$PR_MCE_KILL(0xd, 0x1, 0x0) 12:34:17 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 12:34:17 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000000)={@any, 0x3b, 0x7, 0x652}) 12:34:17 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9d01, 0x0, &(0x7f0000000000)) 12:34:17 executing program 2: prctl$PR_MCE_KILL(0xe, 0x1, 0x0) 12:34:17 executing program 5: prctl$PR_MCE_KILL(0x15, 0x1, 0x0) 12:34:17 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) [ 3038.921780][ T38] audit: type=1326 audit(1621341257.965:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28599 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 3038.943798][ C1] vkms_vblank_simulate: vblank timer overrun 12:34:18 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0xd8d80, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000180)={0x60b9, 0x1, &(0x7f0000000040)=[0x101], &(0x7f0000000080)=[0x0, 0xfff, 0x7fff, 0xf03], &(0x7f00000000c0)=[0x3ff, 0xffc0], &(0x7f0000000140)=[0x8, 0x7c8]}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) 12:34:18 executing program 2: prctl$PR_MCE_KILL(0xf, 0x1, 0x0) 12:34:18 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9e00, 0x0, &(0x7f0000000000)) 12:34:18 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 12:34:18 executing program 5: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) 12:34:18 executing program 3: ioprio_get$pid(0x0, 0xffffffffffffffff) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) 12:34:18 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9e01, 0x0, &(0x7f0000000000)) [ 3039.208325][ T38] audit: type=1326 audit(1621341258.245:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28620 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:18 executing program 4: ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) read$fb(0xffffffffffffffff, &(0x7f0000000000)=""/173, 0xad) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 12:34:18 executing program 2: prctl$PR_MCE_KILL(0x10, 0x1, 0x0) 12:34:18 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 12:34:18 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x413800, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1c, 0x1}) 12:34:18 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9f00, 0x0, &(0x7f0000000000)) [ 3039.733247][ T38] audit: type=1326 audit(1621341258.775:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28599 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:18 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 12:34:18 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000001c0)={0x550, 0x20, 0x80, 0x400, 0x8000, 0x8001, 0x20, 0x2, {0x7, 0x4}, {0x8, 0xffffffff}, {0x1f, 0x504e890c}, {0x1, 0x3, 0x1}, 0x1, 0x80, 0x5, 0xa169, 0x0, 0x2, 0x800, 0xfff, 0x8000, 0x0, 0x2, 0x400, 0x39, 0x200, 0x0, 0xa}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000180)={0x2, 0x3, &(0x7f0000000040)=[0x1c2, 0x0, 0x2], &(0x7f0000000080)=[0xc5d2, 0x0], &(0x7f00000000c0)=[0xc27, 0x2], &(0x7f0000000140)=[0x8]}) 12:34:18 executing program 2: prctl$PR_MCE_KILL(0x15, 0x1, 0x0) 12:34:19 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9f01, 0x0, &(0x7f0000000000)) [ 3039.938891][ T38] audit: type=1326 audit(1621341258.975:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28643 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 3039.960853][ C1] vkms_vblank_simulate: vblank timer overrun 12:34:19 executing program 5: prctl$PR_MCE_KILL(0x17, 0x1, 0x0) 12:34:19 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x400000}, {0x0, 0x0, 0x1}}) syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2) 12:34:19 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) [ 3040.047487][ T38] audit: type=1326 audit(1621341259.065:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28620 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:19 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x40840, 0x0) 12:34:19 executing program 2: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) 12:34:19 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa000, 0x0, &(0x7f0000000000)) 12:34:19 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 12:34:19 executing program 5: prctl$PR_MCE_KILL(0x18, 0x1, 0x0) 12:34:19 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) sched_getparam(r1, &(0x7f0000000200)) 12:34:20 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0xc4400, 0x0) 12:34:20 executing program 5: prctl$PR_MCE_KILL(0x19, 0x1, 0x0) 12:34:20 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa001, 0x0, &(0x7f0000000000)) 12:34:20 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 12:34:20 executing program 5: prctl$PR_MCE_KILL(0x1a, 0x1, 0x0) 12:34:20 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x800}, {0xfffffffe}}) ioctl$FBIOBLANK(r0, 0x4611, 0x0) [ 3041.727350][ T38] kauditd_printk_skb: 3 callbacks suppressed [ 3041.727365][ T38] audit: type=1326 audit(1621341260.765:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28666 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:20 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}) 12:34:20 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa100, 0x0, &(0x7f0000000000)) 12:34:20 executing program 5: prctl$PR_MCE_KILL(0x1b, 0x1, 0x0) 12:34:20 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 12:34:20 executing program 2: prctl$PR_MCE_KILL(0x17, 0x1, 0x0) 12:34:20 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) fcntl$getown(r0, 0x9) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r2, &(0x7f00000041c0)={0x18, 0x0, r3}, 0x18) write$FUSE_LSEEK(r0, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, r3, {0x5}}, 0x18) r4 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x799003, 0x0) fcntl$getown(r4, 0x9) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) prctl$PR_MCE_KILL(0x16, 0x1, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) [ 3041.772919][ T38] audit: type=1326 audit(1621341260.815:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28675 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:20 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa101, 0x0, &(0x7f0000000000)) 12:34:21 executing program 5: prctl$PR_MCE_KILL(0x1c, 0x1, 0x0) 12:34:21 executing program 2: prctl$PR_MCE_KILL(0x18, 0x1, 0x0) 12:34:21 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) 12:34:21 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400800, 0x0) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000040)={0x7, 0x1}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x1e0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x10}, {}, {0x0, 0xffffffff}, {}, 0x0, 0x2, 0x0, 0xfffffffc}) [ 3041.969846][ T38] audit: type=1326 audit(1621341261.005:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28703 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:21 executing program 5: prctl$PR_MCE_KILL(0x1d, 0x1, 0x0) 12:34:21 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa200, 0x0, &(0x7f0000000000)) 12:34:21 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, {0x10}}) ioctl$FBIOBLANK(r0, 0x4611, 0x1) 12:34:21 executing program 2: prctl$PR_MCE_KILL(0x19, 0x1, 0x0) 12:34:21 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 12:34:21 executing program 5: prctl$PR_MCE_KILL(0x1e, 0x1, 0x0) 12:34:21 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xfeaa4d266701fe78, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000180)={0x2, 0x1, '8'}) read$qrtrtun(r0, &(0x7f0000000040)=""/7, 0x7) prctl$PR_MCE_KILL(0x16, 0x0, 0x2) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0x0, 0x802) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f00000000c0)=0x5, 0x4) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000100)) 12:34:21 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa201, 0x0, &(0x7f0000000000)) 12:34:21 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:34:21 executing program 2: prctl$PR_MCE_KILL(0x1a, 0x1, 0x0) 12:34:21 executing program 3: socket(0x18, 0x6, 0xfffffff9) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) 12:34:21 executing program 5: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) [ 3042.777332][ T38] audit: type=1326 audit(1621341261.815:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28703 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:22 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}, {}, {}, {}, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffe}) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x4010, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000200)={0x8001, 0x9, 0x4, 0x4000, 0xfffffc01, {0x0, 0xea60}, {0x2, 0x1, 0x40, 0x0, 0x22, 0x0, "a0905ba9"}, 0x8000, 0x4, @offset=0x3, 0x6}) syz_io_uring_setup(0x1b87, &(0x7f0000000000)={0x0, 0xbce0, 0x0, 0x1, 0xe9}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x12040, 0xa, 0x1}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0x7) 12:34:22 executing program 2: prctl$PR_MCE_KILL(0x1b, 0x1, 0x0) 12:34:22 executing program 5: prctl$PR_MCE_KILL(0x22, 0x1, 0x0) 12:34:22 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa300, 0x0, &(0x7f0000000000)) 12:34:22 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:34:22 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x66) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) syz_open_dev$media(&(0x7f0000000040), 0x2, 0x8000) 12:34:22 executing program 2: prctl$PR_MCE_KILL(0x1c, 0x1, 0x0) 12:34:22 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000040)={0xfffffb86, 0x2, 0x4, 0x2000, 0xebd, {}, {0x2, 0x2, 0x2, 0x2, 0x1f, 0x23, "e80eda37"}, 0x5, 0x1, @offset=0x68, 0x100}) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r1, 0xffffffffffffffff, 0x15}, 0x10) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x1}, {}, {0xfffffffe}, {0xfffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) ioctl$FBIOGET_CON2FBMAP(r3, 0x460f, &(0x7f0000000000)={0x37, 0x2}) [ 3043.126987][ T38] audit: type=1326 audit(1621341262.165:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28753 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:22 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa301, 0x0, &(0x7f0000000000)) 12:34:22 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 12:34:22 executing program 5: prctl$PR_MCE_KILL(0x23, 0x1, 0x0) 12:34:22 executing program 2: prctl$PR_MCE_KILL(0x1d, 0x1, 0x0) 12:34:22 executing program 5: prctl$PR_MCE_KILL(0x24, 0x1, 0x0) 12:34:22 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa400, 0x0, &(0x7f0000000000)) 12:34:22 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x428843, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, {0x10}, {0x0, 0x4, 0x1}, {}, {0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000480)=0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) ioctl$UI_SET_KEYBIT(r4, 0x40045565, 0x79) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={0x0, @llc={0x1a, 0x7, 0x81, 0xff, 0x1, 0x1, @random="210ce6a2329c"}, @l2={0x1f, 0x91, @none, 0xffff, 0x1}, @llc={0x1a, 0x118, 0x9, 0x4, 0xf, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x2, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)='ip6gre0\x00', 0x0, 0x200, 0x7}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x315000, 0x0) ioctl$FBIOGETCMAP(r5, 0x4604, &(0x7f00000002c0)={0x2, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0]}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r3, r1, 0x2}, 0x10) r6 = syz_open_dev$mouse(&(0x7f00000003c0), 0x7fffffff, 0x88880) ioctl$FBIOGET_FSCREENINFO(r6, 0x4602, &(0x7f00000000c0)) 12:34:22 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 12:34:22 executing program 2: prctl$PR_MCE_KILL(0x1e, 0x1, 0x0) [ 3043.950704][ T38] audit: type=1326 audit(1621341262.985:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28753 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:23 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x26b) 12:34:23 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa401, 0x0, &(0x7f0000000000)) 12:34:23 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 12:34:23 executing program 2: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 12:34:23 executing program 5: prctl$PR_MCE_KILL(0x25, 0x1, 0x0) 12:34:23 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0xa00, 0x600, 0x0, 0x0, 0x0, 0x81, 0xf, 0x0, {0x10, 0x2}, {0x0, 0x2}, {0xfffffffe}, {}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x29}) 12:34:23 executing program 5: prctl$PR_MCE_KILL(0x26, 0x1, 0x0) 12:34:23 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa500, 0x0, &(0x7f0000000000)) 12:34:23 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 12:34:23 executing program 2: prctl$PR_MCE_KILL(0x22, 0x1, 0x0) 12:34:23 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000000)={0x6, 0x56}) [ 3044.152675][ T38] audit: type=1326 audit(1621341263.195:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28796 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:23 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 12:34:24 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000000)=0x1) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0x2, 0x2, 0x4, 0x10, 0x81, {r0, r1/1000+10000}, {0x5, 0x1, 0x81, 0xa5, 0x4, 0x1, "4e66c65f"}, 0x40, 0x4, @userptr=0x9111, 0x400}) 12:34:24 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa501, 0x0, &(0x7f0000000000)) 12:34:24 executing program 5: prctl$PR_MCE_KILL(0x27, 0x1, 0x0) 12:34:24 executing program 2: prctl$PR_MCE_KILL(0x23, 0x1, 0x0) 12:34:24 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 12:34:24 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockname(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000000c0)=0x80) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x1, 0x19, 0x0, 0x0, @private1, @loopback, 0x20, 0x80, 0xe287, 0x6}}) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x2) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) [ 3044.960607][ T38] audit: type=1326 audit(1621341263.995:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28796 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:24 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa600, 0x0, &(0x7f0000000000)) 12:34:24 executing program 5: prctl$PR_MCE_KILL(0x28, 0x1, 0x0) 12:34:24 executing program 2: prctl$PR_MCE_KILL(0x24, 0x1, 0x0) 12:34:24 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) 12:34:24 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@any, 0x1000}) [ 3045.141896][ T38] audit: type=1326 audit(1621341264.185:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28824 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:24 executing program 2: prctl$PR_MCE_KILL(0x25, 0x1, 0x0) 12:34:25 executing program 4: prctl$PR_MCE_KILL(0x16, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 12:34:25 executing program 5: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:34:25 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa601, 0x0, &(0x7f0000000000)) 12:34:25 executing program 2: prctl$PR_MCE_KILL(0x26, 0x1, 0x0) 12:34:25 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 12:34:25 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x810001) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r2, &(0x7f00000041c0)={0x18, 0x0, r3}, 0x18) openat$fb1(0xffffffffffffff9c, &(0x7f0000000140), 0x14000, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x24, r3, {0x7, 0x21, 0x6, 0x1000401, 0x0, 0x7, 0xfb68, 0x2a80000}}, 0x50) [ 3045.952533][ T38] audit: type=1326 audit(1621341264.995:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28824 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:25 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa700, 0x0, &(0x7f0000000000)) 12:34:25 executing program 5: prctl$PR_MCE_KILL(0x2a, 0x1, 0x0) 12:34:25 executing program 2: prctl$PR_MCE_KILL(0x27, 0x1, 0x0) 12:34:25 executing program 3: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000000)) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) write$fb(r1, &(0x7f0000000140)="b7d921e8dd56606c59e92464c8e8ac143c89aa01fcb30a404a5b92d3e58cb2db13a752edd197c9d32f59d0b66ca849155de0a71683f9cb96e01762a2b41d4d7767addec98fe244e9c1c62a1beaee0f8b2abdb702c42df8ca25d342e56e58df10dcf30845a44170ab91271b0459286e47760874e9eedeba2745affea85e28a5a372509a6b8a5de4de00e472f2f273f084130f3bfbd200a6733ee9cb8edb93b1c1c2a02be941012d8ada181f6ce3287300a300953309823bbdbbfe34888267798fad1380ced4adf1166649cbb15750a3d88a421022b45863d1ea44acd355a71e8bd7aa", 0xe2) 12:34:25 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 12:34:25 executing program 4: r0 = syz_io_uring_setup(0x4019, &(0x7f0000000000)={0x0, 0x8eac, 0x1, 0x1, 0x226}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x7649, &(0x7f0000000100)={0x0, 0xcf40, 0x10, 0x2, 0x94, 0x0, r0}) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) 12:34:25 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa701, 0x0, &(0x7f0000000000)) 12:34:25 executing program 2: prctl$PR_MCE_KILL(0x28, 0x1, 0x0) 12:34:25 executing program 5: prctl$PR_MCE_KILL(0x2f, 0x1, 0x0) 12:34:25 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 12:34:25 executing program 3: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) stat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000180)) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x66) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xffff}}, 0x14) syz_open_dev$media(&(0x7f0000000040), 0x2, 0x8000) 12:34:25 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa800, 0x0, &(0x7f0000000000)) 12:34:25 executing program 2: prctl$PR_MCE_KILL(0x2a, 0x1, 0x0) 12:34:25 executing program 5: prctl$PR_MCE_KILL(0x35, 0x1, 0x0) 12:34:25 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 12:34:25 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa801, 0x0, &(0x7f0000000000)) 12:34:25 executing program 2: prctl$PR_MCE_KILL(0x2f, 0x1, 0x0) 12:34:26 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:34:26 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 12:34:26 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa900, 0x0, &(0x7f0000000000)) 12:34:26 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) 12:34:26 executing program 2: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) [ 3047.182738][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 3047.182756][ T38] audit: type=1326 audit(1621341266.225:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28874 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:26 executing program 3: ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000080)) r0 = fork() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000140)) ptrace$cont(0x9, r0, 0xf9, 0x2) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000000)) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10}}) 12:34:26 executing program 5: prctl$PR_MCE_KILL(0x3a, 0x1, 0x0) 12:34:26 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) [ 3047.347187][ T38] audit: type=1326 audit(1621341266.385:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28907 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:26 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa901, 0x0, &(0x7f0000000000)) 12:34:26 executing program 2: prctl$PR_MCE_KILL(0x35, 0x1, 0x0) 12:34:26 executing program 3 (fault-call:0 fault-nth:0): prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:34:26 executing program 5: prctl$PR_MCE_KILL(0x3b, 0x1, 0x0) 12:34:26 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xaa00, 0x0, &(0x7f0000000000)) [ 3047.579217][T28924] FAULT_INJECTION: forcing a failure. [ 3047.579217][T28924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3047.601162][T28924] CPU: 1 PID: 28924 Comm: syz-executor.3 Not tainted 5.13.0-rc2-syzkaller #0 [ 3047.610112][T28924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3047.620169][T28924] Call Trace: [ 3047.623446][T28924] dump_stack+0x141/0x1d7 [ 3047.627784][T28924] should_fail.cold+0x5/0xa [ 3047.632475][T28924] _copy_to_user+0x2c/0x150 [ 3047.636992][T28924] simple_read_from_buffer+0xcc/0x160 [ 3047.642367][T28924] proc_fail_nth_read+0x187/0x220 [ 3047.647389][T28924] ? proc_exe_link+0x1d0/0x1d0 [ 3047.652154][T28924] ? security_file_permission+0x248/0x560 [ 3047.657899][T28924] ? proc_exe_link+0x1d0/0x1d0 [ 3047.657925][T28924] vfs_read+0x1b5/0x570 [ 3047.657952][T28924] ksys_read+0x12d/0x250 [ 3047.657970][T28924] ? vfs_write+0xa30/0xa30 [ 3047.657989][T28924] ? syscall_enter_from_user_mode+0x27/0x70 [ 3047.658019][T28924] do_syscall_64+0x3a/0xb0 [ 3047.658042][T28924] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3047.658065][T28924] RIP: 0033:0x41935c [ 3047.658083][T28924] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3047.658104][T28924] RSP: 002b:00007f88711f6170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 12:34:26 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}) 12:34:26 executing program 2: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) [ 3047.658125][T28924] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041935c [ 3047.658139][T28924] RDX: 000000000000000f RSI: 00007f88711f61e0 RDI: 0000000000000003 [ 3047.658153][T28924] RBP: 00007f88711f61d0 R08: 0000000000000000 R09: 0000000000000000 [ 3047.658166][T28924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3047.755372][T28924] R13: 00007fff84a797df R14: 00007f88711f6300 R15: 0000000000022000 12:34:27 executing program 4: sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) 12:34:27 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) 12:34:27 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:34:27 executing program 2: prctl$PR_MCE_KILL(0x3a, 0x1, 0x0) 12:34:27 executing program 5: prctl$PR_MCE_KILL(0x59616d61, 0x1, 0x0) 12:34:27 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xaa01, 0x0, &(0x7f0000000000)) [ 3048.164348][ T38] audit: type=1326 audit(1621341267.205:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28907 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:27 executing program 3: prctl$PR_MCE_KILL(0x2, 0x1, 0x0) 12:34:27 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x7) 12:34:27 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xab00, 0x0, &(0x7f0000000000)) 12:34:27 executing program 2: prctl$PR_MCE_KILL(0x3b, 0x1, 0x0) 12:34:27 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 12:34:27 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) [ 3048.453087][ T38] audit: type=1326 audit(1621341267.495:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28954 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:27 executing program 3: prctl$PR_MCE_KILL(0x3, 0x1, 0x0) 12:34:27 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x700) 12:34:27 executing program 2: prctl$PR_MCE_KILL(0x59616d61, 0x1, 0x0) 12:34:27 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 12:34:27 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xab01, 0x0, &(0x7f0000000000)) 12:34:27 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x7000000) 12:34:27 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x7) 12:34:27 executing program 3: prctl$PR_MCE_KILL(0x4, 0x1, 0x0) 12:34:27 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xac00, 0x0, &(0x7f0000000000)) 12:34:27 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 12:34:27 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x700000000000000) [ 3049.271300][ T38] audit: type=1326 audit(1621341268.305:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=28954 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:28 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) r0 = syz_io_uring_setup(0x4fe, &(0x7f0000000000)={0x0, 0x618e, 0x2, 0x1, 0x4c}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x3e2c, &(0x7f0000000100)={0x0, 0x37e8, 0x8, 0x81, 0x336, 0x0, r0}) 12:34:28 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xac01, 0x0, &(0x7f0000000000)) 12:34:28 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x700) 12:34:28 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 12:34:28 executing program 3: prctl$PR_MCE_KILL(0x7, 0x1, 0x0) 12:34:28 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x1) 12:34:28 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 12:34:28 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xad00, 0x0, &(0x7f0000000000)) 12:34:28 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, 0x0, 0x1, {0x1, 0xff, 0x1}, 0x1}, 0x18, &(0x7f0000000300)={&(0x7f0000000040)="16f52fcb172fd02ae4d800cfa9c45b450f8e65eded87630d01a31e1deef4377810e140d9c38e9df1f94838352fb37761d27d1dcf21c10c758c6dcd3974a1fb28d7fe0aff31112415434d1b29b3b636b3fbbf0dab3d96ec64", 0x58}, 0x1, 0x0, 0x0, 0x2008000}, 0x4001) r1 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x2, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000001c0)={{0x6, 0x4, 0xffff, 0x0, 'syz1\x00', 0x7fffffff}, 0x6, 0x4, 0xfff, 0x0, 0x3, 0x80000000, 'syz1\x00', &(0x7f0000000340)=['}&\x00', '\xd2c\xe1\xa40\\\xb0\x98\xda\x97\xeb*\xa41L\xd9\xdf\xd5\xf4VF\xb6\xeeKl\xf0Q\x88\x04\xdaB\xcaIE\'\x16\xd0\xaf\x80\x12\xc6\xee\x9a\x90\x82\xe4\xa1\xec \x8a\x86\xe8*\xc8V;\xcbX}\xb7\x05\xa0\x0eq\xd9\xee9\xca\xb7\xe6&y\xf6\n\xc1U\xc8+\xd2n\xe1\x16\x90\x11R\xf5P\x87\xb7e=D\xdc\xb8cg\xb7I\b\x83g\xe3T0Go\x00\xcc\xea\xc6\x8e\x95\xb2\xc4\xf5S\xbd\xfe\x1bT\x96E\rK~\xc2d,\x96_\x05\x1b\x9c\\\xb0\xc8L\xca\x18\\\xbc\x87we0y8\x96`\xbe\xea\xaf*\x04+\x02\n\xbf\x7f\xab@o\xechZ\x94\xfa', '\\-\x00'], 0xad, '\x00', [0x6cb, 0xfff7, 0x0, 0x3]}) 12:34:28 executing program 3: prctl$PR_MCE_KILL(0x8, 0x1, 0x0) 12:34:28 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 12:34:28 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x7000000) [ 3049.480330][ T38] audit: type=1326 audit(1621341268.515:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29010 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:29 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/23) 12:34:29 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xad01, 0x0, &(0x7f0000000000)) 12:34:29 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 12:34:29 executing program 3: prctl$PR_MCE_KILL(0xd, 0x1, 0x0) 12:34:29 executing program 5: ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000100)={0xe23, 0x0, &(0x7f0000000000), &(0x7f0000000040)=[0xae, 0xfffa, 0x1, 0x7ff, 0x7fff, 0x6, 0x200], &(0x7f0000000080)=[0x0, 0x2, 0x101], &(0x7f00000000c0)=[0x200, 0x17c9, 0x8, 0x1ff]}) 12:34:29 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x700000000000000) [ 3050.302819][ T38] audit: type=1326 audit(1621341269.345:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29010 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:29 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xae00, 0x0, &(0x7f0000000000)) 12:34:29 executing program 2: syz_open_dev$cec(&(0x7f0000000000), 0x3, 0x2) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:34:29 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 12:34:29 executing program 3: prctl$PR_MCE_KILL(0xe, 0x1, 0x0) 12:34:29 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x0) [ 3050.485530][ T38] audit: type=1326 audit(1621341269.525:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29038 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:29 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xae01, 0x0, &(0x7f0000000000)) [ 3051.291189][ T38] audit: type=1326 audit(1621341270.325:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29038 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:30 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) restart_syscall() r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x21, 0x0, 0x8100, 0x8, 0xda43, 0xb2, 0x9}}, 0x50) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x3) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000080)) 12:34:30 executing program 3: prctl$PR_MCE_KILL(0xf, 0x1, 0x0) 12:34:30 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0xaf, 0xffff, 0xff, "bc14835a24d5cfd18badf330fbc5e0605bea90e1caecfabc4297d0289c27412b7aca3c74950fc5d2509887a939512c6fa73b17d486740cceef0bca073bfab4ede8bc49e98e68e5a2602e49bd4bd06cd4f9a60eb5c7e6694370b8f7a387b1aedcf4c55bad56a5b003f1cf723556d3e8ea573f45800da8d6c33ff2a3c669d73b090de2e3f137480b7c006cda5ee188ca80c04894dee7e48be8494967e8b3788d05a877bd908093e396caa4301c87cedc"}) 12:34:30 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}) 12:34:30 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 12:34:30 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xaf00, 0x0, &(0x7f0000000000)) 12:34:30 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) 12:34:30 executing program 3: prctl$PR_MCE_KILL(0x10, 0x1, 0x0) 12:34:30 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x2) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fcntl$getown(r0, 0x9) 12:34:30 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xaf01, 0x0, &(0x7f0000000000)) 12:34:30 executing program 5: r0 = fork() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000140)) ioprio_set$pid(0x1, r0, 0x2004) ptrace$cont(0x18, r0, 0xffffffffffff4564, 0x2066) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) [ 3051.475918][ T38] audit: type=1326 audit(1621341270.515:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29065 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:30 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 12:34:31 executing program 4: socketpair(0x1f, 0x5, 0x2, &(0x7f0000000040)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xb}, 0x10) r0 = socket(0x1, 0x5, 0x26256c4d) recvmmsg(r0, &(0x7f0000000840)=[{{&(0x7f00000001c0)=@generic, 0x80, &(0x7f0000000980)=[{&(0x7f0000000240)=""/179, 0xb3}, {&(0x7f0000000300)=""/249, 0xf9}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000000500)=""/220, 0xdc}, {&(0x7f00000004c0)=""/37, 0x25}, {&(0x7f0000000640)=""/168, 0xa8}, {&(0x7f0000000700)=""/182, 0xb6}, {&(0x7f0000000900)=""/83, 0x53}], 0x9}, 0x4}], 0x1, 0x20, &(0x7f0000000880)) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x9, 0x3, 0xffffffff, 0x1f, 'syz0\x00'}, 0x1, 0x1, 0xda, r1, 0x0, 0x1c0, 'syz1\x00', &(0x7f0000000000), 0x0, '\x00', [0x400, 0x9, 0x3, 0x23]}) 12:34:31 executing program 3: prctl$PR_MCE_KILL(0x15, 0x1, 0x0) 12:34:31 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb000, 0x0, &(0x7f0000000000)) 12:34:31 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7) 12:34:31 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:34:31 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) getsockname(r1, &(0x7f00000021c0)=@pppoe={0x18, 0x0, {0x0, @remote}}, &(0x7f0000002240)=0x80) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000002180)={'syztnl1\x00', &(0x7f0000002100)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x6, 0x7, 0x10, @remote, @mcast2, 0x700, 0x40, 0x7c2, 0x1}}) write$FUSE_INIT(r1, &(0x7f0000002080)={0x50, 0x0, r0, {0x7, 0x21, 0x3, 0x4000, 0x0, 0x40, 0xfffff001, 0x10001}}, 0x50) getresuid(&(0x7f0000002280), &(0x7f00000022c0), &(0x7f0000002300)) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) clock_gettime(0x5, &(0x7f0000000000)) [ 3052.291554][ T38] audit: type=1326 audit(1621341271.335:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29065 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:31 executing program 3: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) 12:34:31 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb001, 0x0, &(0x7f0000000000)) 12:34:31 executing program 5: openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x40) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 12:34:31 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:34:31 executing program 2: shmctl$IPC_RMID(0x0, 0xff0f0000) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:34:31 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb100, 0x0, &(0x7f0000000000)) [ 3052.572229][ T38] audit: type=1326 audit(1621341271.615:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29107 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:31 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @vsock={0x28, 0x0, 0x2710, @my=0x0}, @qipcrtr={0x2a, 0xffffffff, 0x7ffe}, @ethernet={0x306}, 0x6e01, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x3, 0x1}) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) gettid() 12:34:31 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_getres(0x4, &(0x7f0000000140)) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000000c0)={0x9c2, 0x3, 0x4, 0x100000, 0x0, {r1, r2/1000+60000}, {0x3, 0x3, 0x3, 0x5, 0x9, 0x8, "6eba9075"}, 0x5, 0x2, @fd, 0x401}) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) geteuid() 12:34:31 executing program 2: modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x20000800, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x1, 0x1}, 0x10) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000080)='syz0\x00') prctl$PR_MCE_KILL(0x29, 0x1, 0x2) 12:34:31 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 3052.704473][ T38] audit: type=1326 audit(1621341271.745:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29116 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:31 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb101, 0x0, &(0x7f0000000000)) 12:34:31 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 12:34:32 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb200, 0x0, &(0x7f0000000000)) 12:34:32 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x4) 12:34:32 executing program 3: prctl$PR_MCE_KILL(0x17, 0x1, 0x0) 12:34:32 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x2) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x301400, 0x0) 12:34:32 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) [ 3053.369647][ T38] audit: type=1326 audit(1621341272.405:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29107 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:32 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb201, 0x0, &(0x7f0000000000)) [ 3053.526246][ T38] audit: type=1326 audit(1621341272.565:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29116 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:32 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x1) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 12:34:32 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) setresuid(0x0, r1, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xf}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x2}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1600}}, {}, {@allow_other}], [{@audit}, {@appraise_type}, {@context={'context', 0x3d, 'sysadm_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '-/+*-]:'}}]}}) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)={0x64, 0xa0c, 0x6, "32c4a08d436b33f8999bf4484ca1dec697c5815cc888509beffe3db3ddb7b477d3e6b77ad58ed8abf2cbb5dfc31fc359f0a0d27c88d02ff8999dd88276a2e90a9ba57953850430f65f8ee3c18ba1483dad33b6a88164d1ac75c302a2fa30e18cddafb791"}) 12:34:32 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 12:34:32 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) keyctl$join(0x1, &(0x7f0000000080)={'syz', 0x1}) r0 = io_uring_setup(0x770f, &(0x7f0000000000)={0x0, 0x5ced, 0x10, 0x1, 0x2e1}) fcntl$getown(r0, 0x9) 12:34:32 executing program 3: prctl$PR_MCE_KILL(0x18, 0x1, 0x0) 12:34:32 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb300, 0x0, &(0x7f0000000000)) 12:34:32 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 12:34:32 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)) 12:34:32 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb301, 0x0, &(0x7f0000000000)) [ 3053.777843][ T38] audit: type=1326 audit(1621341272.815:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29161 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:32 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x1) 12:34:32 executing program 3: prctl$PR_MCE_KILL(0x19, 0x1, 0x0) 12:34:32 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 12:34:33 executing program 4: prctl$PR_MCE_KILL(0x16, 0x0, 0x0) restart_syscall() r0 = fork() ptrace$poke(0x5, r0, &(0x7f0000000000), 0x9) 12:34:33 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb400, 0x0, &(0x7f0000000000)) 12:34:33 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) 12:34:33 executing program 2: setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000000)=0xfff, 0x4) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x9e, 0x4, 0x4, "52f228c3001d049c217c6de5e4490e73e840357d966fb35b05e4f09ae505198313c5ad6ee3e8fe983d9c2ae4bad8824e50bb660b4740590b12d68239b862ece0ceb6e8498dc10a727a6f0b389eb66bef5793dd992d0bf1917508f3a7b5db0a487734198883260563512836cf588ba4921df564b701a737f4ff656f8aa40fc0bae455721d556841e81e98d4d4ca546fcb534521ecdf719de3cce24bf2f67b"}) 12:34:33 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x100000000000004, 0x472800) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1) syz_io_uring_setup(0x5676, &(0x7f0000000040)={0x0, 0xff, 0x4, 0x1, 0x1e5, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) 12:34:33 executing program 3: prctl$PR_MCE_KILL(0x1a, 0x1, 0x0) [ 3054.593406][ T38] audit: type=1326 audit(1621341273.635:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29161 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:33 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb401, 0x0, &(0x7f0000000000)) 12:34:33 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 12:34:33 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 12:34:33 executing program 3: prctl$PR_MCE_KILL(0x1b, 0x1, 0x0) 12:34:33 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0x80000000) prctl$PR_MCE_KILL(0x29, 0x0, 0x2) 12:34:33 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb500, 0x0, &(0x7f0000000000)) 12:34:34 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f00000020c0)=0x32) rt_tgsigqueueinfo(r0, 0xffffffffffffffff, 0x24, &(0x7f0000002040)={0x1c, 0x800, 0x2}) 12:34:34 executing program 5: syz_open_dev$media(&(0x7f0000000000), 0x80f0, 0x0) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) 12:34:34 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 12:34:34 executing program 3: prctl$PR_MCE_KILL(0x1c, 0x1, 0x0) 12:34:34 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x195426f3ad2dcb1e) 12:34:34 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb501, 0x0, &(0x7f0000000000)) 12:34:34 executing program 3: prctl$PR_MCE_KILL(0x1d, 0x1, 0x0) 12:34:34 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x100000000}) [ 3055.093546][ T38] audit: type=1326 audit(1621341274.135:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29213 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:34 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 12:34:34 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x1) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 12:34:34 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb600, 0x0, &(0x7f0000000000)) 12:34:34 executing program 3: prctl$PR_MCE_KILL(0x1e, 0x1, 0x0) [ 3055.900590][ T38] audit: type=1326 audit(1621341274.935:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29213 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:35 executing program 4: prctl$PR_MCE_KILL(0x16, 0x0, 0xeb0d2c561ce9ac92) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x3, 0x400) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000140)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) syz_open_dev$sndctrl(&(0x7f0000000480), 0x6, 0x80400) write$fb(r1, &(0x7f0000000340)="209a3bd5adc2a437ce112d8c248aab30293a86ab8dd7e1a1bad1dbdc328f6f2dc8f42ad19e3894f6c4037bbf0ef027e4a846877fcb7ebf288b4a65470b7ff0510807fa540c2b77ad6c829cae4e35f5efbf403a0aa569b6646fbf3601defcffc7c52ce2d8346f0d5c0e65662acc6d07f335cca4e8", 0x74) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) read$fb(r2, &(0x7f0000000280)=""/135, 0x87) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000440), 0x20400, 0x0) ioctl$FBIOGET_FSCREENINFO(r3, 0x4602, &(0x7f0000000040)) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x9, 0x40) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x6, 0x4, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7, 0x40, 0x2, 0x7}}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 12:34:35 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x0, 0x1, [{r0, 0x0, 0x10000, 0x2000}]}) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) 12:34:35 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 12:34:35 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002080)={0x50, 0x0, r0, {0x7, 0x21, 0x4c, 0x20c004, 0x7fff, 0x8, 0x4, 0x90}}, 0x50) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000), 0x14) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:34:35 executing program 3: prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 12:34:35 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb601, 0x0, &(0x7f0000000000)) 12:34:35 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x9a780000000, 0x2800) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000080)=0x9) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000140)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f00000000c0)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x99d303, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000001c0)=0x6) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000100)={0x0, 0xffff}) 12:34:35 executing program 3: prctl$PR_MCE_KILL(0x22, 0x1, 0x0) 12:34:35 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb700, 0x0, &(0x7f0000000000)) 12:34:35 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 12:34:35 executing program 4: r0 = geteuid() getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x0) r3 = fork() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000140)) r4 = fork() rt_tgsigqueueinfo(0x0, r4, 0x0, &(0x7f0000000140)) r5 = fork() rt_tgsigqueueinfo(0x0, r5, 0x0, &(0x7f0000000140)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(0x0, r6, 0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000140)={{0x2, r0, r1, r0, r2, 0x90, 0x400}, 0x8, 0x6, 0x1, 0x1, r5, r5, 0x103}) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) 12:34:35 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x8000000) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 12:34:35 executing program 3: prctl$PR_MCE_KILL(0x23, 0x1, 0x0) 12:34:35 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) 12:34:35 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb701, 0x0, &(0x7f0000000000)) 12:34:35 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x1) 12:34:35 executing program 5: memfd_create(&(0x7f0000000000)='/-@/[#{@\x00', 0x4) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) [ 3056.330961][ T38] audit: type=1326 audit(1621341275.365:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29260 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:35 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}) 12:34:35 executing program 3: prctl$PR_MCE_KILL(0x24, 0x1, 0x0) 12:34:35 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb800, 0x0, &(0x7f0000000000)) 12:34:35 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) 12:34:35 executing program 5: syz_open_dev$mouse(&(0x7f0000000000), 0x55c3, 0x400001) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 12:34:36 executing program 4: prctl$PR_MCE_KILL(0x16, 0x0, 0x0) 12:34:36 executing program 3: prctl$PR_MCE_KILL(0x25, 0x1, 0x0) 12:34:36 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) 12:34:36 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb801, 0x0, &(0x7f0000000000)) 12:34:36 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x101100, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x1d, 0x2}) 12:34:36 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(0x0, r0, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffff9c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000380)='./file0\x00', 0x1, 0x800, 0x1}, 0x9) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000000)={0x1d, 0x0, 0x3, {0x1, 0x81, 0x3}, 0xff}, 0x18) setresuid(r0, r1, r2) 12:34:36 executing program 2: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)=0x3c) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, 0xfffffffffffffffd) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xa) 12:34:36 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 12:34:36 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb900, 0x0, &(0x7f0000000000)) 12:34:36 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) 12:34:36 executing program 3: prctl$PR_MCE_KILL(0x26, 0x1, 0x0) 12:34:36 executing program 4: read$fb(0xffffffffffffffff, &(0x7f0000000000)=""/246, 0xf6) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) 12:34:36 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb901, 0x0, &(0x7f0000000000)) 12:34:36 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) 12:34:36 executing program 3: prctl$PR_MCE_KILL(0x27, 0x1, 0x0) 12:34:36 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 12:34:36 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0x40, 0x6, 0x4, 0x3c, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x0, 0x77ab0efe, 0xffff}}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname(r1, &(0x7f0000005280)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f00000003c0)=0x80) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', r0, 0x4, 0x6, 0x7f, 0x8, 0xa, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, 0x7, 0x8, 0x80000000, 0x2}}) recvmmsg(0xffffffffffffffff, &(0x7f0000004fc0)=[{{&(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000540), 0x0, &(0x7f00000005c0)=""/14, 0xe}, 0x6}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000200)=[{&(0x7f0000000680)=""/48, 0x30}, {&(0x7f00000006c0)=""/84, 0x54}, {&(0x7f0000000740)=""/174, 0xae}, {&(0x7f00000053c0)=""/4096, 0x1000}, {&(0x7f0000001800)=""/253, 0xfd}, {&(0x7f0000001900)=""/39, 0x27}, {&(0x7f0000001940)=""/161, 0xa1}], 0x7, &(0x7f0000001a80)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000002a80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002b40)=[{&(0x7f0000002b00)=""/49, 0x31}], 0x1, &(0x7f0000002b80)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000003b80)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f0000004e40)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/48, 0x30}, {&(0x7f0000004c40)=""/217, 0xd9}, {&(0x7f0000004d40)=""/127, 0x7f}, {&(0x7f0000004dc0)=""/123, 0x7b}], 0x5, &(0x7f0000004ec0)=""/254, 0xfe}, 0x7}], 0x4, 0x20, &(0x7f00000050c0)={0x77359400}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000005180)={'ip6gre0\x00', &(0x7f0000005100)={'syztnl1\x00', r0, 0x29, 0x7, 0x8, 0x40, 0x62, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd1, 0x700, 0x7, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000005240)={'sit0\x00', &(0x7f00000051c0)={'syztnl1\x00', r3, 0x4, 0xf8, 0x3, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x35}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x8000, 0x400, 0x9}}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r4, &(0x7f00000063c0)={0x2020}, 0x2020) [ 3057.446891][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 3057.446906][ T38] audit: type=1326 audit(1621341276.485:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29326 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:36 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x400) prctl$PR_MCE_KILL(0x34, 0x0, 0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x400) mmap$qrtrtun(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x10, r0, 0xfff) 12:34:36 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xba00, 0x0, &(0x7f0000000000)) 12:34:36 executing program 3: prctl$PR_MCE_KILL(0x28, 0x1, 0x0) 12:34:36 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 12:34:36 executing program 2: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x3, &(0x7f0000000040)=0x2) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:34:36 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x2) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 12:34:37 executing program 4: prctl$PR_MCE_KILL(0x16, 0x0, 0x0) 12:34:37 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 12:34:37 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xba01, 0x0, &(0x7f0000000000)) 12:34:37 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:34:37 executing program 2: write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x100}}, 0x18) prctl$PR_MCE_KILL(0x29, 0x0, 0x0) 12:34:37 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x34, 0x0, 0x0) [ 3058.268983][ T38] audit: type=1326 audit(1621341277.305:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29326 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:37 executing program 5: ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000004000000ec084a4821"]) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x9, {0x7ff, 0x8, 0x4, 0x10000, 0x4, 0x11}}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f00000002c0)={0x0, {0x6, 0x7fffffff, 0x1, 0x3, 0x9, 0x7}}) syz_open_dev$media(&(0x7f0000000040), 0x8001, 0x290200) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x29, 0x40, 0x0, 0x0, 0x4c, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x80, 0x1, 0x69be, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000240)={'ip6tnl0\x00', r3, 0x4, 0x8, 0x1, 0x7, 0x42, @private1, @mcast1, 0x1, 0x7, 0x7fffffff, 0x2}}) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000300), 0x7, 0x40500) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000340)={r0, 0x1, 0x0, 0x1000000}) 12:34:37 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x2) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 12:34:37 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xbb00, 0x0, &(0x7f0000000000)) 12:34:37 executing program 3: prctl$PR_MCE_KILL(0x2a, 0x1, 0x0) 12:34:37 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 12:34:37 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x282801, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)) fcntl$getown(r0, 0x9) ioctl$sock_bt_cmtp_CMTPCONNDEL(r0, 0x400443c9, &(0x7f0000000080)={@any, 0x8}) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x4) clock_gettime(0x0, &(0x7f00000021c0)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002100)=[{{&(0x7f00000000c0)=@ax25={{0x3, @netrom}, [@remote, @null, @null, @null, @rose, @null, @rose, @bcast]}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000240)=""/211, 0xd3}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000340)=""/255, 0xff}, {&(0x7f0000000140)=""/65, 0x41}, {&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000500)=""/163, 0xa3}, {&(0x7f00000001c0)}, {&(0x7f00000005c0)=""/109, 0x6d}, {&(0x7f0000000640)=""/20, 0x14}, {&(0x7f0000000680)=""/213, 0xd5}], 0xa}, 0x4}, {{&(0x7f0000000840)=@qipcrtr, 0x80, &(0x7f0000002240)=[{&(0x7f00000008c0)=""/227, 0xe3}], 0x1, &(0x7f0000000a00)=""/195, 0xc3}, 0x1}, {{&(0x7f0000000b00)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002000)=[{&(0x7f0000002280)=""/185, 0xb9}, {&(0x7f0000000c40)=""/42, 0x2a}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/194, 0xc2}, {&(0x7f0000001d80)=""/112, 0x70}, {&(0x7f0000001e00)=""/110, 0x6e}, {&(0x7f0000001e80)=""/34, 0x22}, {&(0x7f0000002340)=""/238, 0xee}, {&(0x7f0000001fc0)=""/15, 0xf}], 0x9, &(0x7f00000020c0)=""/48, 0x30}}], 0x3, 0x40002100, &(0x7f0000002200)={r2, r3+10000000}) 12:34:37 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x400) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x4) 12:34:37 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xbb01, 0x0, &(0x7f0000000000)) 12:34:37 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x541400, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0x7f) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) [ 3058.564239][ T38] audit: type=1326 audit(1621341277.605:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29374 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:37 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 12:34:37 executing program 3: prctl$PR_MCE_KILL(0x2f, 0x1, 0x0) 12:34:37 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xbc00, 0x0, &(0x7f0000000000)) 12:34:37 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) rt_tgsigqueueinfo(0xffffffffffffffff, r0, 0x24, &(0x7f0000000080)={0x20, 0x0, 0x5}) 12:34:37 executing program 3: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) 12:34:37 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x14) 12:34:37 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 12:34:37 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xbc01, 0x0, &(0x7f0000000000)) 12:34:38 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x2) sched_rr_get_interval(0x0, &(0x7f0000000000)) 12:34:38 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) shmctl$IPC_RMID(0x0, 0x0) 12:34:38 executing program 3: prctl$PR_MCE_KILL(0x35, 0x1, 0x0) 12:34:38 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 12:34:38 executing program 4: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) getresuid(&(0x7f0000000140), &(0x7f0000002200), &(0x7f00000000c0)) shmctl$IPC_RMID(r0, 0x0) shmat(r0, &(0x7f0000ffa000/0x3000)=nil, 0x6000) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = geteuid() getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(0x0, r3, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)) setresuid(r1, r2, r3) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) 12:34:38 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xbd00, 0x0, &(0x7f0000000000)) [ 3059.387891][ T38] audit: type=1326 audit(1621341278.425:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29374 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:38 executing program 5: modify_ldt$write2(0x11, &(0x7f00000000c0)={0x4, 0x0, 0xfffffffffffffbff, 0x0, 0x2, 0x1}, 0x10) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/185) getpgrp(0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) mount$fuseblk(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x8000, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@blksize}], [{@fsname={'fsname', 0x3d, ',{]\xb5^'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@smackfsdef}, {@dont_appraise}]}}) r1 = fork() gettid() rt_tgsigqueueinfo(0x0, r1, 0x0, &(0x7f0000000140)) ioprio_get$pid(0x1, r1) 12:34:38 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xbd01, 0x0, &(0x7f0000000000)) 12:34:38 executing program 3: prctl$PR_MCE_KILL(0x3a, 0x1, 0x0) 12:34:38 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x2) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) 12:34:38 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}) [ 3059.533687][ T38] audit: type=1326 audit(1621341278.575:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29419 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:38 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xbe00, 0x0, &(0x7f0000000000)) 12:34:38 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) 12:34:38 executing program 3: prctl$PR_MCE_KILL(0x3b, 0x1, 0x0) 12:34:38 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) socket(0x25, 0x2, 0x2) socketpair(0x0, 0x4, 0xdb0, &(0x7f00000000c0)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 12:34:38 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x1) 12:34:39 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x573) 12:34:39 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xbe01, 0x0, &(0x7f0000000000)) 12:34:39 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 12:34:39 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 12:34:39 executing program 3: prctl$PR_MCE_KILL(0x59616d61, 0x1, 0x0) 12:34:39 executing program 5: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffff57c, 0x80000001, &(0x7f0000000000)=0x5) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x4ae201) write$qrtrtun(r0, &(0x7f0000000100)="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", 0x12b) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x141800, 0x0) prctl$PR_MCE_KILL(0x34, 0x1, 0x2) [ 3060.337013][ T38] audit: type=1326 audit(1621341279.375:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29419 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:39 executing program 2: syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x40c0) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:34:39 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xbf00, 0x0, &(0x7f0000000000)) 12:34:39 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x7) 12:34:39 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:34:39 executing program 5: clock_gettime(0x2, &(0x7f0000000000)) [ 3060.534600][ T38] audit: type=1326 audit(1621341279.575:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29469 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:39 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x700) 12:34:40 executing program 4: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x57}, 0x8) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x6, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r0, 0xb1, 0x8}, 0xc) 12:34:40 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:34:40 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:34:40 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xbf01, 0x0, &(0x7f0000000000)) 12:34:40 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="a0000000ac93a144b2ecadd39f67e5f77d9818e7279e993349d3fe1d2133b53ab1a11d94b7fc29897c507457b86c1d5870ed84023bc4ea81afcd8563c6675dfad7625e7f3dc98d9ccb99de98856712d9d7d795783ddf04f18a8a983a641c3f73f9a7372716b3413bfc909b3dd74b67da7267168b1dfa30415b48343b9456f80b5057ea3618017b76357e309a45d3395faf9c7869b6310000000000000000"]) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x1f, 0x4, 0xffffffc1, 0x30, @mcast1, @private2, 0x7, 0x700, 0x6, 0x84b3}}) 12:34:40 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x7000000) [ 3061.352967][ T38] audit: type=1326 audit(1621341280.395:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29469 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:40 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x248442) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x6e, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f00000001c0)) 12:34:40 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc000, 0x0, &(0x7f0000000000)) 12:34:40 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x700000000000000) [ 3061.511473][ T38] audit: type=1326 audit(1621341280.545:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29491 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:40 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 12:34:40 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) recvmmsg(r1, &(0x7f0000002b00)=[{{&(0x7f0000000240)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/67, 0x43}, {&(0x7f0000001340)=""/162, 0xa2}], 0x3, &(0x7f0000001440)=""/127, 0x7f}, 0x86}, {{&(0x7f00000014c0)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001540)=""/110, 0x6e}], 0x1, &(0x7f0000001600)=""/200, 0xc8}, 0xe2}, {{&(0x7f0000001700)=@can, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001780)=""/217, 0xd9}, {&(0x7f0000001880)=""/146, 0x92}, {&(0x7f0000001940)=""/209, 0xd1}, {&(0x7f0000001a40)=""/4096, 0x1000}], 0x4, &(0x7f0000002a80)=""/69, 0x45}, 0x4}], 0x3, 0x20, &(0x7f0000002bc0)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000080)={0xf0, 0x4b0, 0x800, 0x384, 0xffff, 0xfc, 0x4, 0x1, {0x0, 0xa09}, {0x3, 0x7}, {0x9, 0x3f, 0x1}, {0x1, 0x1f}, 0x1, 0x1, 0x5c, 0x5, 0x1, 0x100, 0x4, 0x3, 0x0, 0x101, 0xff, 0xfffffff9, 0x2, 0x200, 0x3, 0xc}) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x400, 0x4) prctl$PR_MCE_KILL(0x34, 0x1, 0x2) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@null, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) write$fb(r2, &(0x7f0000000140)="b6acade6330e954e12a09fb5273516702d5407d3ebebf6decdd6ba45328593a3ba7fa843152374b8ed252f49431270310e37406e5362ce2493bfc1d31d017c41579f9d5ac7dd8dbb2fce0b2d87208f54477c49c8cf608995aeb9e381be1badb4cd1aeaf47934df1ce1c8c026fd848f8509f38a5b3511b388eac15763befe6525996232b4983998b5a33995daff2e14d4691f00abf7ecf55be5868e4f97aa5675d67e8c312e832391a0fe3e661f978c82c82aa1", 0xb3) 12:34:40 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc001, 0x0, &(0x7f0000000000)) 12:34:41 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 12:34:41 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000)={0xff, 0x8}, 0x2) 12:34:41 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 12:34:41 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) 12:34:41 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc100, 0x0, &(0x7f0000000000)) [ 3062.316797][ T38] audit: type=1326 audit(1621341281.355:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29491 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:41 executing program 3: sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14, &(0x7f0000000080)={&(0x7f0000000040)="e51854a0a43740e223c811325b55419f9355daec044ef333bc1cdc5148e2128a8ebca0286c84229bb0", 0x29}, 0x1, 0x0, 0x0, 0x40}, 0x8000) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:34:41 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc101, 0x0, &(0x7f0000000000)) 12:34:41 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) ioprio_get$pid(0x3, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={0x1d, 0x0, 0x0, {0x2, 0x1, 0x4}, 0xfe}, 0x18) sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) pselect6(0x40, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x80000001, 0x7f, 0x40, 0x5, 0x401}, &(0x7f0000000080)={0x1, 0x7f, 0x5, 0xc3, 0x5, 0x1, 0x8, 0x2}, &(0x7f00000000c0)={0xfff, 0x2, 0x7f, 0x2, 0x8, 0xffffffffffff7fff, 0x1ff}, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180)={&(0x7f0000000140)={[0x6]}, 0x8}) pselect6(0x40, &(0x7f0000000340)={0x400, 0x2bc, 0x9, 0x6f9b, 0x62329439, 0x5, 0xfffffffffffffa60, 0xbfd}, &(0x7f0000000380)={0x7b5e, 0x601, 0x5, 0x1, 0x81, 0xffffffffffffa694, 0x80000000000000, 0x6846}, &(0x7f00000003c0)={0x2, 0x9, 0x4, 0x6, 0x2, 0x7, 0x3, 0x2}, &(0x7f0000000400)={0x0, 0x3938700}, &(0x7f0000000480)={&(0x7f0000000440)={[0x3]}, 0x8}) r0 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffa000/0x4000)=nil) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(0x0, r2, 0x0) geteuid() r3 = fork() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000140)) shmctl$IPC_SET(r0, 0x1, &(0x7f00000002c0)={{0x1, r1, 0xee01, r2, 0xee00, 0x44, 0x4}, 0x7460, 0x67c, 0x0, 0x1, r3, 0x0, 0x5}) 12:34:41 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 12:34:41 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x2) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0xd1) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) 12:34:41 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 12:34:41 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) [ 3062.553506][ T38] audit: type=1326 audit(1621341281.595:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29534 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:41 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc200, 0x0, &(0x7f0000000000)) 12:34:41 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 12:34:41 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 12:34:41 executing program 3: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000080)=0x80) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:34:41 executing program 2: write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:34:41 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 12:34:41 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc201, 0x0, &(0x7f0000000000)) [ 3063.377902][ T38] audit: type=1326 audit(1621341282.415:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29534 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:42 executing program 4: shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) 12:34:42 executing program 3: getsockname(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000100)=0x80) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:34:42 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz0\x00') prctl$PR_MCE_KILL(0x34, 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2e0400, 0x0) 12:34:42 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 12:34:42 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) 12:34:42 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc300, 0x0, &(0x7f0000000000)) 12:34:42 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc301, 0x0, &(0x7f0000000000)) 12:34:42 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) write$FUSE_WRITE(r0, &(0x7f0000000000)={0x18, 0x0, 0x0, {0xfff}}, 0x18) 12:34:42 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) 12:34:42 executing program 2: ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000100)={0x4, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0]}) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) [ 3063.584101][ T38] audit: type=1326 audit(1621341282.625:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29585 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:42 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) 12:34:42 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc400, 0x0, &(0x7f0000000000)) 12:34:43 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x2000002, 0x10, r0, 0x8000000) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) 12:34:43 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x3) 12:34:43 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 12:34:43 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x5, 0x1, 0x4, 0x100000, 0x100, {0x77359400}, {0x5, 0x8, 0x40, 0xff, 0x7, 0x5, "1a0c2c2d"}, 0x2, 0x3, @offset=0x8, 0x1, 0x0, r1}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xff, 0x1}}, 0x18) 12:34:43 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) 12:34:43 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc401, 0x0, &(0x7f0000000000)) 12:34:43 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@tipc, &(0x7f00000000c0)=0x80) 12:34:43 executing program 3: ioprio_get$pid(0x6, 0xffffffffffffffff) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x1) prctl$PR_MCE_KILL(0x39, 0x1, 0x1) 12:34:43 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4a102, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) [ 3064.478352][ T38] audit: type=1326 audit(1621341283.515:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29608 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:43 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc500, 0x0, &(0x7f0000000000)) 12:34:43 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 12:34:43 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x1) 12:34:44 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) 12:34:44 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x2) 12:34:44 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) 12:34:44 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc501, 0x0, &(0x7f0000000000)) 12:34:44 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 12:34:44 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) prctl$PR_GET_SECCOMP(0x15) socket$bt_cmtp(0x1f, 0x3, 0x5) 12:34:44 executing program 5: prctl$PR_MCE_KILL(0x34, 0x5a19ff858bae2375, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) socket(0x18, 0x1, 0x81) 12:34:44 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc600, 0x0, &(0x7f0000000000)) [ 3065.408027][ T38] audit: type=1326 audit(1621341284.445:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29642 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:44 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0xb2, 0x5, 0x100, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7, 0x7, 0x1}}) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:34:44 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r0 = shmget(0x1, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) r2 = fcntl$getown(0xffffffffffffffff, 0x9) sched_getparam(r2, &(0x7f0000000080)) setresuid(0x0, r1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) ioctl$FBIOGET_FSCREENINFO(r4, 0x4602, &(0x7f0000000180)) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x2, r1, 0xee00, 0xffffffffffffffff, 0xee00, 0x40, 0x6}, 0x440, 0x3, 0x8, 0xfc71, r3, 0x0, 0xffff}) getpgid(0x0) 12:34:44 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 12:34:44 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc601, 0x0, &(0x7f0000000000)) 12:34:45 executing program 4: prctl$PR_MCE_KILL(0x16, 0x0, 0x0) 12:34:45 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) gettid() 12:34:45 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc700, 0x0, &(0x7f0000000000)) 12:34:45 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) read$fb(r0, &(0x7f0000000000)=""/132, 0x84) 12:34:45 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 12:34:45 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) [ 3066.230212][ T38] audit: type=1326 audit(1621341285.265:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29642 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:45 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) 12:34:45 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) 12:34:45 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) r1 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(0x0, r2, 0x0) r3 = fork() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000140)) shmctl$IPC_SET(r1, 0x1, &(0x7f00000000c0)={{0x1, r2, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0x80, 0x5}, 0xfffffc00, 0x2, 0x7fff, 0xe9b5, 0xffffffffffffffff, r3, 0x5}) 12:34:45 executing program 3: ioprio_get$pid(0x4, 0x0) prctl$PR_MCE_KILL(0x39, 0x0, 0x2) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 12:34:45 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc701, 0x0, &(0x7f0000000000)) 12:34:45 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) [ 3066.519974][ T38] audit: type=1326 audit(1621341285.555:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29698 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:45 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}) 12:34:45 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz0\x00') prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:34:45 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc800, 0x0, &(0x7f0000000000)) 12:34:45 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x2) 12:34:45 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) 12:34:45 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) epoll_create(0x3) 12:34:45 executing program 5: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 12:34:45 executing program 2: r0 = fork() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000140)) r1 = fork() rt_tgsigqueueinfo(0x0, r1, 0x0, &(0x7f0000000140)) r2 = fork() rt_tgsigqueueinfo(0x0, r2, 0x0, &(0x7f0000000140)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) gettid() r3 = fork() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000140)) r4 = fcntl$getown(0xffffffffffffffff, 0x9) r5 = getpgid(r4) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x4) prctl$PR_MCE_KILL(0x29, 0x0, 0x1) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 12:34:45 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc801, 0x0, &(0x7f0000000000)) 12:34:45 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 12:34:45 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x0) 12:34:46 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x18042, 0x0) syz_io_uring_setup(0x3b36, &(0x7f0000000040)={0x0, 0x45b9, 0x0, 0x1, 0x332, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000140)={0xfbfc, 0x100000000, 0x101, 0x1, 0x8001, 0x400, 0x7, 0x7}, &(0x7f0000000180)={0x200, 0xfffffffffffffffc, 0x0, 0x0, 0x3ff, 0x4, 0x3, 0x9}, &(0x7f00000001c0)={0x7ff, 0x100000001, 0x1, 0x1, 0x3, 0x800, 0x6, 0xffffffff}, &(0x7f0000000240)={r1, r2+10000000}, &(0x7f00000002c0)={&(0x7f0000000280)={[0x5]}, 0x8}) 12:34:46 executing program 5: ioprio_get$pid(0x1, 0x0) fork() prctl$PR_MCE_KILL(0x34, 0x0, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) r0 = fork() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000140)) sched_getparam(r0, &(0x7f0000000040)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) 12:34:46 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 12:34:46 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc900, 0x0, &(0x7f0000000000)) 12:34:46 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffff000, 0x1000}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x3, 0x6, 0xb2, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80, 0x8, 0x2, 0xf78}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'sit0\x00', r1, 0x29, 0x1, 0x7f, 0x4, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x8000, 0x7, 0x6}}) 12:34:46 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x6, &(0x7f0000000000)=0x1) [ 3067.353506][ T38] audit: type=1326 audit(1621341286.395:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29698 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:46 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 12:34:46 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x1) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) 12:34:46 executing program 2: prctl$PR_MCE_KILL(0x29, 0x165ad917869a8c5, 0x2) 12:34:46 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc901, 0x0, &(0x7f0000000000)) 12:34:46 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x2) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x101002, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='syz0\x00') prctl$PR_MCE_KILL(0x16, 0x1, 0x0) 12:34:46 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) getsockname(r1, &(0x7f0000000040)=@qipcrtr, &(0x7f00000000c0)=0x80) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={r0, 0x8c35}) 12:34:46 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 12:34:46 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xca00, 0x0, &(0x7f0000000000)) 12:34:46 executing program 3: shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ffd000/0x2000)=nil) r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000000)=""/201) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:34:46 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x3ab140, 0x0) syz_open_dev$cec(&(0x7f0000000000), 0x1, 0x2) [ 3067.798118][ T38] audit: type=1326 audit(1621341286.835:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29782 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:46 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xca01, 0x0, &(0x7f0000000000)) 12:34:46 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 12:34:46 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000000)) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000140)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0xe1) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x2) setitimer(0x2, &(0x7f0000000080)={{}, {r0, r1/1000+10000}}, &(0x7f00000000c0)) 12:34:47 executing program 2: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) read$qrtrtun(r0, &(0x7f0000000040)=""/125, 0x7d) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:34:47 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xcb00, 0x0, &(0x7f0000000000)) 12:34:47 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) [ 3068.617358][ T38] audit: type=1326 audit(1621341287.655:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29782 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:47 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x2) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x0, 0x18}, 0xc) 12:34:47 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 12:34:47 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xcb01, 0x0, &(0x7f0000000000)) 12:34:47 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000680), 0x4) r1 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffe000/0x1000)=nil) r2 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000540)={{0x0, 0xee01, 0xee01, 0xee01, 0xee01, 0x129, 0xf001}, 0x6, 0x3, 0x9, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x3e0d}) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_RMID(r2, 0x0) prctl$PR_MCE_KILL(0x34, 0x1, 0x1) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000040)={0x5, 0x80000000, {0x55, 0x8, 0x0, {0x1, 0x7}, {0x97, 0x2}, @const={0xff93, {0x6, 0x401, 0x7, 0x2}}}, {0x54, 0x40, 0x1, {0x4, 0x7}, {0x8, 0x7}, @period={0x5a, 0x0, 0x780, 0x401, 0x7, {0x20, 0xff26, 0x5, 0xa}, 0x2, &(0x7f0000000000)=[0x79b9, 0x101]}}}) r3 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) shmctl$IPC_RMID(r3, 0x0) shmctl$SHM_STAT_ANY(r3, 0xf, &(0x7f00000005c0)=""/179) r4 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) shmctl$IPC_RMID(r4, 0x0) shmctl$SHM_UNLOCK(r4, 0xc) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x448802, 0x0) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f0000000700)=0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0x2, 0x4, 0x40, 0xff}, 0x48, [0x8, 0x7, 0x24ba, 0xfff, 0x8, 0xbb6, 0x7fe, 0x1, 0xfff, 0xe93, 0xc3, 0x8, 0x732ea8d0, 0x1, 0x4, 0xffff5a7b, 0x0, 0x6, 0x2, 0x6, 0x8, 0x0, 0x8, 0x81, 0x3ff, 0x6, 0x6, 0x4, 0x8, 0x101, 0x5, 0x7fffffff, 0x10000, 0xffffff81, 0x8, 0xa5a3, 0x20, 0x1f, 0x1000, 0x1, 0x9, 0x6, 0x6, 0x80, 0x1ff, 0x4, 0xfffffe01, 0x7ff, 0xbe1, 0xff, 0xfc06, 0xfffffffe, 0x1, 0x9c0, 0x3, 0x400, 0x2, 0x3, 0x7fffffff, 0x401, 0x1, 0x100, 0x9, 0x400], [0x0, 0xfffffff8, 0x81, 0x7, 0x5, 0xeac, 0x8000, 0x7fffffff, 0x8, 0x3, 0xffffffff, 0x0, 0xd5, 0x1f, 0x401, 0x200, 0x52431f22, 0x63af6457, 0x4, 0x6, 0x9, 0x8, 0x80, 0x2, 0x56b, 0xd6, 0x7, 0x401, 0xb43, 0x401, 0x5, 0x4, 0x1ff, 0x8, 0xfff, 0x6a6d5dba, 0x8, 0x81, 0x3ff, 0x5, 0x100, 0x8001, 0x100, 0x4, 0x6, 0x2, 0x5, 0x8, 0xf92, 0x8000, 0x1000, 0x1, 0x9, 0xfffffff7, 0xacb, 0x5, 0xfffffffc, 0x5, 0x1e, 0x101, 0x17f4, 0x42, 0x9, 0x8], [0x8, 0xffff, 0x1, 0x3, 0x8, 0x80, 0x1, 0x2, 0xc93, 0x1, 0x5, 0x4, 0x3ff, 0x81, 0x5, 0x2, 0x10000, 0x4, 0x139, 0x40, 0xe9a, 0x5, 0x2, 0x2a78374e, 0x15, 0x7, 0xffff, 0x8, 0x200, 0x2, 0x1, 0x8, 0x3, 0x7, 0xfc6f, 0xfffff854, 0x1000, 0x3ff, 0x200, 0xa0, 0x7, 0xa4, 0xfc7, 0xff, 0xdcbe, 0x1000, 0x10001, 0x0, 0x10001, 0x7, 0x101, 0x400, 0xff, 0x1000, 0x1, 0xffff, 0x7f, 0x2, 0x9, 0x0, 0x5, 0xfff, 0x2, 0x1], [0x0, 0x100, 0xfff, 0x8, 0x6, 0x2f1, 0x4, 0x101, 0x1, 0x2, 0x800, 0x775d, 0x400, 0x3, 0x6, 0x0, 0x4, 0x3, 0x3, 0x3ff, 0x40, 0xb9, 0x5, 0x4c6abd0f, 0x2, 0xff, 0x6, 0x5, 0x400, 0x8, 0x0, 0xf46, 0x1, 0x1, 0xee4, 0x2c60, 0x10001, 0x4, 0x3, 0x5, 0x4, 0x2, 0x0, 0x2841, 0x0, 0x2, 0x8, 0xbd, 0x9, 0x8, 0x101, 0x26f, 0xffffff80, 0x8, 0x5, 0x33ef, 0x1, 0x1, 0x8, 0x0, 0x471, 0x6, 0x3, 0x2]}, 0x45c) 12:34:47 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x2) openat$fb1(0xffffffffffffff9c, &(0x7f00000000c0), 0x141, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x60800) geteuid() r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000080)) 12:34:47 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xcc00, 0x0, &(0x7f0000000000)) 12:34:47 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 12:34:47 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) clock_getres(0x6, &(0x7f0000000000)) [ 3068.808065][ T38] audit: type=1326 audit(1621341287.845:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29819 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:47 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x8) 12:34:48 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000000)) 12:34:48 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 12:34:48 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xcc01, 0x0, &(0x7f0000000000)) 12:34:48 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) write$fb(0xffffffffffffffff, &(0x7f0000000000)="63f1d2b1318e3f80a2480a63ecd688263e83baa12c24d159426e81d5801a5a03c6e073fb319e38315005dba1ecc1084604ceb32ee1b77fb62b4cc177af6fd0ee4c4989a1c357232d3d31445415517625814ec286797941dd44", 0x59) 12:34:48 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000001c0), 0x1000, 0x70000) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x1}}, 0x18) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x100010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x5441, &(0x7f0000000000)={0x0, 0xf5e0, 0x8, 0x1, 0xfb, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000080), &(0x7f0000000100)) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) 12:34:48 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0x5, 0x4) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:34:48 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x1, 0x1}) 12:34:48 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xcd00, 0x0, &(0x7f0000000000)) 12:34:48 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}) [ 3069.623715][ T38] audit: type=1326 audit(1621341288.665:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29819 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:48 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xcd01, 0x0, &(0x7f0000000000)) 12:34:48 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 12:34:48 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000000)=0xfffffe00) 12:34:48 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xce00, 0x0, &(0x7f0000000000)) [ 3069.814526][ T38] audit: type=1326 audit(1621341288.855:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29856 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:48 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) 12:34:48 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') [ 3070.635060][ T38] audit: type=1326 audit(1621341289.675:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29856 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:49 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000004c80)=0x1, 0x4) 12:34:49 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xce01, 0x0, &(0x7f0000000000)) 12:34:49 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x2) 12:34:49 executing program 2: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x202002, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x1, 0x0) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000140)={'syz0\x00', {0x2, 0x7, 0x503a, 0x1ff}, 0x57, [0x7fffffff, 0x8001, 0x6, 0x0, 0xffff, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0xfffffff8, 0xfffffff8, 0x94af, 0x81, 0x3, 0x80000000, 0xfffffe00, 0xfffffff9, 0x5, 0x0, 0x7, 0x10000, 0x100, 0x0, 0x6291, 0x6, 0x5, 0x8000, 0x1, 0x90, 0x0, 0x0, 0xfffffe00, 0x9, 0x1ff, 0x6, 0x2, 0x8, 0x7, 0x4, 0x4, 0x0, 0x3f, 0x8, 0x0, 0x40, 0x6, 0x8, 0x9, 0x10001, 0x2, 0x3, 0xfffffff8, 0x200, 0x2, 0x5, 0xfd, 0x0, 0x7ff, 0x20, 0x9, 0xfffffffc, 0x4], [0x1d, 0x6, 0x8, 0x80000001, 0x8, 0x9, 0x1f, 0xffffffff, 0x9, 0x7, 0x7, 0x50000000, 0x5, 0x8, 0x1, 0x7261, 0x9, 0xfffffffc, 0x7fff, 0x2, 0x1f, 0x6, 0x3, 0x7, 0x2d3d, 0x6, 0x1f, 0x8000, 0x9, 0xffff, 0x18e5, 0x10000, 0x48a5, 0x6, 0x22e06e7e, 0x9, 0x1, 0x12, 0xae7, 0x8, 0x7fffffff, 0x9, 0x1ee, 0x47, 0x1, 0x7, 0xfffffffc, 0x9b, 0xeb7, 0x200, 0x1, 0x57, 0x4, 0xd2b20bb3, 0x6, 0xffffffff, 0xfffffff7, 0x8, 0x9c82, 0x9, 0x10001, 0x8, 0xe25c, 0x101], [0x4000000, 0x0, 0x40, 0x1, 0x6, 0xa17, 0x7fffffff, 0x0, 0x7ff, 0x4, 0x100, 0x89, 0x7fff, 0x8, 0x6, 0xffffff32, 0x7fffffff, 0x0, 0x3, 0x2, 0x8, 0x3, 0x1, 0x4, 0x100, 0xe1, 0x3, 0x2, 0x10, 0xf1, 0x8000, 0x4, 0x0, 0x5, 0x8, 0x6, 0x87, 0x7fff, 0x6, 0x1ff, 0x6, 0x9, 0xffffffff, 0x20, 0x0, 0x84f, 0x1, 0x81, 0x3, 0x1, 0x20, 0x7fffffff, 0x4, 0xbab, 0x2, 0x9a13, 0x4, 0x2, 0x8000, 0x7ff, 0x7, 0x7fffffff, 0x3ff, 0x400], [0xfffffbff, 0xffff, 0x80000001, 0x2, 0x2, 0x80000001, 0x7, 0x6b6189de, 0x0, 0x80000001, 0xaf, 0x81, 0x20, 0x7f, 0x8, 0x6, 0x7f, 0x5, 0x211, 0x800, 0x1000, 0x7fffffff, 0x9, 0x80000001, 0x2, 0x1000, 0x2, 0x7fffffff, 0x200, 0x0, 0x9d, 0x6ba, 0x7df46514, 0x100, 0x0, 0x1, 0xfffffff9, 0x1, 0xcf, 0x10000, 0x7, 0x7, 0x2, 0x3, 0x0, 0x6, 0x21, 0x5, 0x3, 0x0, 0x5, 0x4, 0x40, 0xb04, 0x3, 0x7, 0x5, 0x4, 0x1, 0xfffffffb, 0x1f, 0x4, 0x6, 0x5]}, 0x45c) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000040)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0002}}}, 0x14) getpgrp(r1) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000640)) bind$802154_raw(r0, &(0x7f0000000600)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) 12:34:49 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 12:34:49 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) recvmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000000)=@x25, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/155, 0x9b}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/254, 0xfe}, {&(0x7f0000000280)=""/234, 0xea}, {&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000480)=""/149, 0x95}], 0x6}, 0x8}], 0x1, 0x40010021, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000600)={0x0, 0x46, "f9b70ba1cc77ce10ed9d8ebb0ce3371843d23c03918b92f602f886ff03000000000000f8361d2474e6604ec95e424f67403864a2d1bb1bb7d64f4b5b0db73d1e"}) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) fcntl$getown(r0, 0x9) 12:34:49 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 12:34:49 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xcf00, 0x0, &(0x7f0000000000)) [ 3070.827528][ T38] audit: type=1326 audit(1621341289.865:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29881 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:49 executing program 3: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f00000056c0)={'ip6tnl0\x00', &(0x7f0000005640)={'ip6gre0\x00', 0x0, 0x29, 0xc7, 0x3, 0x863, 0x22, @empty, @local, 0x7800, 0x700, 0xa70, 0x9}}) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000005740)={0x0, @phonet={0x23, 0x4, 0x8, 0x2}, @nl=@unspec, @rc={0x1f, @any, 0xe0}, 0x40, 0x0, 0x0, 0x0, 0x1f, &(0x7f00000000c0)='team0\x00', 0xf170, 0x0, 0x3d}) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x10181, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x3fa5fb61, 0x400000) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000080)) socket$bt_hidp(0x1f, 0x3, 0x6) 12:34:49 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x218482, 0x0) 12:34:49 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:34:50 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x241f4355069e82df) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffd000/0x3000)=nil) r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) 12:34:50 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) read$fb(0xffffffffffffffff, &(0x7f00000000c0)=""/104, 0x68) 12:34:50 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xcf01, 0x0, &(0x7f0000000000)) 12:34:50 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x1) 12:34:50 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:34:50 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa0}}, 0x14) 12:34:50 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x2) [ 3071.651564][ T38] audit: type=1326 audit(1621341290.695:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29881 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:50 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x84, 0x52d700) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) mmap$qrtrtun(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x2030, 0xffffffffffffffff, 0xf48) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0xfffffffc) 12:34:50 executing program 5: ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x0) write$fb(0xffffffffffffffff, &(0x7f0000000000)="a6017b", 0x3) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) 12:34:50 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000035c0), 0x240, 0x0) bind$802154_dgram(r0, &(0x7f0000003600)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 12:34:50 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd000, 0x0, &(0x7f0000000000)) 12:34:50 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 3071.835523][ T38] audit: type=1326 audit(1621341290.875:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29923 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:51 executing program 2: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f0000000000)={0x6, 0x10001, {0x57, 0x27, 0x46d, {0x6, 0x8001}, {0x7, 0x5}, @rumble={0x100, 0x2}}, {0x55, 0x1, 0x551f, {0x20, 0x5}, {0x9, 0x9}, @rumble={0x6, 0x1ff}}}) prctl$PR_MCE_KILL(0x29, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) getpgid(0xffffffffffffffff) 12:34:51 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x6}, 0x8) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x7, 0x800) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x20, 0x5, 0xffffff00, "fba7119f440e9f1a760e6cdc067480246834116ac44fb03006b40a7aebb899f2"}) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) 12:34:51 executing program 3: setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) prctl$PR_MCE_KILL(0x39, 0x0, 0x0) 12:34:51 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 12:34:51 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd001, 0x0, &(0x7f0000000000)) 12:34:51 executing program 4: ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f00000000c0)={0xffffffffffffffff, 0x6}) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x3, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @remote, @default, 0x0, [@netrom, @null, @netrom, @remote, @null, @bcast]}, &(0x7f0000000080)=0x40, 0x6d352ac9aff556ed) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 12:34:51 executing program 2: r0 = fork() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000140)) getpgrp(r0) prctl$PR_MCE_KILL(0x29, 0x0, 0x0) 12:34:51 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd100, 0x0, &(0x7f0000000000)) 12:34:51 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) shmat(0x0, &(0x7f0000ff6000/0xa000)=nil, 0x1000) 12:34:51 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 12:34:51 executing program 5: sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) [ 3072.653635][ T38] audit: type=1326 audit(1621341291.695:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29923 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:51 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd101, 0x0, &(0x7f0000000000)) 12:34:51 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 12:34:51 executing program 5: r0 = gettid() r1 = getpgrp(r0) ptrace$cont(0x7, r1, 0x5, 0x7) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$6lowpan_enable(r3, &(0x7f0000000300)='1', 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2a004, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x501240, 0x0) fcntl$getown(r4, 0x9) r5 = syz_io_uring_setup(0x3d7c, &(0x7f00000000c0)={0x0, 0xf2ad, 0x0, 0x0, 0x2cd, 0x0, r2}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) io_uring_setup(0x4abc, &(0x7f0000000240)={0x0, 0x6691, 0x2, 0x2, 0x37, 0x0, r5}) 12:34:51 executing program 3: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x88180, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)={0x7, 0x6, 0x4, 0x8, 0xc698, {r1, r2/1000+10000}, {0x4, 0xc, 0x51, 0x7, 0x7f, 0xbd, "22491a2e"}, 0x4, 0x0, @offset=0x7ff, 0x6}) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:34:51 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x2, {0x1, 0x1, 0x4}, 0xfd}, 0xffffffffffffff7a) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$can_j1939(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)="1998949c0aac95", 0x7}, 0x1, 0x0, 0x0, 0x480}, 0x24008004) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x1000, 0x282100) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) 12:34:52 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd200, 0x0, &(0x7f0000000000)) 12:34:52 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 12:34:52 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 12:34:52 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x1) 12:34:52 executing program 3: syz_io_uring_setup(0x5e99, &(0x7f0000000000)={0x0, 0x2226, 0x20, 0x0, 0x14a}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x20042, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, r1, &(0x7f0000000140), &(0x7f0000000240)='\x00', 0x40, 0x2000, 0x1}, 0x9f71) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) write$qrtrtun(r1, &(0x7f0000000340)="d3ad18ff995910aa7dd825c29b2cee9d95dc309985d41bc5e7b257983c77bb453b9a4d9c1338e6bfde8b65cb7b945cab4e63b78e5c1676369afac272f31575f0395134c056d967e2830c4067cb908ddb", 0x50) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000300)) 12:34:52 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000000)={0x200, {0x6, 0x7c8, 0x3, 0x6, 0xac9, 0x19bf}}) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:34:52 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd201, 0x0, &(0x7f0000000000)) [ 3073.608507][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 3073.608522][ T38] audit: type=1326 audit(1621341292.645:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29971 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:52 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd300, 0x0, &(0x7f0000000000)) 12:34:52 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 12:34:52 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) 12:34:52 executing program 2: ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000000)=0x80000000) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x44001, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) fcntl$getown(r0, 0x9) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000040)) [ 3073.808573][ T38] audit: type=1326 audit(1621341292.845:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30007 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:52 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) 12:34:52 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(0xffffffffffffffff, 0x330f, 0x3) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)={0xffffffffffffffff, 0x9}) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000004c0)=0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) recvmmsg(r0, &(0x7f00000043c0)=[{{&(0x7f0000000040)=@caif=@dgm, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/144, 0x90}, {&(0x7f0000000180)=""/22, 0x16}], 0x2, &(0x7f0000000200)=""/107, 0x6b}, 0x7f}, {{&(0x7f0000000280)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/120, 0x78}, {&(0x7f0000000380)=""/4, 0x4}], 0x2, &(0x7f0000000400)=""/32, 0x20}, 0x2}, {{&(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000500)=""/25, 0x19}, 0x1}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/226, 0xe2}, {&(0x7f00000006c0)=""/229, 0xe5}, {&(0x7f00000007c0)=""/3, 0x3}, {&(0x7f0000000800)=""/68, 0x44}], 0x4, &(0x7f00000008c0)=""/39, 0x27}, 0xce}, {{&(0x7f0000000900)=@alg, 0x80, &(0x7f0000002a80)=[{&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/241, 0xf1}], 0x3, &(0x7f0000002ac0)=""/70, 0x46}, 0x6}, {{&(0x7f0000002b40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002bc0)=""/248, 0xf8}, {&(0x7f0000002cc0)=""/179, 0xb3}, {&(0x7f0000002d80)=""/243, 0xf3}, {&(0x7f0000002e80)=""/185, 0xb9}, {&(0x7f0000002f40)}, {&(0x7f0000002f80)=""/32, 0x20}], 0x6, &(0x7f0000003040)=""/14, 0xe}, 0x4}, {{&(0x7f0000003080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000003100)=""/4096, 0x1000}, {&(0x7f0000004100)=""/95, 0x5f}, {&(0x7f0000004180)=""/203, 0xcb}, {&(0x7f0000004280)=""/20, 0x14}], 0x4, &(0x7f0000004300)=""/135, 0x87}, 0x32}], 0x7, 0x10001, &(0x7f0000004580)={0x77359400}) 12:34:53 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x1) 12:34:53 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000000)) 12:34:53 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd301, 0x0, &(0x7f0000000000)) 12:34:53 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 12:34:53 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) ioctl$FBIOGET_FSCREENINFO(r3, 0x4602, &(0x7f0000000000)) 12:34:53 executing program 3: ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={@none, 0x401, 0x0, 0xfffffffa}) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) [ 3074.623061][ T38] audit: type=1326 audit(1621341293.665:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30007 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:53 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x2) 12:34:53 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd400, 0x0, &(0x7f0000000000)) 12:34:53 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 12:34:53 executing program 5: ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) prctl$PR_MCE_KILL(0x34, 0x1, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000000)) sendmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x1d, 0x0, 0x2, {0x1, 0xff, 0x2}, 0xff}, 0x18, &(0x7f00000000c0)={&(0x7f0000000080)="4a970fbce053a90f94ec2d689641", 0xe}, 0x1, 0x0, 0x0, 0x4}, 0x80) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x252001, 0x0) 12:34:53 executing program 2: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x50100, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) socketpair(0x8, 0x0, 0x36486f9c, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) [ 3074.830719][ T38] audit: type=1326 audit(1621341293.865:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30039 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:54 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd401, 0x0, &(0x7f0000000000)) [ 3075.636010][ T38] audit: type=1326 audit(1621341294.675:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30039 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:54 executing program 4: syz_io_uring_setup(0x43dd, &(0x7f0000000000)={0x0, 0x596a, 0x0, 0x3, 0x2ab}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4007, @fd_index, 0xb5e5, 0x2, 0x3, 0x4, 0x1, {0x3}}, 0x800) prctl$PR_MCE_KILL(0x16, 0x1, 0x1) 12:34:54 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 12:34:54 executing program 3: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) setresuid(0x0, 0xee00, 0x0) socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) syz_io_uring_setup(0x1b94, &(0x7f0000000000)={0x0, 0x68, 0x0, 0x1, 0x13a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0xfbe, 0x400}, 0x100) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) io_uring_setup(0x2ec9, &(0x7f0000000280)={0x0, 0xe5bd, 0x11, 0x3, 0x157, 0x0, r3}) 12:34:54 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/74) 12:34:54 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd500, 0x0, &(0x7f0000000000)) 12:34:54 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) clock_gettime(0x0, &(0x7f0000000d00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/167, 0xa7}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f0000000200)=""/248, 0xf8}, {&(0x7f0000000300)=""/28, 0x1c}, {&(0x7f0000000340)=""/202, 0xca}, {&(0x7f0000000440)=""/42, 0x2a}, {&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f00000004c0)=""/185, 0xb9}, {&(0x7f0000000580)=""/127, 0x7f}], 0xa}, 0xffff}, {{&(0x7f00000006c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000740)=""/191, 0xbf}, {&(0x7f0000000800)=""/41, 0x29}, {&(0x7f0000000840)=""/163, 0xa3}, {&(0x7f0000000900)=""/140, 0x8c}, {&(0x7f00000009c0)=""/113, 0x71}, {&(0x7f0000000a40)=""/175, 0xaf}, {&(0x7f0000000b00)=""/119, 0x77}], 0x7, &(0x7f0000000c00)=""/77, 0x4d}, 0x40}], 0x2, 0x0, &(0x7f0000000d40)={r1, r2+60000000}) bind$can_j1939(r0, &(0x7f0000000d80)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xff}, 0x18) 12:34:54 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd501, 0x0, &(0x7f0000000000)) 12:34:54 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 12:34:54 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) r0 = socket(0x4, 0x800, 0x20d2) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x14, 0x3, 0x20, 0x1000, 0x8, @remote, @empty, 0x80, 0x8000, 0x4, 0x5}}) connect$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x1, 0xff}, 0xff}, 0x18) 12:34:54 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r0 = gettid() prctl$PR_MCE_KILL(0x21, 0x1, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000180)={{0x8, 0x4, 0x200, 0x4447, 'syz0\x00', 0x1f}, 0x6, 0x20, 0x2000, r0, 0xa, 0x2, 'syz1\x00', &(0x7f0000000000)=['/dev/qrtr-tun\x00', '%\x00', '/dev/qrtr-tun\x00', '+\a\x00', '/dev/qrtr-tun\x00', '/dev/qrtr-tun\x00', '/dev/qrtr-tun\x00', '}$-}\x00', '&&!:!!\'\x00', '/dev/qrtr-tun\x00'], 0x66, '\x00', [0x1, 0x40, 0x7ff, 0x1]}) [ 3075.834821][ T38] audit: type=1326 audit(1621341294.875:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30069 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:54 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 12:34:54 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r0 = shmget(0x1, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) shmctl$IPC_RMID(r0, 0x0) 12:34:55 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000040)={0x1, 0x8, 0x4, 0x10, 0x802, {}, {0x3, 0xc, 0x7f, 0x85, 0x7f, 0x8, "c01f9efb"}, 0x10000, 0x1, @userptr=0x8001, 0xfffffffd, 0x0, r1}) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) getsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 12:34:55 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd600, 0x0, &(0x7f0000000000)) 12:34:55 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) 12:34:55 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x1) 12:34:55 executing program 2: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x1) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000040)) 12:34:55 executing program 5: ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x8, 0x2, 0x4, 0x0, 0x2, {0x77359400}, {0x5, 0x1, 0x39, 0xd1, 0x0, 0x1, "2018ad85"}, 0x4, 0x1, @offset=0x7ff, 0x5}) ioctl$SG_GET_COMMAND_Q(0xffffffffffffffff, 0x2270, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) [ 3076.632219][ T38] audit: type=1326 audit(1621341295.675:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30069 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:55 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x2) 12:34:55 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd601, 0x0, &(0x7f0000000000)) 12:34:55 executing program 5: ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) 12:34:55 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) r0 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f00000000c0)=""/82) socket(0x2c, 0x800, 0x101) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) r1 = shmget(0x3, 0x1000, 0x8, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000140)=""/22) 12:34:55 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}) [ 3076.816722][ T38] audit: type=1326 audit(1621341295.855:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:56 executing program 2: setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x1}, 0x4) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) syz_io_uring_setup(0xeab, &(0x7f0000000080)={0x0, 0x72c6, 0x10, 0x0, 0x3ba}, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x1, 0x4, 0x0, 0x6, 0x0, 0x1}, 0x400) 12:34:56 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) 12:34:56 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000040)={0xc80, 0x1e0, 0x578, 0x80, 0x0, 0x2, 0x18, 0x2, {0x6, 0x6, 0x1}, {0x7c00, 0x9, 0x1}, {0x3, 0x5, 0x1}, {0x2, 0x101}, 0x1, 0x0, 0x2, 0x0, 0x1, 0x3, 0x6, 0x6, 0x4, 0x8, 0x3ff, 0x7, 0x20, 0x100, 0x0, 0x2}) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) 12:34:56 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) 12:34:56 executing program 3: r0 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = fork() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000140)) r4 = gettid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x0, r0, r1, r2, 0xffffffffffffffff, 0x42, 0x5}, 0xbdc, 0x0, 0x8001, 0x3, r3, r4, 0x7}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}}, &(0x7f0000000080)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r5, 0x800443d3, &(0x7f00000000c0)={@any, 0xfffff001, 0x3, 0x2}) bind$802154_raw(r5, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) 12:34:56 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd700, 0x0, &(0x7f0000000000)) 12:34:56 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) [ 3077.612818][ T38] audit: type=1326 audit(1621341296.655:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:56 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x82, 0x9, 0x3, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x700, 0x8, 0x5, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', r1, 0x4, 0x8, 0x6, 0x5, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x7800, 0x40, 0x7ff, 0x1ff}}) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) 12:34:56 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd701, 0x0, &(0x7f0000000000)) 12:34:56 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x2) [ 3077.805757][ T38] audit: type=1326 audit(1621341296.845:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30143 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:56 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 12:34:56 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000000)={0x50, 0x0, 0x0, {0x7, 0x21, 0x4, 0x10003, 0xd0dd, 0xdd, 0x4, 0x40}}, 0x50) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x4000}) 12:34:57 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd800, 0x0, &(0x7f0000000000)) 12:34:57 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x1) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x3) 12:34:57 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x1) 12:34:57 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 12:34:57 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 12:34:57 executing program 3: prctl$PR_MCE_KILL(0x39, 0x82b03ddc8f6f8481, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 12:34:57 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd801, 0x0, &(0x7f0000000000)) [ 3078.625612][ T38] audit: type=1326 audit(1621341297.665:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30143 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:57 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) syz_open_dev$sg(&(0x7f0000000000), 0x5, 0x400) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 12:34:57 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 12:34:57 executing program 2: syz_io_uring_setup(0xf41, &(0x7f00000010c0)={0x0, 0xc07e, 0x1, 0x2, 0x362}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000001140)=0x0, &(0x7f0000001180)=0x0) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000001400)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0, 0x7, 0x0, 0x1, {0x0, 0x0, r2}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000013c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r2, 0x0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000011c0)="38e49d1a398d446014ff32530f371898e405c86035becb4bcdc8c9daf9fcf54b244c8cdb409421f093885e54e7e85ac954b5848828785bfd3b436b89c080021fbab726c484d1e7c3ce879778e3d747ec3430705fb9fa164cf069ad559f5e960c9d3230b5dd2223ed59d10517caf3cfcbb8a76b6339d51aa443ed478e9359dbd619e1d305aed80519d2c9ce7697fb820b8efd0f0ce7f2b546dbfa3f969cc3f43be681764ab6ab8ca489b45e95ee68fa806631b585ef1b56da7d83765088", 0xbd}, {&(0x7f0000001280)="7245176cf952322d33cefddff727d3549a46cac391953193fd0c834be56ebf00255e80b008893998b4b0246b8d2d16409fbb5b13ed2fef02f97943b5db983529cf1822a425818d1582bc38cb566743f65a7b6886e7d2096ee98cb56d495b490b2dcfcf08a4339f038832b4784cfa6070b85ec75f0c07620115a612cd63445a18de4694e494fa1fc517d2dd343577adc5afb8619bbb633df2", 0x98}], 0x2}, 0x0, 0x8000, 0x1}, 0x3) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000001040)=0x400, &(0x7f0000001080)=0x2) read$qrtrtun(r3, &(0x7f0000000040)=""/4096, 0x1000) 12:34:57 executing program 5: r0 = geteuid() read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1080080, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r0, @ANYBLOB="2ce7096f75705f69643965d3f5441cb015193a4ff172cfe313d51e17a57cfbfebefa2f4ff033f39257582ddb2669e52ac911bf3bd45b9994e8b459e3604f47097500fdb08f87da39b7e8362da6acdda0dbbc3b57850e26b2d0eaaee378fb48286e34843a10364e684a803b5a9fe89d4d22f170bc33e1df6f53d64808935d10d9e7ac6dba2ee6d9da2f9d18c081ed73dae2568a126e0cbb610b7a6191a053b962ad83c026e11cb4ff7aae3ccd7e888c", @ANYRESDEC=0xee00, @ANYBLOB=',default_permissions,max_read=0x0000000000000005,allow_other,blksize=0x0000000000000000,fowner<', @ANYRESDEC=0xee01, @ANYBLOB=',fowner>', @ANYRESDEC=0xee00, @ANYBLOB=',dont_appraise,hash,dont_measure,smackfsdef={\\@-,measure,appraise_type=imasig,\x00']) prctl$PR_MCE_KILL(0x34, 0x0, 0x1) syz_open_dev$media(&(0x7f00000000c0), 0x2, 0x410c82) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) 12:34:57 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd900, 0x0, &(0x7f0000000000)) 12:34:57 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x2) accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote, @bcast, 0x1, @rose}, &(0x7f0000000040)=0x1c, 0x800) [ 3078.883139][ T38] audit: type=1326 audit(1621341297.925:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30177 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:58 executing program 4: ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x78}) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x3) r1 = socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003200), &(0x7f0000003240)=0xc) 12:34:58 executing program 5: syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x608000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000) 12:34:58 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 12:34:58 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x1) 12:34:58 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd901, 0x0, &(0x7f0000000000)) 12:34:58 executing program 3: restart_syscall() r0 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/97) shmat(r0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r1 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000100)=""/7) [ 3079.717342][ T38] audit: type=1326 audit(1621341298.755:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30177 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:58 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) socketpair(0x1a, 0x4, 0x6f, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000100)={@any, 0x3ff}) 12:34:58 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x0) 12:34:59 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 12:34:59 executing program 2: ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0xff, 0x9, 0x41, @mcast1, @remote, 0x40, 0x7, 0x7, 0xea51}}) 12:34:59 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xda00, 0x0, &(0x7f0000000000)) [ 3079.929910][ T38] audit: type=1326 audit(1621341298.965:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30202 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:59 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xda01, 0x0, &(0x7f0000000000)) 12:34:59 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) 12:34:59 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x1) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0x10, 0x7, 0x8000}) 12:34:59 executing program 3: r0 = fcntl$getown(0xffffffffffffffff, 0x9) ioprio_get$pid(0x2, r0) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:34:59 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) socketpair(0x1f, 0x6, 0x2, &(0x7f0000000040)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x14) 12:34:59 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xdb00, 0x0, &(0x7f0000000000)) 12:34:59 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) [ 3080.749158][ T38] audit: type=1326 audit(1621341299.785:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30202 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:34:59 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xdb01, 0x0, &(0x7f0000000000)) 12:34:59 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r0 = fork() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000140)) sched_getparam(r0, &(0x7f0000000000)) 12:34:59 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x1) 12:35:00 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 12:35:00 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) [ 3080.915996][ T38] audit: type=1326 audit(1621341299.955:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30242 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:00 executing program 5: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) prctl$PR_MCE_KILL(0x34, 0x1, 0x2) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{@fixed}, {@fixed}]}) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) [ 3081.122585][ T3246] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.128981][ T3246] ieee802154 phy1 wpan1: encryption failed: -22 [ 3081.739575][ T38] audit: type=1326 audit(1621341300.775:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30242 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:00 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x1000, 0x2, 0x4, 0x2000, 0x7ff, {0x77359400}, {0x2, 0x1, 0x6, 0x7, 0x4, 0x89, "05fbff2e"}, 0x1ff, 0x1, @userptr=0x80000000, 0xfffffff8, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x1, 0x1, 0x4, 0x4009, 0xca0, {0x77359400}, {0x4, 0x1, 0x0, 0x20, 0x7, 0x62, "08bedd51"}, 0x2, 0x3, @planes=&(0x7f0000000000)={0x7f, 0x0, @fd, 0x7}, 0x7, 0x0, r0}) 12:35:00 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xdc00, 0x0, &(0x7f0000000000)) 12:35:00 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 12:35:00 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 12:35:00 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000000)) 12:35:00 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) 12:35:00 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x1) 12:35:01 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xdc01, 0x0, &(0x7f0000000000)) [ 3081.917730][ T38] audit: type=1326 audit(1621341300.955:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30277 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:01 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x101, 0x400200) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000040)=0x7fffffff) 12:35:01 executing program 3: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x509840, 0x0) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000180)) shmctl$IPC_RMID(r0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x800}, 0x8) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000340)={0x20, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0]}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpgid(0xffffffffffffffff) shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x2, 0x0, 0xffffffffffffffff, r3, 0xee00, 0x83, 0x9}, 0x80, 0xa5e2, 0x20, 0x1c, 0x0, r4, 0x81}) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:35:01 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 12:35:01 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}) 12:35:01 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000200)={0x0, @can={0x1d, 0x0}, @rc={0x1f, @any, 0xe5}, @in={0x2, 0x4e21, @multicast2}, 0x7ff, 0x0, 0x0, 0x0, 0x84, &(0x7f00000001c0)='team0\x00', 0x1, 0x5, 0x9}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'sit0\x00', r1, 0x4, 0x0, 0x9, 0x200, 0x40, @mcast2, @mcast1, 0x700, 0x8, 0x200, 0xe4}}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x100000001, 0x640400) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000100)={0xffffffff, 0x4, 0x2, 0x6, &(0x7f0000000340)=[{}, {}, {}, {}]}) prctl$PR_MCE_KILL(0x16, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x20, 0x1000, 0x800, 0x600, 0x10001, 0x2517a787, 0x8, 0x1, {0x0, 0x9, 0x1}, {0x3, 0x8}, {0x5, 0x9}, {0x9}, 0x0, 0x83, 0x8, 0x7, 0x1, 0x0, 0x401, 0xa4, 0x4, 0x7fff, 0x2, 0x3, 0x0, 0x4, 0x0, 0x1}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) 12:35:01 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xdd00, 0x0, &(0x7f0000000000)) 12:35:01 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000100)={0x3, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:35:01 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) 12:35:01 executing program 2: ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x8) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:35:01 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x2) [ 3082.743194][ T38] audit: type=1326 audit(1621341301.785:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30277 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:01 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0xbf121855d057e99b) 12:35:01 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r0 = syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x40010, r0, 0x8000000) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000200)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x800, 0x480, 0x400, 0x20, 0x7fffffff, 0xdeb6, 0x2, 0x2, {0x1000, 0x9, 0x1}, {0x80000000, 0x7c9, 0x1}, {0xffff8000, 0x0, 0x1}, {0x3f}, 0x3, 0x1, 0x2, 0x3, 0x0, 0x81, 0x5, 0x3f, 0x1, 0x200, 0x7, 0x1000, 0x31, 0x100, 0x3, 0x6}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) write$fb(r2, &(0x7f0000000240)="be53720bdf2d20b4a890d9b629c5e48b51d6faf7a25022e0c1281b0f10cba9bf83b5fe3c84dacd0d598aab98ccefe07daadb0db5140e4a2353a1fb2e250c77998ddca29a0a21b883dbb2fde21a8f605af5e46143644029ebcd47e3230701e361f9255d2ac75c2337fe264ad3969bac06c65c714e99c2073e52fe6b21b5b718c0d950d72c567efb59d8daebbb8843a858e41f0911a284a6e8f8e9a1ce5740a2a390089428a3351c630f32c6bda95f97", 0xaf) 12:35:02 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xdd01, 0x0, &(0x7f0000000000)) 12:35:02 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x1) 12:35:02 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 12:35:02 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000000)={{0x6, 0x4348}, 0x8}, 0x10) 12:35:02 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:02 executing program 3: ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000100)={0x4, 0x2, &(0x7f0000000000)=[0x4, 0x6], &(0x7f0000000040)=[0x1, 0x7f, 0x9, 0x0, 0x7, 0x8, 0x66, 0x565, 0xb, 0x5], &(0x7f0000000080)=[0x5, 0x2, 0x5, 0x6], &(0x7f00000000c0)=[0x3f, 0x7fff, 0x5, 0xffff, 0x1, 0xf58, 0x1, 0x5, 0x8001, 0x8]}) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 12:35:02 executing program 2: ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:35:02 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xde00, 0x0, &(0x7f0000000000)) [ 3083.114935][ T38] audit: type=1326 audit(1621341302.155:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30322 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:02 executing program 5: restart_syscall() prctl$PR_MCE_KILL(0x34, 0x0, 0x2) 12:35:02 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:35:02 executing program 3: ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f00000000c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7, 0x0, 0x3}) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000040)={0x0, 0x5, {0x54, 0x5, 0x7, {0xffff, 0x9}, {0x74a, 0x1}, @rumble={0x8}}, {0x4, 0x1b7, 0x5, {0x1ff, 0xff}, {0x253, 0x6}, @const={0x2, {0x9, 0x2, 0xd700, 0x3f}}}}) prctl$PR_MCE_KILL(0x39, 0x0, 0x0) 12:35:02 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 12:35:02 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xde01, 0x0, &(0x7f0000000000)) 12:35:02 executing program 5: r0 = fork() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000140)) rt_tgsigqueueinfo(0xffffffffffffffff, r0, 0x8, &(0x7f0000000000)={0x37, 0xb02c, 0x81}) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) 12:35:02 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x57ece726f5f6159b, 0x1) 12:35:03 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$getown(r0, 0x9) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x50100) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) r4 = socket$bt_hidp(0x1f, 0x3, 0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_RECVMSG={0xa, 0x5, 0x0, r4, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=@generic, 0x80, &(0x7f0000000580)=[{&(0x7f0000000100)=""/10, 0xa}, {&(0x7f0000000380)=""/23, 0x17}, {&(0x7f00000003c0)=""/159, 0x9f}, {&(0x7f0000000480)=""/245, 0xf5}], 0x4, &(0x7f0000000240)=""/244, 0xf4}, 0x0, 0x10002, 0x1, {0x2}}, 0x200) bind$802154_raw(r1, &(0x7f0000000040)={0x24, @none={0x0, 0x2}}, 0x14) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x2040, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000180)={0x0, @in={0x2, 0x4e20, @multicast1}, @generic={0x3, "b202c0827157f7009f3bad81b997"}, @hci={0x1f, 0x0, 0x4}, 0x8, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000140)='veth0_to_team\x00', 0x7, 0x6, 0xfb0}) 12:35:03 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 12:35:03 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 12:35:03 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xdf00, 0x0, &(0x7f0000000000)) 12:35:03 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) 12:35:03 executing program 3: read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020}, 0x2020) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000002040)=0x88) [ 3083.924982][ T38] audit: type=1326 audit(1621341302.965:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30322 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:03 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xdf01, 0x0, &(0x7f0000000000)) 12:35:03 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 12:35:03 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) modify_ldt$write2(0x11, &(0x7f0000000040)={0x9b, 0x20000000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) syz_open_dev$cec(&(0x7f0000000080), 0x2, 0x2) geteuid() 12:35:03 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x7) prctl$PR_MCE_KILL(0x34, 0x0, 0x2) [ 3084.123323][ T38] audit: type=1326 audit(1621341303.165:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30372 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:03 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) mmap$IORING_OFF_CQ_RING(&(0x7f0000daf000/0x2000)=nil, 0x2000, 0x7, 0x1a4010, 0xffffffffffffffff, 0x8000000) shmctl$IPC_RMID(r0, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(0x0, r1, 0x0) shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x0, r1, 0x0, 0x0, 0xee01, 0x81, 0xdc}, 0x5, 0x8e6c, 0x7, 0x3f, 0x0, 0x0, 0x5}) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000240), 0x4) r2 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) shmctl$IPC_RMID(r2, 0x0) r3 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) shmctl$IPC_SET(r2, 0x1, &(0x7f00000001c0)={{0x0, r3, r4, r1, 0xee00, 0x91, 0x7}, 0xbc, 0x1, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x5}) prctl$PR_MCE_KILL(0x29, 0x0, 0x1) 12:35:03 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x1) [ 3084.939977][ T38] audit: type=1326 audit(1621341303.975:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30372 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:04 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x1) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000000)={0xa00, 0x20, 0x800, 0x8a0, 0x80, 0x1, 0xf, 0x2, {0x2e80, 0x4, 0x1}, {0x0, 0x5, 0x1}, {0xffff0001, 0x3ff}, {0x2, 0x7}, 0x0, 0x1, 0x1d60, 0x4, 0x1, 0xff, 0x3, 0x4, 0x0, 0x3, 0xfff, 0x10001, 0x2, 0x200, 0x2, 0xb}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x3ff, 0x80, 0x1f, 0xd5a}, {0x1, 0x1, 0x89, 0xab}, {0x40, 0x5, 0x1f, 0x7ff}]}) 12:35:04 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) 12:35:04 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe000, 0x0, &(0x7f0000000000)) 12:35:04 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0xa40, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000000)={0xfb0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}) r2 = syz_open_dev$mouse(&(0x7f00000000c0), 0x8001, 0x30b081) write$fb(r2, &(0x7f0000000100)="f9ab832d83ddc3adfeb039eb4ce6cde469f8676a9b950ddec45a809c760c7f0366eb61d8d7763945318892c456cba24dea94fb430cb4929016c39c696203c0ff1e4b89c8679d96d79690b18ce3c28d4b8282af53df2a57cac2c637693b179a8f9ed292e488a1f18c077d77a2a9b0638edbf7a6f425b6326cf3210ba9b25b7558192b4a4e0defc7116738bf1300d3224759e84ee0aba651454794386d87a1", 0x9e) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={@none, 0xffffffff}) syz_open_dev$cec(&(0x7f0000000080), 0x2, 0x2) 12:35:04 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x92, 0x3f, 0xffffffe1}) 12:35:04 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x2) 12:35:04 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x0, 0x4c8, 0x3, 0x202, 0x1, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x40) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:35:04 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe001, 0x0, &(0x7f0000000000)) 12:35:04 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 12:35:04 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x0) 12:35:04 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x1) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000004f00)=[{{&(0x7f00000000c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)}, {&(0x7f0000000180)=""/5, 0x5}, {&(0x7f00000001c0)=""/174, 0xae}], 0x3, &(0x7f00000002c0)=""/144, 0x90}, 0x2}, {{&(0x7f0000000380)=@nl=@proc, 0x80, &(0x7f0000002740)=[{&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/122, 0x7a}, {&(0x7f0000001480)=""/85, 0x55}, {&(0x7f0000001500)=""/218, 0xda}, {&(0x7f0000001600)=""/118, 0x76}, {&(0x7f0000001680)=""/150, 0x96}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x7, &(0x7f00000027c0)=""/22, 0x16}}, {{&(0x7f0000002800)=@x25={0x9, @remote}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002880)=""/172, 0xac}, {&(0x7f0000002940)=""/133, 0x85}, {&(0x7f0000002a00)=""/2, 0x2}], 0x3}, 0x7}, {{&(0x7f0000002a80)=@ax25={{0x3, @default}, [@null, @default, @bcast, @rose, @rose, @remote, @default, @default]}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000002b00)=""/209, 0xd1}, {&(0x7f0000002c00)=""/188, 0xbc}, {&(0x7f0000002cc0)=""/117, 0x75}, {&(0x7f0000002d40)=""/244, 0xf4}, {&(0x7f0000002e40)=""/211, 0xd3}], 0x5, &(0x7f0000002fc0)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000003fc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000042c0)=[{&(0x7f0000004040)=""/100, 0x64}, {&(0x7f00000040c0)=""/2, 0x2}, {&(0x7f0000004100)=""/224, 0xe0}, {&(0x7f0000004200)=""/130, 0x82}], 0x4, &(0x7f0000004300)=""/177, 0xb1}, 0x2}, {{&(0x7f00000043c0)=@isdn, 0x80, &(0x7f0000004500)=[{&(0x7f0000004440)=""/9, 0x9}, {&(0x7f0000004480)=""/71, 0x47}], 0x2, &(0x7f0000004540)=""/106, 0x6a}, 0x10001}, {{&(0x7f00000045c0)=@rc, 0x80, &(0x7f0000004900)=[{&(0x7f0000004640)=""/207, 0xcf}, {&(0x7f0000004740)=""/255, 0xff}, {&(0x7f0000004840)=""/173, 0xad}], 0x3, &(0x7f0000004940)=""/209, 0xd1}, 0x2}, {{&(0x7f0000004a40)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000004e00)=[{&(0x7f0000004ac0)=""/129, 0x81}, {&(0x7f0000004b80)=""/20, 0x14}, {&(0x7f0000004bc0)=""/102, 0x66}, {&(0x7f0000004c40)=""/233, 0xe9}, {&(0x7f0000004d40)=""/181, 0xb5}], 0x5, &(0x7f0000004e80)=""/103, 0x67}}], 0x8, 0x2, &(0x7f0000005100)={0x0, 0x3938700}) setitimer(0x2, &(0x7f0000000040)={{}, {r0, r1/1000+60000}}, &(0x7f0000000080)) [ 3085.157026][ T38] audit: type=1326 audit(1621341304.195:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30411 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:04 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 12:35:05 executing program 4: ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x16, 0x1, 0x1) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x5, {0x0, 0x1, 0x2}, 0xfe}, 0x18) 12:35:05 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) prctl$PR_MCE_KILL(0x29, 0x1, 0x1) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000080)='syz0\x00') prctl$PR_MCE_KILL(0x21, 0x1, 0x1) shmget(0x1, 0x2000, 0x1000, &(0x7f0000ffb000/0x2000)=nil) 12:35:05 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 12:35:05 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe100, 0x0, &(0x7f0000000000)) 12:35:05 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000020c0)=[{{&(0x7f0000000080)=@ieee802154, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f0000000240)=""/175, 0xaf}], 0x2, &(0x7f0000001500)=""/8, 0x8}, 0xbf}, {{&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000380)=""/66, 0x42}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/164, 0xa4}, {&(0x7f0000001c40)=""/113, 0x71}], 0x4, &(0x7f0000001580)=""/121, 0x79}, 0x46}, {{&(0x7f0000001600)=@can={0x1d, 0x0}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001ac0)=""/17, 0x11}, {&(0x7f0000001e00)=""/184, 0xb8}, {&(0x7f0000001fc0)=""/118, 0x76}], 0x3, &(0x7f0000001840)=""/204, 0xcc}, 0x6}, {{&(0x7f0000001940)=@nfc_llcp, 0x80, &(0x7f0000001cc0)=[{&(0x7f00000019c0)=""/227, 0xe3}, {&(0x7f0000002040)=""/68, 0x44}, {&(0x7f0000001b40)=""/53, 0x35}, {&(0x7f0000001b80)=""/159, 0x9f}, {&(0x7f0000001780)=""/65, 0x41}], 0x5, &(0x7f0000001680)=""/194, 0xc2}, 0x9}], 0x4, 0x100, &(0x7f0000001f00)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001f40), 0x408000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001f80)={0x2, 0x49, 0x4, 0x4, 0x1a40, r0, 0x9f8, '\x00', r1, r2, 0x4, 0x4, 0x1}, 0x40) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) fcntl$getown(r3, 0x9) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r3, 0x330f, 0xffffffffffffff32) epoll_create(0x2) syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) socketpair(0x1a, 0x5, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) bind$802154_dgram(r2, &(0x7f0000001b00), 0x14) syz_open_dev$mouse(&(0x7f00000014c0), 0x6, 0x101000) fcntl$getown(r4, 0x9) 12:35:05 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) [ 3085.964008][ T38] audit: type=1326 audit(1621341305.005:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30411 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:05 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) 12:35:05 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) 12:35:05 executing program 3: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x39, 0x0, 0x1) 12:35:05 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe101, 0x0, &(0x7f0000000000)) [ 3086.151032][ T38] audit: type=1326 audit(1621341305.185:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:05 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000000)=0x2) 12:35:05 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) 12:35:06 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x3) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000180)=0x8, 0x38) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x4, 0x8080) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000140)) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 12:35:06 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x2) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x50042, 0x0) r0 = fork() getpid() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000140)) ptrace$poke(0x4, r0, &(0x7f0000000040), 0x3f) 12:35:06 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe200, 0x0, &(0x7f0000000000)) 12:35:06 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x2) 12:35:06 executing program 3: ptrace$getenv(0x4201, 0xffffffffffffffff, 0x1000, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x39, 0x1, 0x1) 12:35:06 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) [ 3086.969679][ T38] audit: type=1326 audit(1621341306.005:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30443 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:06 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 12:35:06 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe201, 0x0, &(0x7f0000000000)) 12:35:06 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) getpgid(0x0) [ 3087.108169][ T38] audit: type=1326 audit(1621341306.145:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30474 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:06 executing program 2: syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) prctl$PR_GET_SECCOMP(0x15) 12:35:06 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 12:35:06 executing program 5: rt_tgsigqueueinfo(0x0, 0x0, 0x19, &(0x7f0000000000)={0x22, 0xfffffff7, 0x9}) prctl$PR_GET_SECCOMP(0x15) socket(0x25, 0x4, 0x800) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = getpgid(0xffffffffffffffff) sched_getparam(r1, &(0x7f0000000140)) r2 = fcntl$getown(r0, 0x9) rt_tgsigqueueinfo(r1, r2, 0x28, &(0x7f00000000c0)={0x40, 0x10000}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000080)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x200, 0xfff9, 0x3c1}) prctl$PR_MCE_KILL(0x34, 0x0, 0x2) [ 3087.910311][ T38] audit: type=1326 audit(1621341306.945:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30474 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:07 executing program 4: getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(0x0, r0, 0x0) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000200)={{}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r0}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@measure}, {@seclabel}, {@obj_role={'obj_role', 0x3d, '#@'}}, {@uid_gt={'uid>', r1}}, {@hash}, {@obj_type={'obj_type', 0x3d, '(*!-\f'}}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@fowner_lt={'fowner<', r2}}, {@context={'context', 0x3d, 'system_u'}}]}}) 12:35:07 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000100)={0x1, 0x8, &(0x7f0000000000)=[0xd43, 0x7, 0x0, 0x5, 0x1, 0x1, 0x4, 0x400], &(0x7f0000000040), &(0x7f0000000080)=[0x81, 0x3ff, 0x0, 0x5, 0x4, 0x3, 0x8, 0x2], &(0x7f00000000c0)=[0x1ff, 0xcaa3, 0x9, 0xfa]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000240)={0x13c0, 0x240, 0x356, 0x360, 0x10000, 0x7, 0x4, 0x0, {0x3e41, 0x8001, 0x1}, {0x8, 0x1}, {0xd805, 0x7fff}, {0xb25, 0xda10, 0x1}, 0x1, 0x80, 0x83c6, 0x4, 0x1, 0xfff, 0x0, 0x7, 0x2, 0x7, 0xfffff493, 0x8, 0x1, 0x1, 0x1, 0x3}) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:35:07 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe300, 0x0, &(0x7f0000000000)) 12:35:07 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 12:35:07 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x3) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) getsockname(r0, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000080)=0x80) syz_init_net_socket$rose(0xb, 0x5, 0x0) 12:35:07 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x2) 12:35:07 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe301, 0x0, &(0x7f0000000000)) 12:35:07 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 12:35:07 executing program 5: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x2) 12:35:07 executing program 2: prctl$PR_MCE_KILL(0x21, 0x0, 0x2) keyctl$set_reqkey_keyring(0xe, 0x7) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 12:35:07 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x8, 0xfff, 0x34, @local, @mcast1, 0x10, 0x10, 0x0, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r1, 0x29, 0x22, 0x1, 0x401, 0x60, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x700, 0x2, 0x73f}}) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) 12:35:07 executing program 3: getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(0x0, r0, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(0x0, r1, 0x0) setresuid(r0, r1, 0x0) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:35:07 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) 12:35:07 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe400, 0x0, &(0x7f0000000000)) 12:35:07 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x3) 12:35:07 executing program 2: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7e6c, &(0x7f0000000000)={0x0, 0x6947, 0x0, 0x2, 0x2a5}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000140)=@IORING_OP_SEND={0x1a, 0x5, 0x0, r2, 0x0, &(0x7f0000000100)="f33677a7dcb85b2bc75a0f7cf3bbc6d0da683b47c0c272eb5bf46b41186516b7181c5ef651f579b3ab74be4235015eb5cc29de6f", 0x34, 0x4000000, 0x1}, 0xfff) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000180)={0x1}, 0x4) [ 3088.332809][ T38] audit: type=1326 audit(1621341307.375:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30517 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:07 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe401, 0x0, &(0x7f0000000000)) 12:35:07 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}) 12:35:07 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x589, 0x8, 0x2, 0x24c9, 0xaa, 0x1000, 0xdf, 0x8}, &(0x7f00000001c0)={0x0, 0x1, 0xd87, 0x80000001, 0x1, 0x1, 0xb6, 0x48}, &(0x7f0000000400)={0x8003, 0x4, 0xfb, 0x70, 0x2, 0x100000001, 0x6b, 0xff}, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000080)={&(0x7f0000000100)={[0x10001]}, 0x8}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000180)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x14) sched_rr_get_interval(0x0, &(0x7f00000005c0)) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r4, &(0x7f0000000580)={&(0x7f0000000140)={0x1d, 0x0, 0x5, {0x1, 0x1, 0x4}}, 0x18, &(0x7f0000000540)={&(0x7f0000000440)="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", 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) pselect6(0x40, &(0x7f0000000240)={0x2, 0x3, 0x5, 0x0, 0x8, 0x2000, 0x9, 0x2}, &(0x7f0000000280)={0x101, 0xf4, 0x7f, 0x8, 0x400, 0x101, 0x3, 0x3}, &(0x7f00000002c0)={0x40, 0x9, 0x6, 0x4, 0x10001, 0x1ff, 0x2}, &(0x7f0000000340)={r1, r2+10000000}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x8]}, 0x8}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000200)) 12:35:07 executing program 5: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe400, 0x0, &(0x7f0000000000)) 12:35:07 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe500, 0x0, &(0x7f0000000000)) 12:35:07 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) 12:35:08 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000000)) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) getsockname(r0, &(0x7f0000000040)=@l2tp={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x80) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockname(r1, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x80) 12:35:08 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x2) 12:35:08 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x1) read$snapshot(0xffffffffffffffff, &(0x7f0000000000)=""/100, 0x64) 12:35:08 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe501, 0x0, &(0x7f0000000000)) 12:35:08 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) modify_ldt$write2(0x11, &(0x7f0000000040)={0x9b, 0x20000000, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) syz_open_dev$cec(&(0x7f0000000080), 0x2, 0x2) geteuid() 12:35:08 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) [ 3089.110316][ T38] audit: type=1326 audit(1621341308.145:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30517 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 3089.261828][ T38] audit: type=1326 audit(1621341308.305:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30561 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:08 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe600, 0x0, &(0x7f0000000000)) 12:35:08 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 12:35:08 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000)) openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x208400, 0x0) 12:35:08 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x8, 0xfff, 0x34, @local, @mcast1, 0x10, 0x10, 0x0, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'ip6gre0\x00', r1, 0x29, 0x22, 0x1, 0x401, 0x60, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x700, 0x2, 0x73f}}) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) 12:35:08 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) 12:35:08 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe601, 0x0, &(0x7f0000000000)) [ 3089.443841][ T38] audit: type=1326 audit(1621341308.485:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30569 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 3090.080583][ T38] audit: type=1326 audit(1621341309.115:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30561 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:09 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x2d4a, &(0x7f00000000c0)) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 12:35:09 executing program 2: getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x2) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000100)={{0x10000, 0x10001}, 0x15}, 0x10) r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x7fffffff, 0x18d802) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f00000000c0)) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:35:09 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 12:35:09 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:35:09 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe700, 0x0, &(0x7f0000000000)) 12:35:09 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r0 = syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x40010, r0, 0x8000000) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000200)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x800, 0x480, 0x400, 0x20, 0x7fffffff, 0xdeb6, 0x2, 0x2, {0x1000, 0x9, 0x1}, {0x80000000, 0x7c9, 0x1}, {0xffff8000, 0x0, 0x1}, {0x3f}, 0x3, 0x1, 0x2, 0x3, 0x0, 0x81, 0x5, 0x3f, 0x1, 0x200, 0x7, 0x1000, 0x31, 0x100, 0x3, 0x6}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) write$fb(r2, &(0x7f0000000240)="be53720bdf2d20b4a890d9b629c5e48b51d6faf7a25022e0c1281b0f10cba9bf83b5fe3c84dacd0d598aab98ccefe07daadb0db5140e4a2353a1fb2e250c77998ddca29a0a21b883dbb2fde21a8f605af5e46143644029ebcd47e3230701e361f9255d2ac75c2337fe264ad3969bac06c65c714e99c2073e52fe6b21b5b718c0d950d72c567efb59d8daebbb8843a858e41f0911a284a6e8f8e9a1ce5740a2a390089428a3351c630f32c6bda95f97", 0xaf) 12:35:09 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe701, 0x0, &(0x7f0000000000)) 12:35:09 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 12:35:09 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) [ 3090.250347][ T38] audit: type=1326 audit(1621341309.285:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30586 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:09 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x2) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x12400, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x240900) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x101, 0x3, 0x4, 0x400, 0x6, {}, {0x66df46804de640ec, 0xc, 0x7, 0x2, 0x9, 0x20, "4b32b5fa"}, 0x6, 0x4, @userptr=0x861c, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000001c0)={0x4, 0x1, 0x4, 0x40, 0x8, {0x0, 0x2710}, {0x3, 0xc, 0x2, 0x0, 0x0, 0x0, "51b90d9d"}, 0x2, 0x3, @planes=&(0x7f0000000100)={0x3, 0xfff80000, @userptr=0x200, 0x80000000}, 0x40, 0x0, r1}) fcntl$getown(r0, 0x9) 12:35:09 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r0 = syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x40010, r0, 0x8000000) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000200)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x800, 0x480, 0x400, 0x20, 0x7fffffff, 0xdeb6, 0x2, 0x2, {0x1000, 0x9, 0x1}, {0x80000000, 0x7c9, 0x1}, {0xffff8000, 0x0, 0x1}, {0x3f}, 0x3, 0x1, 0x2, 0x3, 0x0, 0x81, 0x5, 0x3f, 0x1, 0x200, 0x7, 0x1000, 0x31, 0x100, 0x3, 0x6}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) write$fb(r2, &(0x7f0000000240)="be53720bdf2d20b4a890d9b629c5e48b51d6faf7a25022e0c1281b0f10cba9bf83b5fe3c84dacd0d598aab98ccefe07daadb0db5140e4a2353a1fb2e250c77998ddca29a0a21b883dbb2fde21a8f605af5e46143644029ebcd47e3230701e361f9255d2ac75c2337fe264ad3969bac06c65c714e99c2073e52fe6b21b5b718c0d950d72c567efb59d8daebbb8843a858e41f0911a284a6e8f8e9a1ce5740a2a390089428a3351c630f32c6bda95f97", 0xaf) 12:35:09 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe800, 0x0, &(0x7f0000000000)) [ 3091.065917][ T38] audit: type=1326 audit(1621341310.105:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30586 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:10 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 12:35:10 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x2) r0 = io_uring_setup(0x319f, &(0x7f0000000000)={0x0, 0xb76c, 0x20, 0x2, 0x310}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) epoll_create(0x1) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) syz_io_uring_setup(0x3ebc, &(0x7f0000000080)={0x0, 0xbebe, 0x1, 0x3, 0x2ff, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 12:35:10 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 12:35:10 executing program 2: setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=0x1, 0x4) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) 12:35:10 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r0 = syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x40010, r0, 0x8000000) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000200)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x800, 0x480, 0x400, 0x20, 0x7fffffff, 0xdeb6, 0x2, 0x2, {0x1000, 0x9, 0x1}, {0x80000000, 0x7c9, 0x1}, {0xffff8000, 0x0, 0x1}, {0x3f}, 0x3, 0x1, 0x2, 0x3, 0x0, 0x81, 0x5, 0x3f, 0x1, 0x200, 0x7, 0x1000, 0x31, 0x100, 0x3, 0x6}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) write$fb(r2, &(0x7f0000000240)="be53720bdf2d20b4a890d9b629c5e48b51d6faf7a25022e0c1281b0f10cba9bf83b5fe3c84dacd0d598aab98ccefe07daadb0db5140e4a2353a1fb2e250c77998ddca29a0a21b883dbb2fde21a8f605af5e46143644029ebcd47e3230701e361f9255d2ac75c2337fe264ad3969bac06c65c714e99c2073e52fe6b21b5b718c0d950d72c567efb59d8daebbb8843a858e41f0911a284a6e8f8e9a1ce5740a2a390089428a3351c630f32c6bda95f97", 0xaf) 12:35:10 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe801, 0x0, &(0x7f0000000000)) 12:35:10 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe900, 0x0, &(0x7f0000000000)) 12:35:10 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 12:35:10 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r0 = syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x40010, r0, 0x8000000) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000200)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x800, 0x480, 0x400, 0x20, 0x7fffffff, 0xdeb6, 0x2, 0x2, {0x1000, 0x9, 0x1}, {0x80000000, 0x7c9, 0x1}, {0xffff8000, 0x0, 0x1}, {0x3f}, 0x3, 0x1, 0x2, 0x3, 0x0, 0x81, 0x5, 0x3f, 0x1, 0x200, 0x7, 0x1000, 0x31, 0x100, 0x3, 0x6}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) 12:35:10 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x4) [ 3091.258761][ T38] audit: type=1326 audit(1621341310.295:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30620 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:10 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1) prctl$PR_MCE_KILL(0x21, 0xa70a3879d5064bc9, 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket(0x4c, 0x3, 0x24) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000026c0)=0x1, 0x4) 12:35:10 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe901, 0x0, &(0x7f0000000000)) 12:35:11 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x155901) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x5, 0x4, 0x4, 0x1000, 0x8d, {}, {0x5, 0x2, 0x3, 0x6, 0x4, 0x9, "a7f40d64"}, 0xe534, 0x2, @offset=0x1, 0x8, 0x0, r0}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) 12:35:11 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000000)={{0x4}, 0x18}, 0x10) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 12:35:11 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) 12:35:11 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r0 = syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x40010, r0, 0x8000000) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000200)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x800, 0x480, 0x400, 0x20, 0x7fffffff, 0xdeb6, 0x2, 0x2, {0x1000, 0x9, 0x1}, {0x80000000, 0x7c9, 0x1}, {0xffff8000, 0x0, 0x1}, {0x3f}, 0x3, 0x1, 0x2, 0x3, 0x0, 0x81, 0x5, 0x3f, 0x1, 0x200, 0x7, 0x1000, 0x31, 0x100, 0x3, 0x6}) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 12:35:11 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xea00, 0x0, &(0x7f0000000000)) 12:35:11 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x8, 0xb, 0x4, 0x800, 0x7fff, {r0, r1/1000+60000}, {0x4, 0x1, 0x7, 0x1, 0x2, 0xfe, "7944091a"}, 0x7f, 0x4, @planes=&(0x7f0000000040)={0x4, 0x7f, @userptr=0x1ffc000000000000, 0x80000005}, 0x7}) [ 3092.062140][ T38] audit: type=1326 audit(1621341311.105:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30620 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:11 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r0 = syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x40010, r0, 0x8000000) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000200)) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x800, 0x480, 0x400, 0x20, 0x7fffffff, 0xdeb6, 0x2, 0x2, {0x1000, 0x9, 0x1}, {0x80000000, 0x7c9, 0x1}, {0xffff8000, 0x0, 0x1}, {0x3f}, 0x3, 0x1, 0x2, 0x3, 0x0, 0x81, 0x5, 0x3f, 0x1, 0x200, 0x7, 0x1000, 0x31, 0x100, 0x3, 0x6}) 12:35:11 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) memfd_create(&(0x7f0000000040)='}(\x00', 0x3) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x0, 0x5, 0x4}) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) 12:35:11 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xea01, 0x0, &(0x7f0000000000)) [ 3092.241553][ T38] audit: type=1326 audit(1621341311.275:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30654 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:11 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 12:35:11 executing program 2: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x8, 0xb, 0x4, 0x800, 0x7fff, {r0, r1/1000+60000}, {0x4, 0x1, 0x7, 0x1, 0x2, 0xfe, "7944091a"}, 0x7f, 0x4, @planes=&(0x7f0000000040)={0x4, 0x7f, @userptr=0x1ffc000000000000, 0x80000005}, 0x7}) 12:35:11 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r0 = syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x40010, r0, 0x8000000) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000200)) 12:35:12 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x1) 12:35:12 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x0) 12:35:12 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xeb00, 0x0, &(0x7f0000000000)) 12:35:12 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}) 12:35:12 executing program 2: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) memfd_create(&(0x7f0000000040)='}(\x00', 0x3) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x0, 0x5, 0x4}) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) 12:35:12 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r0 = syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x40010, r0, 0x8000000) openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) [ 3093.050385][ T38] audit: type=1326 audit(1621341312.085:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30654 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:12 executing program 2: prctl$PR_MCE_KILL(0x39, 0x1, 0x2) r0 = io_uring_setup(0x319f, &(0x7f0000000000)={0x0, 0xb76c, 0x20, 0x2, 0x310}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) epoll_create(0x1) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) syz_io_uring_setup(0x3ebc, &(0x7f0000000080)={0x0, 0xbebe, 0x1, 0x3, 0x2ff, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) 12:35:12 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r0 = syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x40010, r0, 0x8000000) 12:35:12 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x1) 12:35:12 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) 12:35:12 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xeb01, 0x0, &(0x7f0000000000)) 12:35:12 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 12:35:13 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x1) 12:35:13 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 12:35:13 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xec00, 0x0, &(0x7f0000000000)) 12:35:13 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 12:35:13 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x2) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x12400, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x240900) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0x101, 0x3, 0x4, 0x400, 0x6, {}, {0x66df46804de640ec, 0xc, 0x7, 0x2, 0x9, 0x20, "4b32b5fa"}, 0x6, 0x4, @userptr=0x861c, 0x1000, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000001c0)={0x4, 0x1, 0x4, 0x40, 0x8, {0x0, 0x2710}, {0x3, 0xc, 0x2, 0x0, 0x0, 0x0, "51b90d9d"}, 0x2, 0x3, @planes=&(0x7f0000000100)={0x3, 0xfff80000, @userptr=0x200, 0x80000000}, 0x40, 0x0, r1}) fcntl$getown(r0, 0x9) 12:35:13 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:13 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 12:35:13 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xec01, 0x0, &(0x7f0000000000)) 12:35:13 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) getsockname(r0, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000180)=0x80) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000000c0)={r3, 0x1, 0x4000}) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f0000000040)) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000000)={0x34, 0x1}) prctl$PR_MCE_KILL(0x39, 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 12:35:13 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) [ 3094.199047][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 3094.199063][ T38] audit: type=1326 audit(1621341313.235:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30716 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:13 executing program 5: syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 12:35:13 executing program 2: prctl$PR_MCE_KILL(0x16, 0x1, 0x1) [ 3094.416718][ T38] audit: type=1326 audit(1621341313.455:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30729 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 3095.026718][ T38] audit: type=1326 audit(1621341314.065:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30716 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:14 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 12:35:14 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xed00, 0x0, &(0x7f0000000000)) 12:35:14 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 12:35:14 executing program 3: sched_getparam(0x0, &(0x7f0000000000)) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ptrace$getenv(0x4201, r0, 0x8d, &(0x7f0000000080)) sched_rr_get_interval(r0, &(0x7f0000000140)) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x9) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000100)={0x1f, 0x38}, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) bind$802154_dgram(r2, &(0x7f00000000c0)={0x24, @long={0x3, 0x2}}, 0x14) fcntl$getown(r2, 0x9) 12:35:14 executing program 5: syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 12:35:14 executing program 5: syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 12:35:14 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xed01, 0x0, &(0x7f0000000000)) 12:35:14 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x2) socket$inet6_icmp(0xa, 0x2, 0x3a) 12:35:14 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) [ 3095.218893][ T38] audit: type=1326 audit(1621341314.255:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30742 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:14 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 12:35:14 executing program 5: prctl$PR_MCE_KILL(0x39, 0x0, 0x0) syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 12:35:14 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xee00, 0x0, &(0x7f0000000000)) [ 3096.043653][ T38] audit: type=1326 audit(1621341315.085:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30742 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:15 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) 12:35:15 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x0) 12:35:15 executing program 2: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r0 = fork() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000140)) sched_getparam(r0, &(0x7f0000000000)) 12:35:15 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 12:35:15 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xee01, 0x0, &(0x7f0000000000)) 12:35:15 executing program 5: prctl$PR_MCE_KILL(0x39, 0x0, 0x0) syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 12:35:15 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xef00, 0x0, &(0x7f0000000000)) [ 3096.198325][ T38] audit: type=1326 audit(1621341315.235:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30767 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:15 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) prctl$PR_GET_SECCOMP(0x15) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x3f, 0xd6, 0x3, 0x59, @dev={0xfe, 0x80, '\x00', 0x23}, @empty, 0x20, 0x5a706db703933e1d, 0x3ff, 0x9}}) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040), 0x4) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', r2, 0x29, 0x20, 0x3f, 0x200, 0x60, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, 0x10, 0x8000, 0x10000, 0x1f}}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000280)=0x0) getpgid(r5) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000002c0)) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000300)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) write$qrtrtun(r3, &(0x7f0000000140)="20011359141cbc4e034a639028c8464ebb7802676576f7407bd0eb8035", 0x1d) 12:35:15 executing program 5: prctl$PR_MCE_KILL(0x39, 0x0, 0x0) syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 12:35:15 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 12:35:15 executing program 2: r0 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = fork() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000140)) r4 = gettid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x0, r0, r1, r2, 0xffffffffffffffff, 0x42, 0x5}, 0xbdc, 0x0, 0x8001, 0x3, r3, r4, 0x7}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}}, &(0x7f0000000080)) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r5, 0x800443d3, &(0x7f00000000c0)={@any, 0xfffff001, 0x3, 0x2}) bind$802154_raw(r5, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) 12:35:15 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xef01, 0x0, &(0x7f0000000000)) [ 3097.032643][ T38] audit: type=1326 audit(1621341316.075:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30767 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:16 executing program 4: r0 = shmget$private(0x0, 0x2000, 0x8058177f28c0dad0, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/30) 12:35:16 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 12:35:16 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 12:35:16 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf000, 0x0, &(0x7f0000000000)) 12:35:16 executing program 2: syz_io_uring_setup(0x43dd, &(0x7f0000000000)={0x0, 0x596a, 0x0, 0x3, 0x2ab}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4007, @fd_index, 0xb5e5, 0x2, 0x3, 0x4, 0x1, {0x3}}, 0x800) prctl$PR_MCE_KILL(0x16, 0x1, 0x1) 12:35:16 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x1}}, 0x18) 12:35:16 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) 12:35:16 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf001, 0x0, &(0x7f0000000000)) 12:35:16 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 12:35:16 executing program 3: keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffff8) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r0 = memfd_create(&(0x7f00000000c0)='\x04A', 0x2) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000040)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0xcf}, 0x8) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r0, 0x0, 0xfffff000, 0xfffff000}) [ 3097.216051][ T38] audit: type=1326 audit(1621341316.255:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30790 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:16 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x1}, 0x8) 12:35:16 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) syz_io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0x6cd8, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 12:35:16 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf100, 0x0, &(0x7f0000000000)) 12:35:16 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x44401, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) read$FUSE(r1, &(0x7f0000002280)={0x2020}, 0x2020) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000140)={0x8, &(0x7f0000000080)=[{@none}, {}, {}, {@fixed}, {@none}, {@none}, {}, {@fixed}]}) 12:35:16 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) [ 3097.405413][ T38] audit: type=1326 audit(1621341316.445:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30807 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:16 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf101, 0x0, &(0x7f0000000000)) 12:35:17 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000140), 0x0) r0 = gettid() prctl$PR_MCE_KILL(0x21, 0x1, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000180)={{0x8, 0x4, 0x200, 0x4447, 'syz0\x00', 0x1f}, 0x6, 0x20, 0x2000, r0, 0xa, 0x2, 'syz1\x00', &(0x7f0000000000)=['/dev/qrtr-tun\x00', '%\x00', '/dev/qrtr-tun\x00', '+\a\x00', '/dev/qrtr-tun\x00', '/dev/qrtr-tun\x00', '/dev/qrtr-tun\x00', '}$-}\x00', '&&!:!!\'\x00', '/dev/qrtr-tun\x00'], 0x66, '\x00', [0x1, 0x40, 0x7ff, 0x1]}) 12:35:17 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}) 12:35:17 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) syz_io_uring_setup(0x52a1, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 12:35:17 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000000)={{0x8fa, 0x2}, 0x23}, 0x10) 12:35:17 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf200, 0x0, &(0x7f0000000000)) 12:35:17 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) syz_io_uring_setup(0x52a1, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) [ 3098.237789][ T38] audit: type=1326 audit(1621341317.275:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30807 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:17 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x2}, @ethernet={0x1, @multicast}, @in={0x2, 0x4e21, @remote}, 0x3, 0x0, 0x0, 0x0, 0x400, &(0x7f0000000000)='veth1_macvtap\x00', 0x3ff, 0x1, 0x3f}) 12:35:17 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf201, 0x0, &(0x7f0000000000)) 12:35:17 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) setresuid(0x0, 0xee00, 0x0) socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) syz_io_uring_setup(0x1b94, &(0x7f0000000000)={0x0, 0x68, 0x0, 0x1, 0x13a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0xfbe, 0x400}, 0x100) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) io_uring_setup(0x2ec9, &(0x7f0000000280)={0x0, 0xe5bd, 0x11, 0x3, 0x157, 0x0, r3}) 12:35:17 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 12:35:17 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x1) 12:35:17 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) syz_io_uring_setup(0x52a1, 0x0, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 12:35:17 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 12:35:17 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) setresuid(0x0, 0xee00, 0x0) socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) syz_io_uring_setup(0x1b94, &(0x7f0000000000)={0x0, 0x68, 0x0, 0x1, 0x13a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0xfbe, 0x400}, 0x100) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) io_uring_setup(0x2ec9, &(0x7f0000000280)={0x0, 0xe5bd, 0x11, 0x3, 0x157, 0x0, r3}) 12:35:17 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}) 12:35:17 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf300, 0x0, &(0x7f0000000000)) 12:35:17 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0xd3e, 0x4c4a82) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000140)={0x5, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:35:17 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) setresuid(0x0, 0xee00, 0x0) socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) syz_io_uring_setup(0x1b94, &(0x7f0000000000)={0x0, 0x68, 0x0, 0x1, 0x13a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0xfbe, 0x400}, 0x100) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) io_uring_setup(0x2ec9, &(0x7f0000000280)={0x0, 0xe5bd, 0x11, 0x3, 0x157, 0x0, r3}) 12:35:18 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) getpgid(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x1010, 0xffffffffffffffff, 0x0) 12:35:18 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}) 12:35:18 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 12:35:18 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf301, 0x0, &(0x7f0000000000)) 12:35:18 executing program 3: prctl$PR_MCE_KILL(0x39, 0x0, 0x0) 12:35:18 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) setresuid(0x0, 0xee00, 0x0) socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) syz_io_uring_setup(0x1b94, &(0x7f0000000000)={0x0, 0x68, 0x0, 0x1, 0x13a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0xfbe, 0x400}, 0x100) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) [ 3099.269994][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 3099.270010][ T38] audit: type=1326 audit(1621341318.305:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30847 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:18 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/65) r0 = fcntl$getown(0xffffffffffffffff, 0x9) getpgid(r0) 12:35:18 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) setresuid(0x0, 0xee00, 0x0) socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) syz_io_uring_setup(0x1b94, &(0x7f0000000000)={0x0, 0x68, 0x0, 0x1, 0x13a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0xfbe, 0x400}, 0x100) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 12:35:18 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) syz_io_uring_setup(0x52a1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x32}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 12:35:18 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff00}) 12:35:18 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf400, 0x0, &(0x7f0000000000)) [ 3099.440087][ T38] audit: type=1326 audit(1621341318.475:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30870 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:18 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}) [ 3100.273898][ T38] audit: type=1326 audit(1621341319.315:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30870 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:19 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={0xffffffffffffffff}, 0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000280)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x9, 0x6, 0x51, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x40, 0x80000000, 0x401}}) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) pselect6(0x40, &(0x7f00000002c0)={0x2, 0x236, 0x1, 0x3, 0x100, 0x9, 0x4, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x7, 0x7fff, 0x7, 0x3, 0xd562}, &(0x7f0000000340)={0xfff, 0x200, 0x29d, 0x4, 0x9, 0x80000001, 0x4, 0x7}, &(0x7f0000000380), &(0x7f0000000400)={&(0x7f00000003c0), 0x8}) 12:35:19 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000100)={0x8, 0x32, "2e7261da85534ca6c7cf2a8a1adbc033cdd06b8d3e5415d19f1fef6126642cb4badf0e0972ece17e98f097af9bcc80d9e9fb"}) prctl$PR_MCE_KILL(0x39, 0x0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) 12:35:19 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) syz_io_uring_setup(0x52a1, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000180)) 12:35:19 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf401, 0x0, &(0x7f0000000000)) 12:35:19 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) 12:35:19 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) setresuid(0x0, 0xee00, 0x0) socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) syz_io_uring_setup(0x1b94, &(0x7f0000000000)={0x0, 0x68, 0x0, 0x1, 0x13a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0xfbe, 0x400}, 0x100) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:35:19 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}) 12:35:19 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) setresuid(0x0, 0xee00, 0x0) socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) syz_io_uring_setup(0x1b94, &(0x7f0000000000)={0x0, 0x68, 0x0, 0x1, 0x13a}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:35:19 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) syz_io_uring_setup(0x52a1, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000180)) 12:35:19 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf500, 0x0, &(0x7f0000000000)) 12:35:19 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1f1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0x1, 0x101000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000100)) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000000c0)='syz0\x00') ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x12, 0x9, 0x4c, @dev={0xfe, 0x80, '\x00', 0x20}, @rand_addr=' \x01\x00', 0x80, 0x40, 0x8, 0x9e}}) sendmsg$can_j1939(r1, &(0x7f0000000240)={&(0x7f0000000200)={0x1d, r3, 0x3, {0x2}, 0xff}, 0x18, 0x0, 0x1, 0x0, 0x0, 0x58}, 0x20004001) [ 3100.487996][ T38] audit: type=1326 audit(1621341319.525:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30908 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:19 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}) [ 3101.293530][ T38] audit: type=1326 audit(1621341320.335:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30908 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:20 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 12:35:20 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) setresuid(0x0, 0xee00, 0x0) socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:35:20 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) 12:35:20 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x2) 12:35:20 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) syz_io_uring_setup(0x52a1, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000180)) 12:35:20 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf501, 0x0, &(0x7f0000000000)) 12:35:20 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x1, 0x2000, @fd=r0, 0x9, 0x5, 0xfffff001, 0x1, 0x1, {0x2}}, 0x80) accept4$rose(r0, 0x0, 0x0, 0x400) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) read$qrtrtun(r1, &(0x7f0000000040)=""/155, 0x9b) 12:35:20 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)) setresuid(0x0, 0xee00, 0x0) socketpair(0x23, 0x0, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) [ 3101.456681][ T38] audit: type=1326 audit(1621341320.495:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30932 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:20 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf600, 0x0, &(0x7f0000000000)) 12:35:20 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}) 12:35:20 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) syz_io_uring_setup(0x52a1, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000180)) 12:35:20 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) syz_io_uring_setup(0x52a1, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), 0x0) [ 3102.263933][ T38] audit: type=1326 audit(1621341321.305:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30932 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:21 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000}) 12:35:21 executing program 3: getresgid(&(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0)) mlockall(0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x4) clock_gettime(0x7, &(0x7f0000000300)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000000)=0x1, 0xfffffffffffffe7e) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0x101, 0x200000) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000340)=0x1) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000002c0)=0xffffffffffffffff) 12:35:21 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf601, 0x0, &(0x7f0000000000)) 12:35:21 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)) setresuid(0x0, 0xee00, 0x0) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:35:21 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) syz_io_uring_setup(0x52a1, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), 0x0) 12:35:21 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f00000041c0)={0x18, 0x0, r1}, 0x18) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r1, {0x81}}, 0x18) 12:35:21 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf700, 0x0, &(0x7f0000000000)) 12:35:21 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) syz_io_uring_setup(0x52a1, &(0x7f00000000c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), 0x0) 12:35:21 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:35:21 executing program 3: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$poke(0x4, r0, &(0x7f0000000080), 0x1f) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) [ 3102.460785][ T38] audit: type=1326 audit(1621341321.495:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30962 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:21 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000}) 12:35:21 executing program 5: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 12:35:21 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf701, 0x0, &(0x7f0000000000)) 12:35:21 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:35:21 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0x5}, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x9, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={r0}, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000000)) 12:35:21 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}) [ 3102.719621][ T38] audit: type=1326 audit(1621341321.755:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30979 comm="syz-executor.5" exe="/root/syz-executor.5" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:21 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) [ 3103.273160][ T38] audit: type=1326 audit(1621341322.315:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30962 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:22 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) prctl$PR_MCE_KILL(0x21, 0x0, 0x6) recvmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/52, 0x34}, {&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000100)=""/234, 0xea}, {&(0x7f0000000200)=""/36, 0x24}], 0x4, &(0x7f0000000280)=""/143, 0x8f}, 0x7}, {{&(0x7f0000000340)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001840)=[{&(0x7f00000003c0)=""/6, 0x6}, {&(0x7f0000000400)=""/49, 0x31}, {&(0x7f0000000440)=""/126, 0x7e}, {&(0x7f00000004c0)=""/228, 0xe4}, {&(0x7f0000001ac0)=""/213, 0xd5}, {&(0x7f00000006c0)=""/209, 0xd1}, {&(0x7f00000007c0)=""/1, 0x1}, {&(0x7f0000000800)=""/29, 0x1d}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x9, &(0x7f0000001900)=""/184, 0xb8}}], 0x2, 0x80, &(0x7f0000001a40)={r1, r2+10000000}) r3 = fcntl$getown(r0, 0x9) sched_rr_get_interval(r3, &(0x7f0000000600)) 12:35:22 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf800, 0x0, &(0x7f0000000000)) 12:35:22 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setitimer(0x2, &(0x7f0000000040)={{r0, r1/1000+10000}, {0x77359400}}, &(0x7f0000000080)) 12:35:22 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 12:35:22 executing program 2: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) setresuid(0x0, 0xee00, 0x0) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:35:22 executing program 2: setresuid(0x0, 0xee00, 0x0) prctl$PR_MCE_KILL(0x39, 0x1, 0x0) 12:35:22 executing program 5: syz_io_uring_setup(0x5e99, &(0x7f0000000000)={0x0, 0x2226, 0x20, 0x0, 0x14a}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x20042, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x0, 0x0, r1, &(0x7f0000000140), &(0x7f0000000240)='\x00', 0x40, 0x2000, 0x1}, 0x9f71) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) write$qrtrtun(r1, &(0x7f0000000340)="d3ad18ff995910aa7dd825c29b2cee9d95dc309985d41bc5e7b257983c77bb453b9a4d9c1338e6bfde8b65cb7b945cab4e63b78e5c1676369afac272f31575f0395134c056d967e2830c4067cb908ddb", 0x50) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x8000, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000300)) 12:35:22 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}) 12:35:22 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf801, 0x0, &(0x7f0000000000)) 12:35:22 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x2) 12:35:22 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 12:35:22 executing program 2: setresuid(0x0, 0xee00, 0x0) prctl$PR_MCE_KILL(0x39, 0x0, 0x0) 12:35:22 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf900, 0x0, &(0x7f0000000000)) 12:35:22 executing program 3: prctl$PR_MCE_KILL(0x39, 0x1, 0x1) ptrace$poke(0x4, 0xffffffffffffffff, &(0x7f0000000040), 0x3) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000a, 0x110, r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) mmap$qrtrtun(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x3000000, 0x2010, r2, 0xb7e2) read$FUSE(r0, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r1, &(0x7f0000000000)={0x18, 0x0, r3, {0x8001}}, 0x18) 12:35:22 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}) 12:35:22 executing program 2: ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f00000000c0)={0xffffffffffffffff, 0x6}) bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x3, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @remote, @default, 0x0, [@netrom, @null, @netrom, @remote, @null, @bcast]}, &(0x7f0000000080)=0x40, 0x6d352ac9aff556ed) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 12:35:22 executing program 5: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) read$qrtrtun(r0, &(0x7f0000000040)=""/125, 0x7d) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:35:22 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff000000}) 12:35:22 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf901, 0x0, &(0x7f0000000000)) 12:35:22 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0xb2, 0x5, 0x100, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7, 0x7, 0x1}}) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:35:22 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xfa00, 0x0, &(0x7f0000000000)) 12:35:23 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000000)={0x60, 0x2000, 0x140, 0x80, 0x400, 0x2, 0x2, 0x2, {0x0, 0x6}, {0x3, 0x9}, {0x401, 0x7, 0x1}, {0x0, 0x9}, 0x2, 0x100, 0x2, 0x100, 0x1, 0x5, 0x7fffffff, 0x10001, 0x3f, 0x80, 0x4e, 0x3, 0x2e, 0x100, 0x0, 0xc}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:23 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xfa01, 0x0, &(0x7f0000000000)) [ 3104.443240][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 3104.443256][ T38] audit: type=1326 audit(1621341323.485:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31011 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:23 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0xb2, 0x5, 0x100, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7, 0x7, 0x1}}) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:35:23 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2022) write$FUSE_WRITE(r1, &(0x7f00000041c0)={0x18, 0x0, r2}, 0x18) r5 = syz_open_dev$mouse(&(0x7f0000000480), 0x0, 0x800) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(0x0, r6, 0x0) mount$fuseblk(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x1020, &(0x7f00000004c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0xa00}}], [{@fowner_lt={'fowner<', r6}}, {@subj_role={'subj_role', 0x3d, '/dev/cuse\x00'}}, {@subj_user}, {@subj_user={'subj_user', 0x3d, '\x88{@^*{'}}]}}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r7, 0x89f7, 0x0) accept4$rose(r7, &(0x7f00000001c0)=@short={0xb, @remote, @remote, 0x1, @rose}, &(0x7f0000000200)=0x1c, 0x800) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x21, 0x1ff, 0x220478d, 0x400, 0x7, 0x400}}, 0x50) socketpair(0x2, 0x80000, 0xc5f, &(0x7f0000000240)={0xffffffffffffffff}) bind$can_j1939(r8, &(0x7f0000000280)={0x1d, 0x0, 0x3, {0x1, 0x1}, 0xfe}, 0x18) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x105000, 0x0) ioctl$FBIOGET_FSCREENINFO(r9, 0x4602, &(0x7f0000000140)) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$FBIOGET_VSCREENINFO(r10, 0x4600, &(0x7f0000000300)) 12:35:23 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0xb2, 0x5, 0x100, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7, 0x7, 0x1}}) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:35:23 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xfb00, 0x0, &(0x7f0000000000)) 12:35:23 executing program 2: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xfa01, 0x0, &(0x7f0000000000)) 12:35:23 executing program 5: prctl$PR_MCE_KILL(0x34, 0x5a19ff858bae2375, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) socket(0x18, 0x1, 0x81) 12:35:23 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_MCE_KILL(0xd, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, {0x0, 0x8}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x500, 0x1000, 0x556, 0x480, 0x38, 0x2, 0xf, 0x2, {0xff, 0x5}, {0x80000001, 0x3, 0x1}, {0x6, 0x10001, 0x1}, {0x1b9, 0x5}, 0x3, 0x10, 0x0, 0xa898, 0x1, 0x5, 0x0, 0x401, 0x2, 0x400, 0x2, 0xeb77, 0xaee1d4044905caab, 0x200, 0x0, 0x8}) [ 3104.666197][ T38] audit: type=1326 audit(1621341323.705:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31058 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:23 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0xb2, 0x5, 0x100, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x7, 0x7, 0x1}}) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) 12:35:23 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xfb01, 0x0, &(0x7f0000000000)) 12:35:23 executing program 2: prctl$PR_MCE_KILL(0x34, 0x1, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@tipc, &(0x7f00000000c0)=0x80) 12:35:23 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000240)={0x8, 0x8, &(0x7f0000000140)=[0x6, 0x9, 0x9, 0x5, 0x3ff, 0x5d59, 0x80c, 0x1], &(0x7f0000000180)=[0x1, 0x9, 0x4, 0x0, 0x8, 0xf800, 0x7, 0x3, 0x101], &(0x7f00000001c0)=[0x1000], &(0x7f0000000200)=[0x7fff, 0xfffc, 0x6, 0x9, 0x5]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x22}, 0x40) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x2000, 0x320, 0x400, 0x1e0, 0xffffffc0, 0x4, 0x1, 0x1, {0x80000000, 0x5}, {0x3, 0x200}, {0x9, 0x5}, {0x5, 0x9, 0x1}, 0x0, 0x80, 0x3, 0x1ff, 0x0, 0xfff, 0xbfe9, 0xffffffff, 0x6, 0x4, 0xe352, 0xbc3, 0x20, 0x1, 0x0, 0x5}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r2, &(0x7f0000002180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r2, &(0x7f00000041c0)={0x18, 0x0, r3}, 0x18) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x0, r3, {0x20}}, 0x18) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:23 executing program 5: prctl$PR_MCE_KILL(0x34, 0x5a19ff858bae2375, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) socket(0x18, 0x1, 0x81) 12:35:23 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) 12:35:24 executing program 3: openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) 12:35:24 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xfc00, 0x0, &(0x7f0000000000)) 12:35:24 executing program 5: prctl$PR_MCE_KILL(0x34, 0x5a19ff858bae2375, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) socket(0x18, 0x1, 0x81) 12:35:24 executing program 2: read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), 0x4) r0 = syz_open_dev$cec(&(0x7f0000000040), 0x2, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x5, 0x1, 0x4, 0x100000, 0x100, {0x77359400}, {0x5, 0x8, 0x40, 0xff, 0x7, 0x5, "1a0c2c2d"}, 0x2, 0x3, @offset=0x8, 0x1, 0x0, r1}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) bind$can_j1939(r2, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x1, 0xff, 0x1}}, 0x18) 12:35:24 executing program 4: getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) prctl$PR_MCE_KILL(0x16, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x40040) 12:35:24 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) [ 3105.449060][ T38] audit: type=1326 audit(1621341324.485:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31058 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:24 executing program 3: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) 12:35:24 executing program 5: prctl$PR_MCE_KILL(0x34, 0x5a19ff858bae2375, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) 12:35:24 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f000000a140)={0x24, @short={0x2, 0x2, 0xaaa2}}, 0x14) 12:35:24 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x556, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:24 executing program 2: openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2022) write$FUSE_WRITE(r1, &(0x7f00000041c0)={0x18, 0x0, r2}, 0x18) r5 = syz_open_dev$mouse(&(0x7f0000000480), 0x0, 0x800) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(0x0, r6, 0x0) mount$fuseblk(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x1020, &(0x7f00000004c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0xa00}}], [{@fowner_lt={'fowner<', r6}}, {@subj_role={'subj_role', 0x3d, '/dev/cuse\x00'}}, {@subj_user}, {@subj_user={'subj_user', 0x3d, '\x88{@^*{'}}]}}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r7, 0x89f7, 0x0) accept4$rose(r7, &(0x7f00000001c0)=@short={0xb, @remote, @remote, 0x1, @rose}, &(0x7f0000000200)=0x1c, 0x800) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x21, 0x1ff, 0x220478d, 0x400, 0x7, 0x400}}, 0x50) socketpair(0x2, 0x80000, 0xc5f, &(0x7f0000000240)={0xffffffffffffffff}) bind$can_j1939(r8, &(0x7f0000000280)={0x1d, 0x0, 0x3, {0x1, 0x1}, 0xfe}, 0x18) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x105000, 0x0) ioctl$FBIOGET_FSCREENINFO(r9, 0x4602, &(0x7f0000000140)) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) ioctl$FBIOGET_VSCREENINFO(r10, 0x4600, &(0x7f0000000300)) 12:35:24 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xfc01, 0x0, &(0x7f0000000000)) 12:35:24 executing program 5: prctl$PR_MCE_KILL(0x34, 0x5a19ff858bae2375, 0x0) [ 3105.687199][ T38] audit: type=1326 audit(1621341324.725:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:24 executing program 3: prctl$PR_SET_KEEPCAPS(0x8, 0x0) 12:35:24 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1000}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x800, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffc, 0x10000008}, {}, {0xffffffff}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$FBIOBLANK(r0, 0x4611, 0x1) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000240)={0x7, 0x2}) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000500)={0x16, 0x1}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000004c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000480)=@IORING_OP_TEE={0x21, 0x5, 0x0, @fd=r1, 0x0, 0x0, 0x8, 0xc, 0x0, {0x0, 0x0, r2}}, 0x81) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000180)={0x1, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0]}) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f0000000280)={0x19}) write$fb(r0, &(0x7f00000003c0)="a09ce7b75665807e4dc3b619215bb94b619578e4069abe207acfc6f77e55bb36f7a5da403d9ec33f3b6d06b9efd9e6a8a7cc35909b462b31c8bb627e77a1b0c1f3b97a169bf25076d9652c01e66d9acac0069208e11cdd602eae4debc3bc1af07854b53ad135389fb795a2245afa79098df40176a9a5db520f13bda415", 0x7d) 12:35:24 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x0) 12:35:24 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xfd00, 0x0, &(0x7f0000000000)) [ 3105.812886][ T38] audit: type=1326 audit(1621341324.835:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31115 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:25 executing program 3: prctl$PR_SET_KEEPCAPS(0x8, 0x0) 12:35:25 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x0) 12:35:25 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fork() ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) [ 3106.508063][ T38] audit: type=1326 audit(1621341325.545:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31108 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:25 executing program 4: shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000000)=""/221) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) 12:35:25 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xfd01, 0x0, &(0x7f0000000000)) 12:35:25 executing program 2: shmget$private(0x0, 0x1000, 0x400, &(0x7f0000ffd000/0x1000)=nil) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) 12:35:25 executing program 5: prctl$PR_MCE_KILL(0x34, 0x0, 0x0) 12:35:25 executing program 3: prctl$PR_SET_KEEPCAPS(0x8, 0x0) 12:35:25 executing program 0: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 12:35:25 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xfe00, 0x0, &(0x7f0000000000)) [ 3106.605638][ T38] audit: type=1326 audit(1621341325.645:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31143 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:25 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) r2 = syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x10, r2, 0x8000000) syz_io_uring_setup(0x5586, &(0x7f0000000000)={0x0, 0x756a, 0x20, 0x3, 0x1aa}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0xa5c7, 0x2, &(0x7f0000000140)="711f3a0a2bb4be5848ad5137aef7a5085487e57ef5750fec16429681c11f510af5", 0x800, 0x0, 0x1, {0x1}}, 0x8) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f00000001c0)='syz0\x00') 12:35:25 executing program 5: prctl$PR_MCE_KILL(0x39, 0x1, 0x700000000000000) 12:35:25 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xfe01, 0x0, &(0x7f0000000000)) [ 3106.713509][ T38] audit: type=1326 audit(1621341325.755:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31150 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:25 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:25 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xff00, 0x0, &(0x7f0000000000)) 12:35:26 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:26 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f8c}) [ 3107.442597][ T38] audit: type=1326 audit(1621341326.475:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31143 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:26 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) socket(0x25, 0x2, 0x2) socketpair(0x0, 0x4, 0xdb0, &(0x7f00000000c0)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 12:35:26 executing program 4: prctl$PR_MCE_KILL(0x16, 0x0, 0x1) 12:35:26 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xff01, 0x0, &(0x7f0000000000)) 12:35:26 executing program 5: syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x40c0) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:35:26 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:26 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x6c0500) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000240)) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x80000}, {}, {}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x3}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) 12:35:26 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x20000, 0x0, &(0x7f0000000000)) 12:35:26 executing program 3: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:26 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) 12:35:26 executing program 5: modify_ldt$write2(0x11, &(0x7f00000000c0)={0x4, 0x0, 0xfffffffffffffbff, 0x0, 0x2, 0x1}, 0x10) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/185) getpgrp(0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) mount$fuseblk(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x8000, &(0x7f0000000240)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x1}}, {@blksize}], [{@fsname={'fsname', 0x3d, ',{]\xb5^'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@smackfsdef}, {@dont_appraise}]}}) r1 = fork() gettid() rt_tgsigqueueinfo(0x0, r1, 0x0, &(0x7f0000000140)) ioprio_get$pid(0x1, r1) 12:35:26 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) socket(0x25, 0x2, 0x2) socketpair(0x0, 0x4, 0xdb0, &(0x7f00000000c0)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 12:35:26 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:26 executing program 3: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:26 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x200000, 0x0, &(0x7f0000000000)) [ 3107.830835][ T38] audit: type=1326 audit(1621341326.865:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31190 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:26 executing program 5: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) shmctl$IPC_RMID(0x0, 0x0) 12:35:27 executing program 3: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:27 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) socket(0x25, 0x2, 0x2) socketpair(0x0, 0x4, 0xdb0, &(0x7f00000000c0)) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) 12:35:27 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x52300, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000040)={0x6, 0x80000001}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080)=0x1, 0x4) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:27 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x1000000, 0x0, &(0x7f0000000000)) 12:35:27 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x0) write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00', {0xd1e, 0x3, 0x7, 0x7}, 0x29, [0x40, 0x5559, 0x9, 0x4, 0x9, 0x400, 0x0, 0x7, 0xdaf, 0x0, 0x10000, 0x4, 0x7, 0x8, 0x6, 0x9c, 0x6, 0x7, 0x400, 0x7, 0x0, 0x200, 0x8, 0x7, 0x81, 0x1000, 0xffff, 0xca, 0x0, 0x1, 0x80000000, 0x7, 0x2, 0x60acab53, 0x9, 0xff, 0x4, 0x1, 0x3, 0x1, 0x1, 0x7fff, 0x8, 0x781, 0x9, 0x80000001, 0x2, 0xe3c9, 0x40, 0x9, 0x5, 0x1, 0x3ff, 0x3, 0x0, 0x0, 0x4, 0x7f, 0xb061, 0x1800, 0x80000001, 0x7fffffff, 0x11456f89, 0xfffeffff], [0x5, 0x0, 0x5f, 0x9, 0x2, 0x2, 0x9, 0x6, 0x7fffffff, 0x800, 0xffffff00, 0x9, 0x7, 0x6, 0x7f32, 0xb75, 0x80000000, 0x8, 0x9, 0x9f1f, 0x9, 0x9, 0x7, 0x4, 0x400, 0x8, 0x8, 0xaa8b, 0x81, 0x200, 0x2, 0x9, 0x2, 0x3ff, 0x1, 0x8, 0x1, 0x9, 0x5, 0x8, 0x1, 0x0, 0x1, 0x200, 0xeb9, 0x0, 0x6, 0x10001, 0x3dbc, 0x8, 0x4c, 0x4, 0x7, 0xfff, 0x6, 0x59, 0xd3c, 0x6, 0x8, 0x1, 0x7, 0x6, 0xc9e3, 0x9], [0x9, 0x7c8, 0x7ff, 0x1, 0xffffffff, 0x8, 0x8001, 0x200, 0x7ff, 0x2, 0x800, 0xfffffff9, 0x5, 0x1, 0xfffffffa, 0x7, 0x4, 0x9, 0x1000, 0xe661, 0xfffff001, 0x0, 0x401, 0x3, 0x7fffffff, 0x101, 0x4, 0x1, 0x1, 0x8, 0x9, 0xffff, 0x0, 0xffffffff, 0x200, 0x3, 0x3, 0xff, 0xb3, 0x8, 0xad51, 0xbe3, 0x3f, 0x1, 0x9, 0x8, 0x7fff, 0x6, 0x7f, 0x7, 0x3, 0x4, 0x8001, 0x5, 0x40, 0x800, 0x100, 0x8, 0x1, 0x895, 0x0, 0x1, 0x8, 0x1000], [0x4, 0xfffffff7, 0x8, 0x80000000, 0x9, 0x2, 0xb98, 0x400, 0x1, 0x100, 0x6, 0x0, 0x10000, 0x1, 0x38, 0x4, 0x0, 0x81, 0x81, 0x1000, 0x2f97, 0x1, 0x7fffffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x81, 0x8b2, 0xd8, 0x4, 0x0, 0x1, 0x1000, 0x2, 0x9bc, 0x4, 0x7, 0xba4, 0xff5a, 0x0, 0xcd55, 0x7, 0x8, 0xd14a, 0xfd, 0x1ff, 0x0, 0x100, 0x0, 0x19cb, 0x1, 0x1, 0x8000, 0x3, 0x477d188e, 0x5, 0xffffffe0, 0x839, 0xffffffff, 0x3, 0x9, 0x3, 0x1000]}, 0x45c) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000500), 0x376b, 0x101400) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f00000004c0)='syz0\x00') prctl$PR_MCE_KILL(0x16, 0x1, 0x0) fcntl$getown(r2, 0x9) 12:35:27 executing program 3: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:27 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x1010000, 0x0, &(0x7f0000000000)) 12:35:27 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000000)) 12:35:27 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) socket(0x25, 0x2, 0x2) socketpair(0x0, 0x4, 0xdb0, &(0x7f00000000c0)) 12:35:27 executing program 5: syz_open_dev$mouse(&(0x7f0000000000), 0x55c3, 0x400001) prctl$PR_MCE_KILL(0x34, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 12:35:27 executing program 3: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:27 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0xfffffffd}) 12:35:27 executing program 5: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}) 12:35:27 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x2000000, 0x0, &(0x7f0000000000)) 12:35:27 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) socketpair(0x0, 0x4, 0xdb0, &(0x7f00000000c0)) 12:35:27 executing program 2: socketpair(0x0, 0x4, 0xdb0, &(0x7f00000000c0)) 12:35:28 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) 12:35:28 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) read$fb(r1, &(0x7f0000000000), 0x0) 12:35:28 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x2010000, 0x0, &(0x7f0000000000)) 12:35:28 executing program 3: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:28 executing program 2: socketpair(0x0, 0x4, 0xdb0, &(0x7f00000000c0)) 12:35:28 executing program 5: prctl$PR_MCE_KILL(0x29, 0x1, 0x2) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fcntl$getown(r0, 0x9) [ 3109.629654][ T38] kauditd_printk_skb: 2 callbacks suppressed [ 3109.629670][ T38] audit: type=1326 audit(1621341328.665:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31231 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:28 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, 0x0) 12:35:28 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3000000, 0x0, &(0x7f0000000000)) 12:35:28 executing program 2: socketpair(0x0, 0x4, 0xdb0, &(0x7f00000000c0)) 12:35:28 executing program 5: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) [ 3109.790415][ T38] audit: type=1326 audit(1621341328.825:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31270 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:28 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x2d, 0x2}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff}) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x3f, 0x1}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) write$fb(r1, &(0x7f0000000040)="2079022c7b6f6b6df13718537f4b6e9540e39805043892cd34751eb623f4daab230a2efd97416a60b4be9268508774", 0x2f) 12:35:29 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, 0x0) [ 3110.613007][ T38] audit: type=1326 audit(1621341329.655:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31270 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:29 executing program 4: bind$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@default, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}, 0x40) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x16, 0x1, 0x0) bind$rose(0xffffffffffffffff, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) 12:35:29 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3010000, 0x0, &(0x7f0000000000)) 12:35:29 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) socketpair(0x0, 0x4, 0xdb0, &(0x7f00000000c0)) 12:35:29 executing program 5 (fault-call:0 fault-nth:0): prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) 12:35:29 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x30, 0x10, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, {0x0, 0x8}, {}, {0x0, 0x2}, {}, 0x0, 0x40, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x200}) socketpair(0x29, 0x5, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80}) 12:35:29 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, 0x0) [ 3110.718440][T31304] FAULT_INJECTION: forcing a failure. [ 3110.718440][T31304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3110.762071][T31304] CPU: 1 PID: 31304 Comm: syz-executor.5 Not tainted 5.13.0-rc2-syzkaller #0 [ 3110.771032][T31304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3110.781079][T31304] Call Trace: [ 3110.781883][ T38] audit: type=1326 audit(1621341329.805:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31306 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 3110.784348][T31304] dump_stack+0x141/0x1d7 [ 3110.784378][T31304] should_fail.cold+0x5/0xa [ 3110.814929][T31304] _copy_to_user+0x2c/0x150 [ 3110.819442][T31304] simple_read_from_buffer+0xcc/0x160 [ 3110.824993][T31304] proc_fail_nth_read+0x187/0x220 [ 3110.830013][T31304] ? proc_exe_link+0x1d0/0x1d0 [ 3110.834765][T31304] ? security_file_permission+0x248/0x560 [ 3110.840481][T31304] ? proc_exe_link+0x1d0/0x1d0 [ 3110.845236][T31304] vfs_read+0x1b5/0x570 [ 3110.849383][T31304] ksys_read+0x12d/0x250 [ 3110.853617][T31304] ? vfs_write+0xa30/0xa30 [ 3110.858024][T31304] ? syscall_enter_from_user_mode+0x27/0x70 [ 3110.863915][T31304] do_syscall_64+0x3a/0xb0 [ 3110.868498][T31304] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3110.874384][T31304] RIP: 0033:0x41935c [ 3110.878271][T31304] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3110.898038][T31304] RSP: 002b:00007fdf8124d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 12:35:30 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4000000, 0x0, &(0x7f0000000000)) 12:35:30 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) socketpair(0x0, 0x4, 0xdb0, &(0x7f00000000c0)) 12:35:30 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x1, 0x440002) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f00000003c0)={0x100, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000140)={0x5, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) [ 3110.906441][T31304] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041935c [ 3110.914397][T31304] RDX: 000000000000000f RSI: 00007fdf8124d1e0 RDI: 0000000000000003 [ 3110.922357][T31304] RBP: 00007fdf8124d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 3110.930317][T31304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3110.938271][T31304] R13: 00007ffc6ffb490f R14: 00007fdf8124d300 R15: 0000000000022000 12:35:30 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) 12:35:30 executing program 3 (fault-call:1 fault-nth:0): prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:30 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4010000, 0x0, &(0x7f0000000000)) [ 3111.164495][T31326] FAULT_INJECTION: forcing a failure. [ 3111.164495][T31326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3111.190144][T31326] CPU: 0 PID: 31326 Comm: syz-executor.3 Not tainted 5.13.0-rc2-syzkaller #0 [ 3111.199097][T31326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3111.209152][T31326] Call Trace: [ 3111.212432][T31326] dump_stack+0x141/0x1d7 [ 3111.216771][T31326] should_fail.cold+0x5/0xa [ 3111.221287][T31326] _copy_to_user+0x2c/0x150 [ 3111.225801][T31326] do_seccomp+0x7a2/0x2870 [ 3111.230208][T31326] ? __context_tracking_exit+0xb8/0xe0 [ 3111.236050][T31326] ? lock_downgrade+0x6e0/0x6e0 [ 3111.241067][T31326] ? __seccomp_filter+0x15e0/0x15e0 [ 3111.246347][T31326] ? syscall_enter_from_user_mode+0x27/0x70 [ 3111.252562][T31326] do_syscall_64+0x3a/0xb0 [ 3111.256964][T31326] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3111.263421][T31326] RIP: 0033:0x4665d9 [ 3111.267450][T31326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3111.287039][T31326] RSP: 002b:00007f88711f6188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 3111.295650][T31326] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 3111.303603][T31326] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3111.311559][T31326] RBP: 00007f88711f61d0 R08: 0000000000000000 R09: 0000000000000000 [ 3111.319685][T31326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3111.327632][T31326] R13: 00007fff84a797df R14: 00007f88711f6300 R15: 0000000000022000 [ 3111.585964][ T38] audit: type=1326 audit(1621341330.625:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31306 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:30 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x620200, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000040)) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:30 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5000000, 0x0, &(0x7f0000000000)) 12:35:30 executing program 2: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) socketpair(0x0, 0x4, 0xdb0, &(0x7f00000000c0)) 12:35:30 executing program 5: prctl$PR_SET_KEEPCAPS(0x7, 0x400000001) 12:35:30 executing program 4: prctl$PR_MCE_KILL(0x16, 0x0, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x200000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x1, 0xfffffffe, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x80, 0x20, 0x8, 0x103}}) sendmsg$can_j1939(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, r1, 0x0, {0x2, 0x1}, 0x2}, 0x18, &(0x7f0000000200)={&(0x7f0000000140)="d523025d6d0ae734378d78fbc3bf72a37852bd5e7ce857656b24a6764462fbb9d51378bf9d66a8bdc2cc0b757066c9aef7fcce9624ff7a9d7aa5396601ce76768e645ea3153d8906e34b2d2e6bf273ba1f20776e0dd5280674ca876bf7bfae875822dce89ba07970bfb8ea2164d10d51e8b366586be5a80e49061b5c1b6339e3abf76701fc65aa7e1e52c69ef329be85cf9d6ea8b1cca5923d0f8306c4", 0x9d}, 0x1, 0x0, 0x0, 0x20004004}, 0x8000) 12:35:30 executing program 3 (fault-call:1 fault-nth:1): prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) [ 3111.725831][T31338] FAULT_INJECTION: forcing a failure. [ 3111.725831][T31338] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3111.769004][T31338] CPU: 0 PID: 31338 Comm: syz-executor.3 Not tainted 5.13.0-rc2-syzkaller #0 [ 3111.777968][T31338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3111.788020][T31338] Call Trace: [ 3111.791297][T31338] dump_stack+0x141/0x1d7 [ 3111.795639][T31338] should_fail.cold+0x5/0xa [ 3111.800156][T31338] prepare_alloc_pages+0x17b/0x580 [ 3111.805274][T31338] ? lock_chain_count+0x20/0x20 [ 3111.810132][T31338] ? mark_lock+0xef/0x17b0 [ 3111.814556][T31338] __alloc_pages+0x12f/0x500 [ 3111.819161][T31338] ? __alloc_pages_slowpath.constprop.0+0x2140/0x2140 [ 3111.825933][T31338] ? mark_lock+0xef/0x17b0 [ 3111.830365][T31338] ? __lock_acquire+0xb3a/0x5230 [ 3111.835320][T31338] alloc_pages+0x18c/0x2a0 [ 3111.839739][T31338] pte_alloc_one+0x16/0x230 [ 3111.844244][T31338] __pte_alloc+0x1f/0x2e0 [ 3111.848584][T31338] __handle_mm_fault+0x51cd/0x52c0 [ 3111.853702][T31338] ? vm_iomap_memory+0x190/0x190 [ 3111.858657][T31338] handle_mm_fault+0x1bc/0x7e0 [ 3111.863432][T31338] do_user_addr_fault+0x483/0x1210 12:35:30 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x5010000, 0x0, &(0x7f0000000000)) 12:35:30 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {0x2}}) ioctl$FBIOBLANK(r0, 0x4611, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000140)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) write$fb(r1, &(0x7f00000000c0)="3dc916602e666a5098fe9c0154", 0xd) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000000)={0x1e0, 0x1e0, 0x356, 0xa4d5708b8fbf87e4, 0xfffffffe, 0xa1bf, 0x4, 0x1, {0x6, 0x101, 0x1}, {0x2, 0x1, 0x1}, {0x4, 0x630a, 0x1}, {0x1b9, 0x4}, 0x2, 0x10, 0x80000001, 0x40000000, 0x0, 0xe17, 0x2, 0x6ae, 0x5, 0x0, 0x3b3, 0x2, 0x16, 0x200, 0x1, 0xb}) 12:35:30 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6000000, 0x0, &(0x7f0000000000)) [ 3111.868559][T31338] exc_page_fault+0x9e/0x180 [ 3111.873158][T31338] asm_exc_page_fault+0x1e/0x30 [ 3111.878008][T31338] RIP: 0010:copy_user_generic_string+0x31/0x40 [ 3111.884170][T31338] Code: 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f [ 3111.903784][T31338] RSP: 0018:ffffc90002ddfdd0 EFLAGS: 00050293 [ 3111.909853][T31338] RAX: 0000000000000001 RBX: 0000000000000006 RCX: 0000000000000006 12:35:30 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x6010000, 0x0, &(0x7f0000000000)) [ 3111.917821][T31338] RDX: 0000000000000006 RSI: ffffc90002ddfe88 RDI: 0000000020000000 [ 3111.925787][T31338] RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000005 [ 3111.933757][T31338] R10: fffff520005bbfd1 R11: 0000000000000000 R12: 0000000020000006 [ 3111.941729][T31338] R13: ffffc90002ddfe88 R14: 0000000000000000 R15: 0000000000000000 [ 3111.949717][T31338] _copy_to_user+0xd4/0x150 [ 3111.954249][T31338] do_seccomp+0x7a2/0x2870 [ 3111.958666][T31338] ? __context_tracking_exit+0xb8/0xe0 [ 3111.964223][T31338] ? lock_downgrade+0x6e0/0x6e0 12:35:31 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7000000, 0x0, &(0x7f0000000000)) [ 3111.969083][T31338] ? __seccomp_filter+0x15e0/0x15e0 [ 3111.974290][T31338] ? syscall_enter_from_user_mode+0x27/0x70 [ 3111.980196][T31338] do_syscall_64+0x3a/0xb0 [ 3111.984617][T31338] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3111.990513][T31338] RIP: 0033:0x4665d9 [ 3111.994407][T31338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 12:35:31 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x7010000, 0x0, &(0x7f0000000000)) 12:35:31 executing program 5: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:35:31 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x1) [ 3112.014026][T31338] RSP: 002b:00007f88711f6188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 3112.022619][T31338] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 3112.030588][T31338] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3112.038551][T31338] RBP: 00007f88711f61d0 R08: 0000000000000000 R09: 0000000000000000 [ 3112.046607][T31338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3112.054598][T31338] R13: 00007fff84a797df R14: 00007f88711f6300 R15: 0000000000022000 12:35:31 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) socketpair(0x0, 0x0, 0xdb0, &(0x7f00000000c0)) 12:35:31 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000000c0)) [ 3112.142642][ T38] audit: type=1326 audit(1621341331.185:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31359 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:31 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x80, 0x10, 0x2000, 0x0, 0x400, 0x0, 0xf, 0x0, {0x0, 0x4}, {0x7}, {}, {}, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xdc097423f629ea77}) 12:35:31 executing program 3 (fault-call:1 fault-nth:2): prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:31 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8000000, 0x0, &(0x7f0000000000)) 12:35:31 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) 12:35:31 executing program 5: prctl$PR_SET_KEEPCAPS(0x18, 0x400000001) 12:35:31 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x8010000, 0x0, &(0x7f0000000000)) [ 3112.352754][T31384] FAULT_INJECTION: forcing a failure. [ 3112.352754][T31384] name failslab, interval 1, probability 0, space 0, times 0 12:35:31 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x60, 0x280, 0x60, 0x240, 0x3, 0x200, 0x24, 0x0, {0x0, 0xbce0}, {0x3f, 0x38, 0x1}, {0x5, 0x9, 0x1}, {0x0, 0x7f, 0x1}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x80000001, 0x62c, 0x7fff, 0x7, 0x3, 0x1, 0x4, 0x19, 0x1, 0x0, 0x5}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mmap$qrtrtun(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x8010, r1, 0x4) 12:35:31 executing program 5: prctl$PR_SET_KEEPCAPS(0x1b, 0x400000001) 12:35:31 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9000000, 0x0, &(0x7f0000000000)) [ 3112.434646][T31384] CPU: 0 PID: 31384 Comm: syz-executor.3 Not tainted 5.13.0-rc2-syzkaller #0 [ 3112.443629][T31384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3112.453770][T31384] Call Trace: [ 3112.457129][T31384] dump_stack+0x141/0x1d7 [ 3112.461468][T31384] should_fail.cold+0x5/0xa [ 3112.465977][T31384] ? ptlock_alloc+0x1d/0x70 [ 3112.470479][T31384] should_failslab+0x5/0x10 [ 3112.474979][T31384] kmem_cache_alloc+0x5e/0x3a0 [ 3112.479751][T31384] ptlock_alloc+0x1d/0x70 [ 3112.484081][T31384] pte_alloc_one+0x68/0x230 [ 3112.488589][T31384] __pte_alloc+0x1f/0x2e0 [ 3112.492930][T31384] __handle_mm_fault+0x51cd/0x52c0 [ 3112.498050][T31384] ? vm_iomap_memory+0x190/0x190 [ 3112.503004][T31384] handle_mm_fault+0x1bc/0x7e0 [ 3112.507770][T31384] do_user_addr_fault+0x483/0x1210 [ 3112.512890][T31384] exc_page_fault+0x9e/0x180 [ 3112.517486][T31384] asm_exc_page_fault+0x1e/0x30 [ 3112.522334][T31384] RIP: 0010:copy_user_generic_string+0x31/0x40 [ 3112.528491][T31384] Code: 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f [ 3112.548097][T31384] RSP: 0018:ffffc900031efdd0 EFLAGS: 00050293 [ 3112.554335][T31384] RAX: 0000000000000001 RBX: 0000000000000006 RCX: 0000000000000006 [ 3112.562306][T31384] RDX: 0000000000000006 RSI: ffffc900031efe88 RDI: 0000000020000000 [ 3112.570272][T31384] RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000005 [ 3112.578242][T31384] R10: fffff5200063dfd1 R11: 0000000000000000 R12: 0000000020000006 [ 3112.586215][T31384] R13: ffffc900031efe88 R14: 0000000000000000 R15: 0000000000000000 [ 3112.594298][T31384] _copy_to_user+0xd4/0x150 [ 3112.598828][T31384] do_seccomp+0x7a2/0x2870 [ 3112.603258][T31384] ? __context_tracking_exit+0xb8/0xe0 [ 3112.603294][T31384] ? lock_downgrade+0x6e0/0x6e0 [ 3112.603322][T31384] ? __seccomp_filter+0x15e0/0x15e0 [ 3112.618765][T31384] ? syscall_enter_from_user_mode+0x27/0x70 [ 3112.624848][T31384] do_syscall_64+0x3a/0xb0 [ 3112.629268][T31384] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3112.635162][T31384] RIP: 0033:0x4665d9 [ 3112.639037][T31384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3112.659409][T31384] RSP: 002b:00007f88711f6188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 3112.668144][T31384] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 3112.676181][T31384] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3112.684645][T31384] RBP: 00007f88711f61d0 R08: 0000000000000000 R09: 0000000000000000 [ 3112.692769][T31384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3112.700719][T31384] R13: 00007fff84a797df R14: 00007f88711f6300 R15: 0000000000022000 12:35:32 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000040)={0x4, &(0x7f0000000140)=[{@fixed}, {}, {@none}, {@fixed}]}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 12:35:32 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x9010000, 0x0, &(0x7f0000000000)) 12:35:32 executing program 5: prctl$PR_SET_KEEPCAPS(0x1c, 0x400000001) 12:35:32 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{@fixed}, {@fixed}, {@fixed}, {@fixed}]}) 12:35:32 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) 12:35:32 executing program 3 (fault-call:1 fault-nth:3): prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) [ 3112.971217][ T38] audit: type=1326 audit(1621341332.005:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31359 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:32 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$fb(r0, &(0x7f0000000180)=""/248, 0xf8) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x5, 0x109000) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000140)={0x10, 0x1}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x5d6, 0x0, 0x2000, 0x1e0, 0x5, 0xfff, 0x1, 0x0, {0xff000, 0x8}, {0x2, 0x8}, {0xffffff80, 0x4, 0x1}, {0x1, 0xf94}, 0x2, 0x1, 0x7, 0x10001, 0x1, 0x1, 0x2, 0x8, 0x1, 0x4, 0x3, 0x3, 0x23}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:32 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa000000, 0x0, &(0x7f0000000000)) [ 3113.108231][ T38] audit: type=1326 audit(1621341332.145:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31404 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 3113.133337][T31403] FAULT_INJECTION: forcing a failure. [ 3113.133337][T31403] name failslab, interval 1, probability 0, space 0, times 0 12:35:32 executing program 5: prctl$PR_SET_KEEPCAPS(0x2f, 0x400000001) [ 3113.207215][T31403] CPU: 1 PID: 31403 Comm: syz-executor.3 Not tainted 5.13.0-rc2-syzkaller #0 [ 3113.216118][T31403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3113.216136][T31403] Call Trace: [ 3113.216144][T31403] dump_stack+0x141/0x1d7 [ 3113.234014][T31403] should_fail.cold+0x5/0xa [ 3113.238616][T31403] ? __anon_vma_prepare+0x62/0x570 [ 3113.243743][T31403] should_failslab+0x5/0x10 [ 3113.248427][T31403] kmem_cache_alloc+0x5e/0x3a0 [ 3113.253203][T31403] __anon_vma_prepare+0x62/0x570 [ 3113.258148][T31403] ? __pte_alloc+0x11c/0x2e0 [ 3113.262739][T31403] __handle_mm_fault+0x439a/0x52c0 [ 3113.267864][T31403] ? vm_iomap_memory+0x190/0x190 [ 3113.272823][T31403] handle_mm_fault+0x1bc/0x7e0 [ 3113.277589][T31403] do_user_addr_fault+0x483/0x1210 [ 3113.282703][T31403] exc_page_fault+0x9e/0x180 [ 3113.287290][T31403] asm_exc_page_fault+0x1e/0x30 [ 3113.292127][T31403] RIP: 0010:copy_user_generic_string+0x31/0x40 [ 3113.298273][T31403] Code: 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f [ 3113.318043][T31403] RSP: 0018:ffffc9000323fdd0 EFLAGS: 00050293 [ 3113.324102][T31403] RAX: 0000000000000001 RBX: 0000000000000006 RCX: 0000000000000006 [ 3113.332059][T31403] RDX: 0000000000000006 RSI: ffffc9000323fe88 RDI: 0000000020000000 [ 3113.340018][T31403] RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000005 [ 3113.347974][T31403] R10: fffff52000647fd1 R11: 0000000000000000 R12: 0000000020000006 [ 3113.355929][T31403] R13: ffffc9000323fe88 R14: 0000000000000000 R15: 0000000000000000 [ 3113.363896][T31403] _copy_to_user+0xd4/0x150 [ 3113.368393][T31403] do_seccomp+0x7a2/0x2870 [ 3113.372803][T31403] ? __context_tracking_exit+0xb8/0xe0 [ 3113.378255][T31403] ? lock_downgrade+0x6e0/0x6e0 [ 3113.383100][T31403] ? __seccomp_filter+0x15e0/0x15e0 [ 3113.388294][T31403] ? syscall_enter_from_user_mode+0x27/0x70 [ 3113.394181][T31403] do_syscall_64+0x3a/0xb0 [ 3113.398597][T31403] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3113.404475][T31403] RIP: 0033:0x4665d9 [ 3113.408353][T31403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3113.427946][T31403] RSP: 002b:00007f88711f6188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 3113.436348][T31403] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 3113.444302][T31403] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000003 12:35:32 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) [ 3113.452260][T31403] RBP: 00007f88711f61d0 R08: 0000000000000000 R09: 0000000000000000 [ 3113.460395][T31403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3113.468351][T31403] R13: 00007fff84a797df R14: 00007f88711f6300 R15: 0000000000022000 12:35:32 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000007) 12:35:32 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x400, 0x640, 0x0, 0x480, 0x2, 0x5, 0x18, 0x1, {0x9d5e, 0x1}, {0x2, 0x80, 0x1}, {0x4}, {0x3, 0xdc4}, 0x2, 0x80, 0x81, 0x5, 0x0, 0x0, 0x1, 0xffff, 0x1, 0x8, 0x2, 0x6, 0x6, 0x200, 0x0, 0x9}) [ 3113.922374][ T38] audit: type=1326 audit(1621341332.965:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31404 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:33 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x2) 12:35:33 executing program 3 (fault-call:1 fault-nth:4): prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:33 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xa010000, 0x0, &(0x7f0000000000)) 12:35:33 executing program 2: prctl$PR_SET_KEEPCAPS(0x1c, 0x400000001) 12:35:33 executing program 5: ioprio_set$pid(0x0, 0x0, 0x6000) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x38, 0x2}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x7f, {0x3f, 0x5, 0x3, 0x9, 0x2, 0x8}}) prctl$PR_SET_KEEPCAPS(0x8, 0x1) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x1) 12:35:33 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x80}) [ 3114.037075][T31435] FAULT_INJECTION: forcing a failure. [ 3114.037075][T31435] name failslab, interval 1, probability 0, space 0, times 0 12:35:33 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb000000, 0x0, &(0x7f0000000000)) [ 3114.067373][ T38] audit: type=1326 audit(1621341333.105:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31439 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 3114.078104][T31435] CPU: 0 PID: 31435 Comm: syz-executor.3 Not tainted 5.13.0-rc2-syzkaller #0 [ 3114.098221][T31435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 12:35:33 executing program 3 (fault-call:1 fault-nth:5): prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:33 executing program 2: prctl$PR_SET_KEEPCAPS(0x1c, 0x400000001) [ 3114.098235][T31435] Call Trace: 12:35:33 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xb010000, 0x0, &(0x7f0000000000)) 12:35:33 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x0) read$fb(0xffffffffffffffff, &(0x7f0000000000)=""/104, 0x68) [ 3114.098242][T31435] dump_stack+0x141/0x1d7 [ 3114.098266][T31435] should_fail.cold+0x5/0xa [ 3114.098288][T31435] ? __anon_vma_prepare+0x2db/0x570 [ 3114.098312][T31435] should_failslab+0x5/0x10 [ 3114.098329][T31435] kmem_cache_alloc+0x5e/0x3a0 [ 3114.098359][T31435] __anon_vma_prepare+0x2db/0x570 12:35:33 executing program 3 (fault-call:1 fault-nth:6): prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) [ 3114.098379][T31435] ? __pte_alloc+0x11c/0x2e0 [ 3114.098402][T31435] __handle_mm_fault+0x439a/0x52c0 [ 3114.098431][T31435] ? vm_iomap_memory+0x190/0x190 [ 3114.098462][T31435] handle_mm_fault+0x1bc/0x7e0 [ 3114.098482][T31435] do_user_addr_fault+0x483/0x1210 [ 3114.098511][T31435] exc_page_fault+0x9e/0x180 [ 3114.098539][T31435] asm_exc_page_fault+0x1e/0x30 [ 3114.098556][T31435] RIP: 0010:copy_user_generic_string+0x31/0x40 [ 3114.098577][T31435] Code: 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f [ 3114.098595][T31435] RSP: 0018:ffffc9000331fdd0 EFLAGS: 00050293 [ 3114.098611][T31435] RAX: 0000000000000001 RBX: 0000000000000006 RCX: 0000000000000006 [ 3114.098623][T31435] RDX: 0000000000000006 RSI: ffffc9000331fe88 RDI: 0000000020000000 [ 3114.098635][T31435] RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000005 [ 3114.098646][T31435] R10: fffff52000663fd1 R11: 0000000000000000 R12: 0000000020000006 [ 3114.098658][T31435] R13: ffffc9000331fe88 R14: 0000000000000000 R15: 0000000000000000 [ 3114.098680][T31435] _copy_to_user+0xd4/0x150 [ 3114.098704][T31435] do_seccomp+0x7a2/0x2870 [ 3114.098722][T31435] ? __context_tracking_exit+0xb8/0xe0 [ 3114.098744][T31435] ? lock_downgrade+0x6e0/0x6e0 [ 3114.098766][T31435] ? __seccomp_filter+0x15e0/0x15e0 [ 3114.098791][T31435] ? syscall_enter_from_user_mode+0x27/0x70 [ 3114.098816][T31435] do_syscall_64+0x3a/0xb0 [ 3114.098834][T31435] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3114.098851][T31435] RIP: 0033:0x4665d9 [ 3114.098865][T31435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3114.098882][T31435] RSP: 002b:00007f88711f6188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 3114.098899][T31435] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 3114.098913][T31435] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3114.098926][T31435] RBP: 00007f88711f61d0 R08: 0000000000000000 R09: 0000000000000000 [ 3114.098940][T31435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3114.098951][T31435] R13: 00007fff84a797df R14: 00007f88711f6300 R15: 0000000000022000 [ 3114.277598][T31449] FAULT_INJECTION: forcing a failure. [ 3114.277598][T31449] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 3114.277624][T31449] CPU: 0 PID: 31449 Comm: syz-executor.3 Not tainted 5.13.0-rc2-syzkaller #0 [ 3114.277641][T31449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3114.277651][T31449] Call Trace: [ 3114.277658][T31449] dump_stack+0x141/0x1d7 [ 3114.277679][T31449] should_fail.cold+0x5/0xa [ 3114.277701][T31449] prepare_alloc_pages+0x17b/0x580 [ 3114.277719][T31449] ? lock_downgrade+0x6e0/0x6e0 [ 3114.277742][T31449] __alloc_pages+0x12f/0x500 [ 3114.277760][T31449] ? __alloc_pages_slowpath.constprop.0+0x2140/0x2140 [ 3114.277784][T31449] ? rwlock_bug.part.0+0x90/0x90 [ 3114.277800][T31449] ? rcu_read_lock_sched_held+0x3a/0x70 [ 3114.277818][T31449] ? anon_vma_interval_tree_insert+0x2d4/0x4c0 [ 3114.277840][T31449] alloc_pages_vma+0xdd/0x770 [ 3114.277858][T31449] __handle_mm_fault+0x1edf/0x52c0 [ 3114.277885][T31449] ? vm_iomap_memory+0x190/0x190 [ 3114.277913][T31449] handle_mm_fault+0x1bc/0x7e0 [ 3114.277932][T31449] do_user_addr_fault+0x483/0x1210 [ 3114.277957][T31449] exc_page_fault+0x9e/0x180 [ 3114.277978][T31449] asm_exc_page_fault+0x1e/0x30 [ 3114.277993][T31449] RIP: 0010:copy_user_generic_string+0x31/0x40 [ 3114.278013][T31449] Code: 27 89 f9 83 e1 07 74 15 83 e9 08 f7 d9 29 ca 8a 06 88 07 48 ff c6 48 ff c7 ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f [ 3114.278028][T31449] RSP: 0018:ffffc9000336fdd0 EFLAGS: 00050293 [ 3114.278042][T31449] RAX: 0000000000000001 RBX: 0000000000000006 RCX: 0000000000000006 [ 3114.278053][T31449] RDX: 0000000000000006 RSI: ffffc9000336fe88 RDI: 0000000020000000 [ 3114.278063][T31449] RBP: 0000000020000000 R08: 0000000000000000 R09: 0000000000000005 [ 3114.278074][T31449] R10: fffff5200066dfd1 R11: 0000000000000000 R12: 0000000020000006 [ 3114.278084][T31449] R13: ffffc9000336fe88 R14: 0000000000000000 R15: 0000000000000000 [ 3114.278104][T31449] _copy_to_user+0xd4/0x150 [ 3114.278125][T31449] do_seccomp+0x7a2/0x2870 [ 3114.278142][T31449] ? __context_tracking_exit+0xb8/0xe0 [ 3114.278161][T31449] ? lock_downgrade+0x6e0/0x6e0 [ 3114.278180][T31449] ? __seccomp_filter+0x15e0/0x15e0 [ 3114.278203][T31449] ? syscall_enter_from_user_mode+0x27/0x70 [ 3114.278226][T31449] do_syscall_64+0x3a/0xb0 [ 3114.278242][T31449] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3114.278259][T31449] RIP: 0033:0x4665d9 [ 3114.278275][T31449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3114.278295][T31449] RSP: 002b:00007f88711f6188 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 3114.278316][T31449] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 3114.278331][T31449] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 3114.278343][T31449] RBP: 00007f88711f61d0 R08: 0000000000000000 R09: 0000000000000000 [ 3114.278354][T31449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3114.278366][T31449] R13: 00007fff84a797df R14: 00007f88711f6300 R15: 0000000000022000 [ 3114.406585][T31457] FAULT_INJECTION: forcing a failure. [ 3114.406585][T31457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3114.551784][ C1] vkms_vblank_simulate: vblank timer overrun [ 3114.852320][ C1] vkms_vblank_simulate: vblank timer overrun [ 3114.880756][ T38] audit: type=1326 audit(1621341333.915:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31439 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 [ 3114.897529][T31457] CPU: 1 PID: 31457 Comm: syz-executor.3 Not tainted 5.13.0-rc2-syzkaller #0 [ 3114.956187][T31457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 12:35:34 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x16, 0x1, 0x2) 12:35:34 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc000000, 0x0, &(0x7f0000000000)) 12:35:34 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x1) 12:35:34 executing program 2: prctl$PR_SET_KEEPCAPS(0x1c, 0x400000001) 12:35:34 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) [ 3114.956202][T31457] Call Trace: [ 3114.956210][T31457] dump_stack+0x141/0x1d7 [ 3114.956235][T31457] should_fail.cold+0x5/0xa [ 3114.956261][T31457] _copy_to_user+0x2c/0x150 [ 3114.956287][T31457] simple_read_from_buffer+0xcc/0x160 [ 3114.956311][T31457] proc_fail_nth_read+0x187/0x220 [ 3114.956335][T31457] ? proc_exe_link+0x1d0/0x1d0 [ 3114.956353][T31457] ? security_file_permission+0x248/0x560 [ 3114.956379][T31457] ? proc_exe_link+0x1d0/0x1d0 [ 3114.956399][T31457] vfs_read+0x1b5/0x570 [ 3114.956421][T31457] ksys_read+0x12d/0x250 [ 3114.956439][T31457] ? vfs_write+0xa30/0xa30 [ 3114.956459][T31457] ? syscall_enter_from_user_mode+0x27/0x70 [ 3114.956488][T31457] do_syscall_64+0x3a/0xb0 [ 3114.956507][T31457] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3114.956527][T31457] RIP: 0033:0x41935c [ 3114.956543][T31457] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3114.956562][T31457] RSP: 002b:00007f88711f6170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3114.956583][T31457] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041935c [ 3114.956596][T31457] RDX: 000000000000000f RSI: 00007f88711f61e0 RDI: 0000000000000003 12:35:34 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x4000, 0x0, 0x2, 0x0, {0x0, 0x8}, {}, {}, {}, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) read$fb(r0, &(0x7f0000000000)=""/234, 0xea) 12:35:34 executing program 2: prctl$PR_SET_KEEPCAPS(0x1c, 0x0) 12:35:34 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000080)=0xc) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1800}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x6135}}], [{@measure}, {@subj_user={'subj_user', 0x3d, '/dev/full\x00'}}, {@audit}, {@subj_type={'subj_type', 0x3d, '/dev/full\x00'}}, {@obj_role={'obj_role', 0x3d, '\\:['}}]}}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2051) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000140)={0x834d896ea3b9bb35, 0xffffffffffffffda, r3, {0x20000001, 0x0, 0x9, 0xfff}}, 0x20) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000280)={0x6, 0x2, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 12:35:34 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xc010000, 0x0, &(0x7f0000000000)) 12:35:34 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x2, 0x0, &(0x7f0000000000)) [ 3114.956608][T31457] RBP: 00007f88711f61d0 R08: 0000000000000000 R09: 0000000000000000 [ 3114.956620][T31457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3114.956632][T31457] R13: 00007fff84a797df R14: 00007f88711f6300 R15: 0000000000022000 [ 3114.956722][ C1] vkms_vblank_simulate: vblank timer overrun [ 3115.108548][ T38] audit: type=1326 audit(1621341334.145:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31466 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:34 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd000000, 0x0, &(0x7f0000000000)) 12:35:34 executing program 2: prctl$PR_SET_KEEPCAPS(0x1c, 0x0) 12:35:34 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) 12:35:34 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x4, 0x0, &(0x7f0000000000)) 12:35:34 executing program 5: ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000100)={0x4e21, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) prctl$PR_SET_KEEPCAPS(0x8, 0x8000000000001) 12:35:34 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x808200, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0xa0, 0x360, 0x30, 0x400, 0x9, 0x6, 0x20, 0x1, {0x401, 0x2, 0x1}, {0x1000, 0x7078107}, {0x40, 0x24}, {0x4, 0x6, 0x1}, 0x3, 0x1, 0x8001, 0x6, 0x1, 0x4, 0x7, 0x2, 0x800, 0x20, 0x80000000, 0xffffffff, 0x0, 0x0, 0xb8f033a465127b6c, 0xb}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x4040, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x4) 12:35:34 executing program 2: prctl$PR_SET_KEEPCAPS(0x1c, 0x0) 12:35:34 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xd010000, 0x0, &(0x7f0000000000)) 12:35:35 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x10, &(0x7f0000000000)) [ 3116.026202][ T38] audit: type=1326 audit(1621341335.065:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31503 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:35 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe000000, 0x0, &(0x7f0000000000)) 12:35:35 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x4, 0x0, &(0x7f0000000000)) 12:35:35 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) r0 = socket$bt_hidp(0x1f, 0x3, 0x6) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000100)=""/202, 0xca}], 0x2, &(0x7f0000000240)=""/111, 0x6f}, 0xffff}], 0x1, 0x60, &(0x7f0000000300)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000003c0)={0x8, 0xc, 0x4, 0x0, 0x5, {0x77359400}, {0x4, 0x0, 0x5, 0x8, 0xae, 0x21, "3d9d4a77"}, 0x8, 0x3, @planes=&(0x7f0000000380)={0x9, 0x8, @mem_offset=0xe1, 0x9}, 0x9}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) 12:35:35 executing program 0: setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=0x6, 0x4) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000001c0)={0x280, 0x384, 0xa0, 0x400, 0x2, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {}, {0x7}, 0x0, 0x1, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x75, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000180)={0x9, 0x6, &(0x7f0000000040)=[0x5, 0x8, 0x26, 0x6, 0x5, 0x1ff], &(0x7f0000000080)=[0x7, 0x1ff], &(0x7f00000000c0), &(0x7f0000000140)}) 12:35:35 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xe010000, 0x0, &(0x7f0000000000)) [ 3116.852202][ T38] audit: type=1326 audit(1621341335.895:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31503 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:35 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) socketpair(0x1a, 0x3, 0x2, &(0x7f0000000000)) 12:35:35 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x4, 0x0, &(0x7f0000000000)) 12:35:35 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x1f00, &(0x7f0000000000)) 12:35:35 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000009) 12:35:35 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x10, 0x10, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, {0x401, 0x8}, {}, {0x40000}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x288000, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0xff, 0x2) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000001500)=ANY=[@ANYBLOB="c50900000010000088ff2e933e995055424e00d368b773b7d5bb4e438b4ca744b6586b631279baa6a76f56da36a32a933ce3e6776129bad7a2cb566265d2f3d55cf0b4652e079a4b8aefaf1e9c509d3b2da3b6c727c6840af3b31d9e5c3504b2991aaca8fc030ae35a2f71bf04327aa2bb1d720694afd885187f4f6648cc2e523a023f3a752135a95be36d7f95ed572f28f660c3cee262940cc8ccf6e06069d11bf747b94a909643c043b17758dbbefb0c917f75f79be39f36705dc69f7bb3c6ca2a14deb9ea7a422e23a333123314c2f084992bb05f5b02fe70bf25cbbaa81877d98c2c6d65938ac280518c7f4ebb97e9ca701e25a45f22a69d2812f6335882d46d7bdcd517fb756427a76f178109fc9198fafef5452620685805c3373a10f3b50f58e2f3c5b86d35c1fc673647c634cb6518b3ef941209aa6ab8158c2a5a8097a386a929b9bb27045fc1131cff546977e47d03bd5787f8a5d6368fa3eeb2f7939852523acd6e1a6d1a976fb22054d308906b8d619fd288f6b4fdaf3ffec7b2d89945557b7d0feb2596d4bc418202ea886c678b5c824780ab82c8824b88d59efabfd5114fe77205ac12685af7811763619d7f1bba6d75ada7d288eac43bd41af781d533d18588ec14362f8a3d5b9db45bebda9a1cb53990b20db363825475f632a7599e56fc0f25f82ca7112aed4eb7c602da2a17e708b0e7b4a5f404a1b16e8b7ec473f379f9aafdc2a2769aa0f41ff4930daa6be31282204fd3de2c8b7a54624f928ee6fda8694a4cc6f64c49daed6253283b6a1e1fd4b1795be67e3c5217b3f7baf02314949119421f615668da0a6c8888bf2862d0763869c0b5458caad45c607612079f7b10f7d36a7528f443f445936cbb09ae8444d6bc5d22bb59640a2b73f47e071c457af84d8e345269920496be10a77e3555b2b67cf93a8e34575fdb3cd29692f7ced1705ba065d2e9c40242b187fcd8d4f266b8c9b0c58ffb33b07d0d457c1ec550d0dc18918c1c3fde903869876ae3aa0ba06c649d77566baed7b79a2550bc525f9473208c4950d9839eed926a2881b9901ceec422887294be69ae0ebb24bbae2ac8f4982bfdd0c39cbd000af3bc0ed7192f1a5b8941f24d66bf490972c795e62641a5c483e612414d6ad9fb7b43ee4100a7d90a7191b0f46251c6ef7f96a1fda8e2550305da3539d43ce12315df9583363b2e42551694afebaf77e7655ed623d7349ddfd8d7364e893c6c575e6c582ebfe469fc97a1af38e7f8039d765f80c11bba05d2249369818e30704427e3121925f0e4b1621a5facea29a71d683a613a5d5911788f1639e39ecf4458408fed1aef73a8a7ea445384e0589b9504c2c946ee5f804f3863e5e3cf3b41e99ba71bf14e4784dac7d08be4f2b6297ebf03e8f39631374020dff9595636441f2682d304d20a173ba2d8d226787e5dc3a4ba10f4be3d2e561e19098af81f062e297692305cd19b7d82ef39a4de943fd53ec54196c32d6649e5c69d8f02c2aa24a48f7dce76d94e5927053a87388011329ad240fe67f8d3801c9c7ffeac2953a01a977daaae8f96fbf80a7ce6a85fbaa69708598e2d34fed0b9efb689cfe0438492d042e8a5f88371be0563b0a2eb8bfee6446a01970a302ff3e3eb8a254a4c2cd9e17ea096cd3461b9a2d0bc9841272a354af7a7ab3f320412b9833ab656b230dc909d31b095c3d22ed5a3e4b7fa2fba6b472f682ae747121c1238967926ec08500d714e8bc41cdd71f4bd49eefbaf3567a2c3616b4694130f1a3a1ee888753a253e393da54dae307bae1450b8317317b5b87aa1d64365b7a075c29729ba2fe5c07c8e025b7706df1cae153c3a752d4caa473ce30139ea2c0a9f2f183416fec640216f4d37309104c13c324c67b95dd07560e1dc63eaf9dba278debd2526137c5a1b5a370fc5d545a873a328c2f9c8cd19a3a86aae62a5e072be478f8712ab3d1d4818e9b54c27b669294bbd0757d046b11a7ce60742d4866aa97014a2c1a3d84edcec3accc27ade2683ecd03a3ceedca4f97a653d09cace2ee3da81881ba7696fe92e3e178fb2b475664d759ca964242c2023528d27c476ef4d93e4deb4cc4b208f7dc46268d1cf8d0990974071db754b7a5f40d7187abce95150f7f72e6ec7244890a5de7486789797b7c53e46b591b21ffc8ab3a6a2d26b157eea50fcf4faa2efc54f34a789c37c61dbc63f430192e4787b5ec9f3c6388a2a8514b1fc958321ce5e94beca2814067f6e70b1e3ba968983abd983534865b3e67b269cb3759e563c83e9b7366a104a0e49acdc101218295d6e8961865806a1790e20abb1336dabade27ea873a43ca49f2491754eb03b3fdff33d8d44c9f62d4277a4e40c91587e322cae81d982d2ee637df1303e40a184772f8d546340248db619e8c944b8d48404b321fc456359fb62e1aa3a77d230384f2db3d0e7d19a5a6de9bf34a10d14c717ac2238d291c60efa7ec3d7c1a056716adca99d43e671665a3ef250e241980e8da18975211021682884550ab1b2a87e7afac0826f11b8282c5a89f313ea9948ad4eb7f5fbd60bfd525c910762348b73c9dbcda04118d84e407db93834004b80e028b1c56cb728a4d0bf9923cb36b36ba94498bafc0466b9532d9eeb60f70b4ebaf6c38e3bcee93bf64c32c711750cc8116c69a933c46c6bc11528c88b254f539e8bbb34a8c23b07db633a2a4ae14ba2c1aca9becae3f173d4312852b181fda2f93cc3b2ee25a65a183b52475deb4f7ea445a8089d6453ed432173fabf6f7e09dfaf3f532aa9e89730dfdce19111d2782d6f6183a226d51743f169bde6b5ef795139e2fff89e3ac4a62af01604e7bf2f43feb3640c59fc6f7f0e20847a99ef325da4a86c18220df4532b782e3ebee69189f2de9340f03e0442aa0c71b11a2192acb911503424861e76a2f633583716ba6cffdcdeba71c65991363a45d3ae551af18d3e367111a5e2dfd7be2a14aa4bc5e020ffca3f28a079f5c8b7c792925afbfb4f230d40749bfd70196be5a0f1a92b4b44a96a310e38feb9e19c2fbb0b18fc8d61a01033f740ce4787546cca1d0ac7cffd54affae14d658def1536bfcd021a00566a73e7dee970e144e30c0d470a804ed2bf17fa53d98cd53ed806bdfc418b028efcde73adae6136f0fd830dd899dc786810c5ab304b62a6508a8e14ffbd805bab17d527deca753cd466b86d21f4cf6c8ec726c9efcc7d3c4a0ffda85d66f15bf17f8de7df475fec703f5fc51c1e6662ebf90cac3dafc40e3bf5bce71343ea44aaee24f699eba1e6ece58443e15271bf5f8af921cf7ff40835d697406dff2d678f38af70807fc0d7540efce62a1fbff69a2b821ce2770020d128a06cacb8d867699521da6190c9fd4bd2687a3b10d5f6bcd1921ff99cc858f90d7fcf3a3a577a033aa4403d0b8a5b4be8ff64467fe2d85a01e1290c45814c00c0896c159eeaf080c3c06622861e252612e06d7339ac5e991066784d983d9e7f3043031896c5761161fbe5e48ed0d90805e97ccac453f86b3730a2e01870765fb889a95c2c3768339cb988e63826c6e07ad46f60a17f2c0469e2b919519ea6652718396ac3ee0b3041b64c6f4ae4b98f926de8f7db0a3604fa1cf13acc8b81606bffcf4425fd16a23e23b695d5dfa3ea1d86ceb98b7059a62e904accb02e934faacb39335aa3aba25f83975c93251ff94cdb7f009c422c1af444096cf0fecff7d88996d55d7d639f0644a42ad7cb2c98ff665f523d42cb45fdd5111966d2740abc83829ccdbc8f070c06b6a517136a4f2d65b6e5f5a75656e1f51606969cc19590bbadb9607170169072f3cfee24590a2bd433b8db7e0bf04a03e9079c7be6dceea473c86f35fb81a651db134b09560965d135ad43e20a207b930a1ee348b17537c1f595c651b4987c6b27e3ae5ff8cbcb83a6b423fb35bde2979bd54cc515db173aa2717aa2d5977851c0a28a32e38971346044eb12c0cb473c0925fc1f2391954f692a83de9833e26ecaa09b037c7fe478d768219d652768ea5401f77b302d7832868b39e61b717c566f1441ed03fa0718ec2e02c73272c9297263dad0702ff6f438e5f1f834aba8db2450ccdd6f0e569ea5b43cbf685dabb38154eee5062155e779a23c82edba6af46efdbb4cbf598eff65d50e8d1c19002ed5369a1f4941e66dd2b6135c368e06517696c66df1d09177e6cd78570b9b98ad556bd00ff681ab9780eb9142e8a01224657ad199c6b94569e0849e66f2cd14c54a78dba3036388340c6f04bde545c5bcd015a83e9399759b0775779eacb57aa5776d64fb60b8543898459f147bf97e49b921f472ec28bc85aedc1dd93be6fdf09e59e028b214cc744df609622422c72c2098f5d627287a12192d7d7b49d063854ee310126234088dd404a089d102e1f0d08d28be5caa01e792270a66eb85533570c0b3e8522b124183b01c0df773291598bc48935f029cdfec14ef28fc2ec89916f1dc4d3ddb0d25e2cab15262a7806148573491d023a823a0051396281c4bb5c01f2c4e9c6a24c732c078b9307b9c988b695bb919951c656d6ff840772bd30fbe66949564c959274c434adcf612e03cd72c36fca7f6e80ae9be2e5c88e676233ecb4d45a4823cc705ae412d6dffd3cb6b628b46f230c93f1a02165b14c73adbc266b26ad42455225468e6e7b43d276d746692be058b8d87f074c4aa04c5fc6851569dda4edbcd304d1e11195be137d804ea62363218e5012290d914829fb5d14a04e1a74b5fe970a7e07e3114c53b8b68fd4308de2db7af42f8ffd546b4997cc61d523e9973e5a4580ccae0fd64d614d8faf39671c35f73856ec2ddd93eaf333b95dc6b24f55205096ff2885bdf9c923ab2f458cc2154e58e0368177aca91d56340d264bf48562eaedaeb2e08a572bac9020c2f48a48211f53487aa2cf9a40ffc6539cbe90f89554b5f682cec1f06f8608a4304a4bb67fedc8903b239a2c66191c6113c1efcdd61ad26401c17f2dae521f9180d9e3282a29c133b5d466e2ea9010582d487d99e9bf52e5e4dea1b19b07189d4a33a659b3befcdbff1834dea7cd94475883fb1220d7382b6ac4b17ea61e2000063939344adb4eb8404e66fa68250df8e6599ba4df271264ebe59485c86e7f3427540c1faf1e51f7e2ae68e6ab2f9cdf8a3c1326650f4e10d7acec5fe539eba8f3f6756f8938076e605c6fb55756db823a6aa3e38ac6a8fd0e7ffa16bd0cb316b04949f076b3287eb3c58bf64eb754bc4578dd5af29e92e8c391a5bba61628cfe2f0fc130e856b940d7b45cdae37b7dea5f5a5be505c112427e1e550e3dcc44f899cd85ef766a3b87645bb4b91cea3dd881e0b2e14ac98ddc655aba040eb9c558e160c7207d66c1bd683862a79b054d48b577c3fab46215cd6bd9e307b9135cbf9b6aa33f0b0bed6ed678be2bd717061f396d948de87f3aa9b604638ac2a80f411c7e28bc0ccba2df3f93c13a292d306894e6d05b495bf519f203ba3b11e5dc25819663fa68f48882638693241eed9a5e169996e34f59cb0633670efcdf188b8bfe2f4eba56c4b98c123fcb2d4faa3b95de1a348646b1928f41e7fed4595fd0ee55bf90405b3d43a35386b573b6d4add8b7637d0faf4bb0b8ff01934bcde8b854a2854584f222e904d3eeb3d8817fb5ca98a2f46588f520993d3b8a70b3de6f135c23bacf6b7384ef1cbdcd884ad3a8b01d8e1f8af8e55dc3e244f747f4cfdf96a4a334986f4d32a5562feb90674f8c29172ab6f5ce5752f0c50dab1c719e117d9159f953d66c7e9f4496a8c13d997c35d2d31c19bd8a80528bd5248d14cbaf525c2ed97b66d7292a2c0f729a9f28725fe23b32369675b18e812439ed3588100c82b1818b02fc9be33b5aaa172219785e6ef5cecadb9f8e6c46449ae15c15d5eb9679d32f63d299ec07763c0ef531ee9b87e5ffdb265f389000de6b0115be9a5b6739fa446cefbd299d547b3f968bbc7fd1991ca2a8e2bd3f9336237a535d829dda6bbfb2ea4df2f44ebb38d85a9f4c879829a421e88e98ee8971d8ed3fff96022c68de4f74bcbe4817e6f62d9b6a63c6f2d8750faf9ca1c93adceb75d61f5cf74de8479d5dd97fe0e09cad2739daf02bf074f658d909aca96bfab4cac01ed50e2a032d4367eb769ad7041b509a400add05294e2aa9775b9cc7faab2d0a1e00"/4387]) 12:35:35 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf000000, 0x0, &(0x7f0000000000)) 12:35:36 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x4, 0x0, &(0x7f0000000000)) 12:35:36 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0xf010000, 0x0, &(0x7f0000000000)) 12:35:36 executing program 5: r0 = getpid() ptrace$getenv(0x4201, r0, 0x0, &(0x7f0000000000)) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) 12:35:36 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x2000, &(0x7f0000000000)) 12:35:36 executing program 0: bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x37d2}, 0x8) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000001c0), 0x840, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000240)) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x3, 0x4) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x2f, 0x81, 0x40, 0x1, 0x24, @mcast2, @private1, 0x7f08, 0x8000, 0x4ba4ff98, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x81, 0x1, 0x9, 0x15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x31, 0x20, 0xa, 0xed}}) ioctl$FBIOPUT_CON2FBMAP(r2, 0x4610, &(0x7f0000000080)={0xe}) [ 3117.032284][ T38] audit: type=1326 audit(1621341336.075:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31533 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:36 executing program 5: bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000340), 0x14) getgid() prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)) syz_io_uring_setup(0x5b7e, &(0x7f0000000000)={0x0, 0xa115, 0x2, 0x0, 0x1f9}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000240)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000100), &(0x7f0000000200)='./file0\x00', 0x20, 0x100, 0x1}, 0x80) [ 3117.843959][ T38] audit: type=1326 audit(1621341336.885:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31533 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:36 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x2) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 12:35:36 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x10000000, 0x0, &(0x7f0000000000)) 12:35:36 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x200000, &(0x7f0000000000)) 12:35:36 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x430801, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) ioctl$SNAPSHOT_ATOMIC_RESTORE(0xffffffffffffffff, 0x3304) openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x24840, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x140, 0x0, 0x0, 0x3, 0x8, 0x1, {0x0, 0x8}, {}, {0xfffffffd, 0x7ff, 0xfffffffd}, {0x3, 0x0, 0x10000}, 0x2, 0x0, 0xb, 0x0, 0x0, 0x7f, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3, 0x2}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x4201, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) 12:35:36 executing program 2: seccomp$SECCOMP_GET_NOTIF_SIZES(0x4, 0x0, &(0x7f0000000000)) 12:35:36 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 12:35:37 executing program 2: seccomp$SECCOMP_GET_NOTIF_SIZES(0x4, 0x0, 0x0) 12:35:37 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x1000000, &(0x7f0000000000)) 12:35:37 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x10010000, 0x0, &(0x7f0000000000)) 12:35:37 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x1) [ 3118.021099][ T38] audit: type=1326 audit(1621341337.055:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31566 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:37 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2a8042, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x101082, 0x0) write$fb(r2, &(0x7f0000000140)="a72583e7221de39d92b677e95091d31aa063da5ded46c5033803b8bfad267edbe788a26403aef3d7fa5987a5ef4712ef282eae3031861d1c4abd946201f8970ee1d0361df89ca44f564898ec3b12a66ad53ece3343ed43f085d631ee3fa7a95e6998b3179af3bc8d7c39d330e08e77b863af784715cc097ef1481b9429e3829e172326cb987bdfc454476cdff33a5b5ae91de03a64347cb57c9d77b24a92cbd6d3340bbab5162f64eac47f5b", 0xac) 12:35:37 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x102) [ 3118.835579][ T38] audit: type=1326 audit(1621341337.875:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31566 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:37 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 12:35:37 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x10, &(0x7f0000000000)) 12:35:37 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x11000000, 0x0, &(0x7f0000000000)) 12:35:37 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000000)={0xb}) 12:35:37 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x10000000, &(0x7f0000000000)) 12:35:37 executing program 5: epoll_create(0x6ca46170) 12:35:38 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x11010000, 0x0, &(0x7f0000000000)) 12:35:38 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x10, &(0x7f0000000000)) 12:35:38 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x1f000000, &(0x7f0000000000)) 12:35:38 executing program 5: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) [ 3119.035099][ T38] audit: type=1326 audit(1621341338.075:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31595 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:38 executing program 0: pselect6(0x40, &(0x7f0000000040)={0x1, 0x8, 0x27c4, 0x9, 0x82, 0x9, 0x5, 0x9}, &(0x7f0000000080)={0x42014248, 0x200, 0x4, 0x6, 0x2a40, 0xcb3, 0x4, 0x7}, &(0x7f00000000c0)={0x6, 0x1, 0x4c0a, 0x10001, 0xec6e, 0x200, 0x6, 0x401}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0xd87]}, 0x8}) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:38 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x10, &(0x7f0000000000)) [ 3119.859561][ T38] audit: type=1326 audit(1621341338.895:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31595 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:38 executing program 4: prctl$PR_MCE_KILL(0x16, 0x0, 0x0) 12:35:38 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x12000000, 0x0, &(0x7f0000000000)) 12:35:38 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x20000000000000, &(0x7f0000000000)) 12:35:38 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000002180)={0x2020}, 0x2020) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) 12:35:38 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) fcntl$getown(r1, 0x9) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x320, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x8, 0x400000}, {0x0, 0x3}, {}, {}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4}) syz_open_dev$mouse(&(0x7f0000000040), 0x4, 0x8002) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000000)) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) syz_io_uring_setup(0x56c5, &(0x7f0000000240)={0x0, 0xe50b, 0x1, 0x0, 0x18, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000002c0)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000480)={0x0, 0x989680}}, 0x10000) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r7, 0x89f7, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000400)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x2, 0x0, r7, &(0x7f0000000440), r0}, 0x96) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000001c0)={0xffff, 0x1, &(0x7f0000000080)=[0x80], &(0x7f00000000c0)=[0x8001, 0xd1, 0x6, 0x101, 0x5, 0x100], &(0x7f0000000140)=[0x8, 0x41e7, 0x7f, 0xffff, 0x9, 0xac7], &(0x7f0000000180)=[0x3]}) fcntl$getown(r8, 0x9) 12:35:38 executing program 2: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x10, &(0x7f0000000000)) 12:35:39 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x12010000, 0x0, &(0x7f0000000000)) 12:35:39 executing program 2: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x10, 0x0) 12:35:39 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x100000000000000, &(0x7f0000000000)) 12:35:39 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x80000) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x1}, 0xfd}, 0x18) 12:35:39 executing program 5: socketpair(0x18, 0xa, 0x1ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x25, 0xa, 0x80, &(0x7f0000000080)) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14) 12:35:39 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x1, 0x2, 0x48, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, @mcast2, 0x8000, 0x701, 0x401, 0x2}}) [ 3120.140430][ T38] audit: type=1326 audit(1621341339.175:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31629 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:39 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x1000000000000000, &(0x7f0000000000)) 12:35:39 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x13000000, 0x0, &(0x7f0000000000)) 12:35:39 executing program 2: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2a8042, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x101082, 0x0) write$fb(r2, &(0x7f0000000140)="a72583e7221de39d92b677e95091d31aa063da5ded46c5033803b8bfad267edbe788a26403aef3d7fa5987a5ef4712ef282eae3031861d1c4abd946201f8970ee1d0361df89ca44f564898ec3b12a66ad53ece3343ed43f085d631ee3fa7a95e6998b3179af3bc8d7c39d330e08e77b863af784715cc097ef1481b9429e3829e172326cb987bdfc454476cdff33a5b5ae91de03a64347cb57c9d77b24a92cbd6d3340bbab5162f64eac47f5b", 0xac) 12:35:39 executing program 5: prctl$PR_MCE_KILL(0x21, 0x1, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) 12:35:39 executing program 0: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) r1 = shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0xe000) shmdt(r1) shmdt(r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000140)={0x4, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x16, 0xfffb, 0x0, 0x2, 0x2, 0x7, 0x5, 0x1, 0xe], &(0x7f0000000080)=[0x9], &(0x7f00000000c0)=[0x8, 0x401, 0x3ff, 0x6, 0x81]}) 12:35:39 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x1f00000000000000, &(0x7f0000000000)) 12:35:39 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x13010000, 0x0, &(0x7f0000000000)) 12:35:39 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={@any, 0x10000}) 12:35:39 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000080)=0xc) getresuid(&(0x7f0000000340)=0x0, &(0x7f0000000380), &(0x7f00000003c0)) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1800}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x6135}}], [{@measure}, {@subj_user={'subj_user', 0x3d, '/dev/full\x00'}}, {@audit}, {@subj_type={'subj_type', 0x3d, '/dev/full\x00'}}, {@obj_role={'obj_role', 0x3d, '\\:['}}]}}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000040)={0x18}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2051) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000140)={0x834d896ea3b9bb35, 0xffffffffffffffda, r3, {0x20000001, 0x0, 0x9, 0xfff}}, 0x20) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000280)={0x6, 0x2, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 3120.971575][ T38] audit: type=1326 audit(1621341340.015:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31629 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:40 executing program 4: prctl$PR_MCE_KILL(0x16, 0x0, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x20) 12:35:40 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x480, 0x0, 0x0, 0x0, 0x0, {0xffffffff, 0x8}}) 12:35:40 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x8000000000000000, &(0x7f0000000000)) 12:35:40 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x14000000, 0x0, &(0x7f0000000000)) 12:35:40 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x1) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) 12:35:40 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x2, 0x0, &(0x7f0000000000)) 12:35:40 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x2, 0x0, &(0x7f0000000000)) 12:35:40 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 12:35:40 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair(0x0, 0x80000, 0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000140)={@none, 0x9}) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x200, 0x640, 0x556, 0x360, 0x80, 0x80, 0x0, 0x0, {0x9, 0x2, 0x1}, {0x6, 0x8, 0x1}, {0x3ff, 0x8, 0x1}, {0x1000, 0x8000, 0x1}, 0x2, 0x40, 0x2, 0x3, 0x0, 0xfffffffd, 0x1f, 0x3f, 0x7f, 0x6, 0x20, 0x10001, 0x0, 0x4, 0x2, 0x6}) 12:35:40 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x14010000, 0x0, &(0x7f0000000000)) 12:35:40 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0xffffffff00000000, &(0x7f0000000000)) 12:35:40 executing program 4: prctl$PR_MCE_KILL(0x16, 0x1, 0x1) 12:35:40 executing program 2: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x2, 0x0, &(0x7f0000000000)) [ 3121.298095][ T38] audit: type=1326 audit(1621341340.335:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31685 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:40 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x2) 12:35:40 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) fork() r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000080)='1', 0x1) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:40 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x15000000, 0x0, &(0x7f0000000000)) 12:35:40 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000140)={0x80000001, 0x5, &(0x7f0000000000)=[0xff, 0x7, 0x6, 0xabe4, 0x1], &(0x7f0000000040)=[0x401, 0x0, 0x2, 0x4, 0x30, 0x0, 0x31, 0x2], &(0x7f0000000080)=[0x7ff], &(0x7f00000000c0)=[0x7ff, 0xfff8, 0x2, 0x4cca]}) 12:35:40 executing program 2: seccomp$SECCOMP_GET_NOTIF_SIZES(0x2, 0x0, &(0x7f0000000000)) 12:35:40 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000), 0x5, 0x48a880) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000180)={0x1, 0x9, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) prctl$PR_SET_KEEPCAPS(0x8, 0x200000400000001) 12:35:40 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) 12:35:40 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x15010000, 0x0, &(0x7f0000000000)) 12:35:40 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x3}) read$fb(r0, &(0x7f0000000000)=""/233, 0xe9) 12:35:40 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) [ 3122.116912][ T38] audit: type=1326 audit(1621341341.155:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31685 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4665d9 code=0x0 12:35:41 executing program 4: seccomp$SECCOMP_GET_NOTIF_SIZES(0x2, 0x0, &(0x7f0000000000)) 12:35:41 executing program 2: seccomp$SECCOMP_GET_NOTIF_SIZES(0x2, 0x0, 0x0) 12:35:41 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x16000000, 0x0, &(0x7f0000000000)) 12:35:41 executing program 0: ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000)) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000040)) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x10}) 12:35:41 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x0) 12:35:41 executing program 3: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) 12:35:41 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x16010000, 0x0, &(0x7f0000000000)) 12:35:41 executing program 2: seccomp$SECCOMP_GET_NOTIF_SIZES(0x2, 0x0, 0x0) 12:35:41 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000000)=0xfffffc13) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 12:35:41 executing program 4: seccomp$SECCOMP_GET_NOTIF_SIZES(0x2, 0x0, &(0x7f0000000000)) 12:35:41 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x80000000, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r0, 0x4) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:41 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x800, 0xa0000) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000040)={0x81, 0x6a, "84dc7f9bfdc20acea256e64ffb19cef39a56c228b95bedc5f86299a4d51e0a5168cf06b297080f230f4686bdf82a711dd6d8ed25f360385e7bf5f54e52b4c82d16dea5600fdbb4cec8c78effd6fbee2ec48af4dd0b57e8dbc84e570c00e8a1e854579d017e7a52bdbbbc"}) 12:35:41 executing program 4: seccomp$SECCOMP_GET_NOTIF_SIZES(0x2, 0x0, &(0x7f0000000000)) 12:35:41 executing program 2: seccomp$SECCOMP_GET_NOTIF_SIZES(0x2, 0x0, 0x0) 12:35:41 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x17000000, 0x0, &(0x7f0000000000)) 12:35:41 executing program 0: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000000)) 12:35:41 executing program 3: clock_gettime(0x1, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:41 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) r3 = fork() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r3, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000400)={0x1, 0x1, 0x2, 0x3, &(0x7f00000001c0)=[{}]}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000000040)={@any, 0x1, 0x3, 0x9}) ioprio_get$pid(0x3, r3) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, 0x0) read$snapshot(r5, &(0x7f0000000380)=""/66, 0x42) 12:35:41 executing program 4: seccomp$SECCOMP_GET_NOTIF_SIZES(0x2, 0x0, 0x0) 12:35:41 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x17010000, 0x0, &(0x7f0000000000)) 12:35:41 executing program 2: ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000)) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000040)) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x10}) 12:35:41 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz1\x00') r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:41 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000180), &(0x7f0000000200)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000240)) setresuid(0x0, r0, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) setresuid(0x0, r2, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r0, r2, r3) 12:35:41 executing program 4: seccomp$SECCOMP_GET_NOTIF_SIZES(0x2, 0x0, 0x0) 12:35:41 executing program 2: prctl$PR_SET_KEEPCAPS(0x18, 0x400000001) 12:35:41 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x18000000, 0x0, &(0x7f0000000000)) 12:35:41 executing program 0: ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000000)=0x401) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020) 12:35:41 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0xc0100, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000140)=0x3f) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000440), 0x4, 0x339c00) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000180)=0x11) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) r2 = socket(0xf, 0x2, 0x5) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x4, 0x4, 0x12, 0x3, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x703, 0x20, 0x9, 0x9fff}}) connect$802154_dgram(r2, &(0x7f0000000500)={0x24, @long={0x3, 0x3}}, 0x14) bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r3, 0x3, {0x1, 0x1, 0x1}}, 0x18) socketpair(0x1e, 0x5, 0xb1, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f00000004c0)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1, 0xf4ae, 0x8}) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r1, 0x5386, &(0x7f00000001c0)) r5 = syz_open_dev$mouse(&(0x7f0000000280), 0x8, 0x2000) sendmsg$802154_raw(r5, &(0x7f0000000400)={&(0x7f00000002c0)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14, &(0x7f00000003c0)={&(0x7f0000000300)="0b867393abad651ef9430c68596b6f1f6023ec6704c42f49078faf3225187e0c669028e1b26408dbf573eca9fd2cdffd06217647176b39f5826b4f386651d4dcb4a89a8f9219da5bdaa3bad418ad4be8f0df3c9d58efd489256f69ba7c39e4df78fe0954a922bfd7b571958218f409208ff13d338fd6330444f3153430b68f732bb74586f19a25a22b8a8a6685b4fdf61853b369dd5db2e9eb3865b30ee157ea13043ca11f273a0a", 0xa8}, 0x1, 0x0, 0x0, 0x20000090}, 0x8000) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000240)=0x6c8, 0x4) 12:35:41 executing program 3: getrusage(0x1, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x3, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r0}, 0x4) 12:35:42 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x18010000, 0x0, &(0x7f0000000000)) 12:35:42 executing program 4: seccomp$SECCOMP_GET_NOTIF_SIZES(0x2, 0x0, 0x0) 12:35:42 executing program 2: prctl$PR_SET_KEEPCAPS(0x18, 0x400000001) 12:35:42 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8a3c0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, r1, 0x1d}, 0x10) 12:35:42 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0xffffffffffffffff) 12:35:42 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) 12:35:42 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x19000000, 0x0, &(0x7f0000000000)) 12:35:42 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) r3 = fork() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r3, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000400)={0x1, 0x1, 0x2, 0x3, &(0x7f00000001c0)=[{}]}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000000040)={@any, 0x1, 0x3, 0x9}) ioprio_get$pid(0x3, r3) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, 0x0) read$snapshot(r5, &(0x7f0000000380)=""/66, 0x42) 12:35:42 executing program 2: prctl$PR_SET_KEEPCAPS(0x18, 0x400000001) 12:35:42 executing program 5: ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000000)) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000040)=0x20) 12:35:42 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x3, 0x3, 0x4, 0x40, 0xff, {}, {0x4, 0x1, 0xfb, 0x98, 0x7, 0x0, "8ef12da0"}, 0x5c2d8ba2, 0x1, @userptr=0x1, 0x94}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x10483, 0x0) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) 12:35:42 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x19010000, 0x0, &(0x7f0000000000)) 12:35:42 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0xfff, 0x1, 0x4, 0x400, 0x6, {r0, r1/1000+60000}, {0x5, 0x0, 0x1, 0x81, 0x5, 0x30, "81bfbc26"}, 0x0, 0x1, @offset=0x7, 0x2, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 12:35:42 executing program 2: prctl$PR_SET_KEEPCAPS(0x18, 0x0) 12:35:42 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x8a0c0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) 12:35:42 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) r3 = fork() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r3, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000400)={0x1, 0x1, 0x2, 0x3, &(0x7f00000001c0)=[{}]}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000000040)={@any, 0x1, 0x3, 0x9}) ioprio_get$pid(0x3, r3) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, 0x0) read$snapshot(r5, &(0x7f0000000380)=""/66, 0x42) 12:35:42 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x1a000000, 0x0, &(0x7f0000000000)) 12:35:42 executing program 0: syz_io_uring_setup(0x7c97, &(0x7f0000000000)={0x0, 0x8145, 0x20, 0x0, 0x100}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:42 executing program 2: prctl$PR_SET_KEEPCAPS(0x18, 0x0) 12:35:42 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000040)=0x2) 12:35:42 executing program 0: ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x8, 0x7, 0x4, 0xe000, 0x7fff, {}, {0x1, 0x1, 0x47, 0x20, 0x0, 0xf9, "0fa5c7fc"}, 0x0, 0x0, @planes=&(0x7f0000000040)={0x24, 0x800, @userptr, 0x9}, 0x401, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)={0xfffffc01, 0x9, 0x4, 0x10000, 0x1, {0x77359400}, {0x3, 0x0, 0x5, 0xfe, 0x7, 0x0, "64f5c796"}, 0x0, 0x4, @fd, 0x1b, 0x0, r0}) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x480080, 0x0) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x9, 0x101000) write$fb(r2, &(0x7f0000000200)="f5fc2955a84a0d6407ca3eef4b223e0c603b4343b9ba8ed2462b7ca113d38a5d36165901822407269c2a057f77d8415c94d8f7080f0780ca37a12747948a4f46de71052cc4b48dcc4b17092f9575a7a8a7b950242a21f176e605cfe1875b15ad5199443199db1821b6b9f6851b139ab7d7fb1499c9e86f239f329cc3e84f7c3a51c166fed489bdf6260c72e5c0299531af89217ac12533e7882dea15988519d9c5328fd5161ceaf0ff52b693ed033395ba78a1d103bdb82f8335c76736d582feffa8c1389d526d145dc8d7915ed13de43706d5d16b06366be375f7421ecc60ba", 0xe0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) syz_io_uring_setup(0x1e56, &(0x7f00000003c0)={0x0, 0x3b4e, 0x2, 0x2, 0x2b7, 0x0, r2}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000540)=@IORING_OP_WRITE={0x17, 0x1, 0x4000, @fd_index=0x8, 0x6, &(0x7f00000004c0)="d6489a602bc970681a9fd11d980dd794dc5b8c25c809c248acb0b099cc2ec70ea252159d81bf5e1b8a12d368b842e365eff69e01c16ea7be43615a0c17696ca884d841b307965132e838b8a1f0b71a19ada5a55ec4f14f0717a47246d5b7f6ceeb8b376752e00241", 0x68, 0x1}, 0x6) 12:35:42 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x1a010000, 0x0, &(0x7f0000000000)) 12:35:42 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x800000001) socket$inet6_udp(0xa, 0x2, 0x0) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000040)) r0 = accept4$rose(0xffffffffffffffff, &(0x7f00000000c0)=@short={0xb, @remote, @default, 0x1, @default}, &(0x7f0000000000)=0xffffff1b, 0x180800) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) recvmmsg(r1, &(0x7f0000001940)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000280)=""/239, 0xef}, {&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/13, 0xd}, {&(0x7f0000000440)=""/211, 0xd3}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000001540)=""/44, 0x2c}], 0x9, &(0x7f0000001640)=""/90, 0x5a}, 0x105}, {{0x0, 0x0, &(0x7f0000001880), 0x0, &(0x7f00000018c0)=""/94, 0x5e}, 0x10001}], 0x2, 0x2000, 0x0) lstat(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000580)={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x10) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000001a80), 0x200041, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000001ac0)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 12:35:42 executing program 2: prctl$PR_SET_KEEPCAPS(0x18, 0x0) 12:35:42 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000080), 0x4) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) epoll_create(0x4) 12:35:42 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) r3 = fork() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r3, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000400)={0x1, 0x1, 0x2, 0x3, &(0x7f00000001c0)=[{}]}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000000040)={@any, 0x1, 0x3, 0x9}) ioprio_get$pid(0x3, r3) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, 0x0) read$snapshot(r5, &(0x7f0000000380)=""/66, 0x42) 12:35:42 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000040)={0x20, 0xf0, 0x10, 0x80, 0x7fff, 0x2, 0x4, 0x1, {0x5, 0xfffffffe}, {0xffffffff, 0x1}, {0x2, 0x5, 0x1}, {0x5b0, 0x3, 0x1}, 0x1, 0x80, 0x1, 0x7, 0x0, 0x0, 0x101, 0xfffffffc, 0x7fffffff, 0xfffff27d, 0xb, 0x1, 0x22, 0x1, 0x1, 0xc}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:42 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x1b000000, 0x0, &(0x7f0000000000)) 12:35:42 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) ptrace$getenv(0x4201, 0x0, 0x7fffffff000000, &(0x7f0000000000)) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 12:35:43 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:35:43 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x1b010000, 0x0, &(0x7f0000000000)) 12:35:43 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x600, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000001c0)={0x800, 0x40, 0xe4e, 0x1e0, 0x7, 0x3, 0x2, 0x1, {0xffff3de8, 0x6eba6005, 0x1}, {0x400, 0x9, 0x1}, {0x8, 0x4e, 0x1}, {0x9, 0x1ff}, 0x3, 0x1, 0x1000, 0x2, 0x0, 0x9, 0xdc, 0x8, 0x81, 0x4, 0x0, 0x9, 0x28, 0x200}) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x300, 0x240, 0xf00, 0x280, 0x0, 0x1, 0x4, 0x2, {0xf5, 0x5, 0x1}, {0x1d, 0x1, 0x1}, {0x101, 0x3ff}, {0x76, 0x54f}, 0x1, 0x80, 0xfffffffc, 0xdf, 0x1, 0x6, 0x1, 0x1f, 0x6d8, 0x5, 0x100, 0x3812, 0x25, 0x4, 0x1, 0x1}) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:43 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=0xffffffffffffffff, 0x4) 12:35:43 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) r3 = fork() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r3, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000400)={0x1, 0x1, 0x2, 0x3, &(0x7f00000001c0)=[{}]}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000000040)={@any, 0x1, 0x3, 0x9}) ioprio_get$pid(0x3, r3) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, 0x0) 12:35:43 executing program 5: getrusage(0xffffffffffffffff, &(0x7f0000000000)) prctl$PR_SET_KEEPCAPS(0x8, 0x3) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 12:35:43 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:35:43 executing program 0: getrusage(0xffffffffffffffff, &(0x7f0000000000)) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x1110c3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f00000003c0)={0x9, 0x3, 0x4, 0x400, 0x0, {r2, r3/1000+10000}, {0x3, 0x0, 0x7f, 0x72, 0x3, 0x8, "bc8ea958"}, 0x2, 0x3, @planes=&(0x7f00000002c0)={0x6, 0x3f, @mem_offset=0x7, 0x67a}, 0xf4d3, 0x0, r1}) fcntl$getown(r4, 0x9) syz_open_dev$sg(&(0x7f0000000240), 0x5, 0x101000) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000200)={0x10001, 0x0, &(0x7f0000000440), &(0x7f0000000140), &(0x7f00000001c0)=[0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 12:35:43 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x1c000000, 0x0, &(0x7f0000000000)) 12:35:43 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) prctl$PR_GET_SECCOMP(0x15) 12:35:43 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) r3 = fork() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r3, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000400)={0x1, 0x1, 0x2, 0x3, &(0x7f00000001c0)=[{}]}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000000040)={@any, 0x1, 0x3, 0x9}) ioprio_get$pid(0x3, r3) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) 12:35:43 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) socketpair(0x28, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x4, 0x4) 12:35:43 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:35:43 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x1c010000, 0x0, &(0x7f0000000000)) 12:35:43 executing program 0: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:43 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) 12:35:43 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) 12:35:43 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x0) 12:35:43 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) r3 = fork() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r3, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000400)={0x1, 0x1, 0x2, 0x3, &(0x7f00000001c0)=[{}]}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000000040)={@any, 0x1, 0x3, 0x9}) ioprio_get$pid(0x3, r3) 12:35:43 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x1d000000, 0x0, &(0x7f0000000000)) 12:35:43 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x800, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x1, {0x0, 0x8}, {}, {}, {0x0, 0x7fe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) 12:35:43 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) fork() 12:35:43 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x1d010000, 0x0, &(0x7f0000000000)) 12:35:43 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x1) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x240101, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x33, 0x286, 0x101, "9113f121fde5ea1f2287209e01c9c4d7da73e6e363bcf791f03c3db07f6572ff48bf8988468fcef10c3a7f92d3a637ec6748f2"}) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 12:35:43 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x0) 12:35:43 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) r3 = fork() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r3, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000400)={0x1, 0x1, 0x2, 0x3, &(0x7f00000001c0)=[{}]}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r4, 0x800443d3, &(0x7f0000000040)={@any, 0x1, 0x3, 0x9}) 12:35:43 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, {0x7, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000280)={0x8b2, 0x2, &(0x7f0000000180)=[0x8000, 0x0], &(0x7f00000001c0)=[0xfffa, 0x8001], &(0x7f0000000200)=[0x20, 0x7, 0x800, 0x5], &(0x7f0000000240)=[0xc3c1, 0x0, 0x4, 0x9, 0x0]}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000140)={0x10001, 0x8, &(0x7f0000000040)=[0x6, 0x8, 0x9, 0x7, 0x3, 0x6, 0x3ff, 0x3], &(0x7f0000000080)=[0xac, 0x8, 0x1f, 0x5, 0x8, 0x0, 0x3ff], &(0x7f00000000c0)=[0x5e, 0x8, 0x1, 0x9, 0x0], &(0x7f0000000100)=[0x9, 0x3f]}) 12:35:43 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8000, 0x4041) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000040)={0x7fffffff}, 0xffffffffffffff59) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x2800, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) read$FUSE(r1, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r3, &(0x7f0000000100)={0x18, 0x0, r4}, 0x18) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000000c0)={0x1}, 0x4) 12:35:43 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x0) 12:35:44 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x1e000000, 0x0, &(0x7f0000000000)) 12:35:44 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000080)) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0xfffffffffffffff5, 0x0, {0xffffffff, 0x0, 0xfffffffc, 0x5}}, 0x20) 12:35:44 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) r3 = fork() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r3, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000400)={0x1, 0x1, 0x2, 0x3, &(0x7f00000001c0)=[{}]}) 12:35:44 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x384, 0x0, 0x0, 0x0, 0x0, {0x0, 0x1f}, {}, {}, {}, 0x1}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000000)) 12:35:44 executing program 2 (fault-call:0 fault-nth:0): prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:35:44 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x5) 12:35:44 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) pselect6(0x40, &(0x7f0000000040)={0x100000001, 0x3ff, 0x1000, 0x10000, 0x9, 0xfffffffffffffff7, 0x0, 0x6}, &(0x7f0000000080)={0x3, 0xfffffffffffffb2d, 0x9, 0x1, 0x2, 0x800, 0x7ff}, &(0x7f00000000c0)={0x80000000, 0xfffffffffffff801, 0x8, 0x8001, 0x4, 0x6, 0x9b0, 0x7fffffff}, &(0x7f0000000100)={0x77359400}, &(0x7f0000000180)={&(0x7f0000000140)={[0x401]}, 0x8}) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:44 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x1e010000, 0x0, &(0x7f0000000000)) 12:35:44 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) r3 = fork() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r3, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) 12:35:44 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000180)={0x80000001, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0]}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:44 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0xc00, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f00000000c0)='syz0\x00') keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000000)) [ 3125.238908][T31967] FAULT_INJECTION: forcing a failure. [ 3125.238908][T31967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3125.280730][T31967] CPU: 0 PID: 31967 Comm: syz-executor.2 Not tainted 5.13.0-rc2-syzkaller #0 [ 3125.289688][T31967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 12:35:44 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x1f000000, 0x0, &(0x7f0000000000)) 12:35:44 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x7) [ 3125.299760][T31967] Call Trace: [ 3125.299773][T31967] dump_stack+0x141/0x1d7 [ 3125.299802][T31967] should_fail.cold+0x5/0xa 12:35:44 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) r3 = fork() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r3, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) [ 3125.299834][T31967] _copy_to_user+0x2c/0x150 12:35:44 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:35:44 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x1f010000, 0x0, &(0x7f0000000000)) 12:35:44 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000000)={0xe, 0x0, {0x55, 0x9, 0xfffa, {0x6, 0x7}, {0x5, 0xb4d}, @rumble={0x0, 0x2000}}, {0x55, 0x5, 0x9, {0xff, 0x800}, {0x5, 0x62f}, @cond=[{0x5, 0x1, 0xe453, 0x3, 0x9, 0x7}, {0xb703, 0x9, 0x3, 0x5, 0x9, 0x1}]}}) prctl$PR_SET_KEEPCAPS(0x8, 0x1) [ 3125.299865][T31967] simple_read_from_buffer+0xcc/0x160 [ 3125.299895][T31967] proc_fail_nth_read+0x187/0x220 [ 3125.299922][T31967] ? proc_exe_link+0x1d0/0x1d0 12:35:44 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x40) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x301900, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x0) [ 3125.299944][T31967] ? security_file_permission+0x248/0x560 [ 3125.299975][T31967] ? proc_exe_link+0x1d0/0x1d0 12:35:44 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x20000000, 0x0, &(0x7f0000000000)) 12:35:44 executing program 2: prctl$PR_SET_KEEPCAPS(0x7, 0x400000001) [ 3125.300000][T31967] vfs_read+0x1b5/0x570 12:35:44 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) r3 = fork() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r3, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) [ 3125.300027][T31967] ksys_read+0x12d/0x250 [ 3125.300050][T31967] ? vfs_write+0xa30/0xa30 [ 3125.300074][T31967] ? syscall_enter_from_user_mode+0x27/0x70 [ 3125.300109][T31967] do_syscall_64+0x3a/0xb0 [ 3125.300133][T31967] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3125.300158][T31967] RIP: 0033:0x41935c [ 3125.300176][T31967] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 3125.300200][T31967] RSP: 002b:00007f43a9496170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3125.300222][T31967] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041935c [ 3125.300237][T31967] RDX: 000000000000000f RSI: 00007f43a94961e0 RDI: 0000000000000003 [ 3125.300251][T31967] RBP: 00007f43a94961d0 R08: 0000000000000000 R09: 0000000000000000 12:35:44 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {0x8}}) 12:35:44 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) clock_gettime(0x2, &(0x7f0000000000)) 12:35:44 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x20010000, 0x0, &(0x7f0000000000)) 12:35:44 executing program 2: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) 12:35:44 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) r2 = fork() rt_tgsigqueueinfo(0x0, r2, 0x0, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r2, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:44 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) [ 3125.300265][T31967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3125.300277][T31967] R13: 00007ffc870261bf R14: 00007f43a9496300 R15: 0000000000022000 12:35:45 executing program 2: prctl$PR_SET_KEEPCAPS(0x18, 0x400000001) 12:35:45 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x21000000, 0x0, &(0x7f0000000000)) 12:35:45 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:45 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x22a300) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x1000, 0x43, 0x9, "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"}) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) 12:35:45 executing program 0: read$qrtrtun(0xffffffffffffffff, &(0x7f0000000000)=""/244, 0xf4) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:45 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) r2 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r2, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:45 executing program 2: prctl$PR_SET_KEEPCAPS(0x1b, 0x400000001) 12:35:45 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x21010000, 0x0, &(0x7f0000000000)) 12:35:45 executing program 5: r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffd000/0x1000)=nil) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) clock_gettime(0x0, &(0x7f0000002fc0)) r3 = fork() r4 = geteuid() read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) shmctl$IPC_SET(r0, 0x1, &(0x7f0000002240)={{0x3, r1, 0xee01, r4, r5, 0x20}, 0x80000000, 0x4, 0x3, 0x5, r3, r3, 0xd04}) rt_tgsigqueueinfo(0x0, r3, 0x32, &(0x7f0000000140)) shmctl$IPC_SET(r0, 0x1, &(0x7f00000000c0)={{0x3, 0xee00, 0xee00, 0xffffffffffffffff, r2, 0x97355fb0b27b1108, 0x993}, 0x7fffffff, 0x2, 0x5, 0x23, 0xffffffffffffffff, r3}) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x0) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1000, 0x141041) 12:35:45 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x1000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0x4}, {}, {0x1, 0x4}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x3, 0x8}) 12:35:45 executing program 2: prctl$PR_SET_KEEPCAPS(0x1c, 0x400000001) 12:35:45 executing program 3: ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f00000000c0)) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x6002, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x3}) 12:35:45 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:45 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x22000000, 0x0, &(0x7f0000000000)) 12:35:45 executing program 2: prctl$PR_SET_KEEPCAPS(0x2f, 0x400000001) 12:35:45 executing program 5: getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) 12:35:45 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x356, 0x384, 0x0, 0x80, 0x4, 0x2, 0x10, 0x2, {0x1, 0x7fff, 0x1}, {0x6, 0xfffffbff}, {0x241, 0x8}, {0x7, 0x2a3, 0x1}, 0x1, 0x40, 0x6, 0x2bff2e94, 0x1, 0xffff, 0x4, 0xff, 0x3ff, 0x8, 0x6, 0x280, 0x0, 0x100, 0x608ce8531bc483bd, 0xa}) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000180)) openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x8c1}, 0x8) 12:35:45 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:45 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) 12:35:45 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x22010000, 0x0, &(0x7f0000000000)) 12:35:45 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x28) 12:35:45 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x360, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000140)={&(0x7f0000000080)="f0ffd17a5c5e1f03edccc447321a1b1db62cdfff9b5db19f7b3cadbd477146386c7aa850162e7a4604094cd93f32557a1d3b50d4ca7d30cac677874e3a3b5c3d4286635986061852520ee537cc2c0bfdc85395d55e4308da7db3b037f45fe5cd9fe55de8ea2df54ff1019827bf3f2d73085a56922d2c654a", 0x78}, 0x1, 0x0, 0x0, 0x40008}, 0x4010) ioctl$FBIOPUT_CON2FBMAP(r1, 0x4610, &(0x7f0000000000)) 12:35:45 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 12:35:45 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:45 executing program 3: openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x1) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) getgid() 12:35:45 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x23000000, 0x0, &(0x7f0000000000)) 12:35:45 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000007) 12:35:45 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000000)=0x9) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, 0x0, 0x1, {0x0, 0xff}, 0xfe}, 0x18) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f00000001c0)={0x0, 0x3, &(0x7f0000000080)=[0x7fff, 0x4, 0xffff], &(0x7f00000000c0)=[0x2, 0x5, 0xcf, 0xfff7, 0x3d6f, 0x1, 0x2, 0x6a3], &(0x7f0000000140)=[0x4, 0x6, 0x40, 0xf63, 0x1, 0x7], &(0x7f0000000180)=[0x43c2]}) 12:35:45 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:45 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x202901, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 12:35:45 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) memfd_create(&(0x7f0000000000)='-*]#\x00', 0x1) 12:35:45 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x23010000, 0x0, &(0x7f0000000000)) 12:35:45 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) 12:35:46 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0x1}, 0xffffffff) prctl$PR_SET_KEEPCAPS(0x17, 0x1ffff) 12:35:46 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:46 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:46 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x24000000, 0x0, &(0x7f0000000000)) 12:35:46 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x4edc16ffd16c9396}, 0x10) prctl$PR_SET_KEEPCAPS(0x8, 0x0) clock_gettime(0x3, &(0x7f0000000000)) 12:35:46 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x30}, 0x10) 12:35:46 executing program 2: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x204400, 0x0) read$snapshot(r0, &(0x7f0000000180), 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) syz_io_uring_setup(0x3af4, &(0x7f0000000080)={0x0, 0xab39, 0x20, 0x3, 0x1b9, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000100)={0x2, 0x0, &(0x7f0000000000), &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)}) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x40010, 0xffffffffffffffff, 0x8000000) 12:35:46 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000005a00), 0x0, 0xc10200) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000005a40), &(0x7f0000005a80)=0x4) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:46 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) syz_open_dev$mouse(&(0x7f0000000000), 0xbd, 0x84000) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:46 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x24010000, 0x0, &(0x7f0000000000)) 12:35:46 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 12:35:46 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x200602, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000080)) 12:35:46 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000100)=0x8b651a4ea31e6e52) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) r2 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r2, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:46 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x5, 0x80040) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x14) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) r2 = socket(0x26, 0x9, 0x8001) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0x1f, 0x2, 0x10000, 0x28, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x40, 0x8, 0x7}}) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f0000000240)={0x1d, r3, 0x2, {0x1, 0x1, 0x4}, 0x2}, 0x18, &(0x7f0000000280)={&(0x7f00000003c0)="03083f19660324bfb727c93e56011fc0e47f9e3714fba511972a0aea87cb6b9debe66029bb266d4c05096da5bf786873b5e2c7e7c6802323ea1d74756ac270bdb2a9e7a0423efcca9801c0fceac35f86c36ca20d9e760a2f2fc378d7e1e260fbbea4d578970539d44b0ec2dc74647e4fc8534e7572fe28bf95420323409cb1b71aa10000000000000000", 0x8a}, 0x1, 0x0, 0x0, 0x4000010}, 0xc010) 12:35:46 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x6240, 0x0) read$fb(r0, &(0x7f0000000040)=""/126, 0x7e) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x7) 12:35:46 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x25000000, 0x0, &(0x7f0000000000)) 12:35:46 executing program 5: getresgid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000000)) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) geteuid() prctl$PR_SET_KEEPCAPS(0x8, 0x1) 12:35:46 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000000)=0x7) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) 12:35:46 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) r2 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r2, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:46 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000180), 0x4, 0x48001) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f00000001c0)=r4) write$FUSE_IOCTL(r2, &(0x7f0000000140)={0x20, 0x0, r1, {0x1ff, 0x4, 0x4, 0x7}}, 0x20) write$FUSE_WRITE(r0, &(0x7f0000000240)={0x18, 0x0, r1}, 0x18) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000080)={0x18, 0xffffffffffffffda, r1, {0x3}}, 0x18) prctl$PR_SET_KEEPCAPS(0x17, 0x1) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x418001, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) 12:35:46 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x4}}) read$fb(r0, &(0x7f0000000000)=""/194, 0xc2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r1, 0x7c80, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000240)={0x1000000, 0x2, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 12:35:46 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x101, &(0x7f0000000000)=[0xffffffffffffffff, r1, 0xffffffffffffffff], 0x3}, 0x401) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) 12:35:46 executing program 3: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) write$fb(r0, &(0x7f0000000080)="8c99544902fb1f618eafacd613e3563737b44668a4006ccb2104d9c92eb5de7b4cab33850f942e4325d5fcde88cec9f456a108c3186574d884e48330a7f03d4069f0a9eefa31b9c1df30e13d8e68ee25df95ba331ba23bfdeeada13c0ba7f3c4ce291aa7460b25ec1ed56956092c018ffbc5ba79fd504b67a395b41c240f14d79102a17bf2ebb5dc5adbc7df600537a6bdc4342471241cc3424d88ce614d7915f4b74149e8659b9ca39367f896e9f9a14caf07011c327acf7786ab3b009e0310932edfb9af8e3c637d58a998141dac4f071749ee91c2aac402d1549c40b7", 0xde) 12:35:46 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x25010000, 0x0, &(0x7f0000000000)) 12:35:46 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0x1}, {}, {0x0, 0x4}, 0x0, 0x111}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$FBIOGET_FSCREENINFO(r1, 0x4602, &(0x7f0000000000)) 12:35:46 executing program 2: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000000)={'syz0\x00', {0x3, 0xbcdf, 0x80, 0x3cad}, 0x7, [0x39, 0x2, 0x2, 0x5, 0x2, 0x100, 0x81, 0x1, 0xfffffff8, 0x4, 0x3, 0x7, 0x8, 0x1, 0x2bd, 0x101, 0x1, 0xffffffc1, 0x5, 0x1, 0x7cb, 0x3ff, 0x6, 0x1000, 0x60, 0x7, 0x1, 0x0, 0x8000, 0xf3c, 0x8, 0x8, 0x9, 0x9, 0x1f, 0x5, 0x4, 0x80, 0x200, 0x7, 0x3, 0xffff, 0x8, 0xab81, 0x7fffffff, 0x5, 0x7ff, 0x47eb, 0x2, 0x75800000, 0x4, 0x1, 0xf800, 0x9, 0x81, 0x5, 0xfe, 0xfffffffa, 0x424e, 0x1, 0x76180, 0x8, 0x2, 0x9], [0x6, 0x306d, 0xba92, 0x0, 0x1000, 0x6, 0x7ff, 0x7, 0x0, 0x3, 0x80, 0x8, 0x40, 0x0, 0xd96, 0x10001, 0x800, 0x5, 0x6, 0x0, 0x48a, 0x6, 0x1000, 0x9, 0xae, 0x10000, 0xbce0, 0x2, 0xffffd287, 0x9, 0x1, 0x1, 0x0, 0x2, 0x74a3d075, 0x7, 0x1f, 0x8, 0x1, 0xdda, 0x7fffffff, 0x2, 0x72, 0x81, 0x6, 0x9, 0x3ba, 0x5, 0x8, 0x6, 0x4, 0xab, 0x10000, 0x7, 0x8, 0x856, 0x4, 0x101, 0x81, 0xa2dd, 0x5066f595, 0x20, 0x7], [0xffffffff, 0xfffffff7, 0xffffffff, 0x3, 0x7, 0x7, 0x1, 0x8, 0x91, 0x951e, 0xff, 0x2, 0x4, 0x7fffffff, 0x800, 0x9, 0x8c3e, 0x1, 0x200, 0xda9, 0x9c, 0x6, 0x3, 0xdf0d, 0x81, 0x1, 0xc0e, 0x4, 0x3ff, 0x3f, 0x0, 0x2, 0x3, 0x7, 0xda7, 0x4, 0xffff, 0x200, 0x0, 0x1, 0xe5c5, 0xfffffffa, 0x9, 0x7, 0xa6, 0x1, 0x1, 0x8, 0x8, 0x4, 0x1000, 0x1, 0x9, 0x6, 0x5, 0x9, 0x2, 0x3, 0x0, 0xa82, 0x6, 0x0, 0x7ff, 0xffffffff], [0x34ad, 0x100, 0x30, 0x1ff, 0x3ff, 0xfffffffe, 0x1, 0x9, 0x5, 0x81, 0xfffffffe, 0x0, 0x11, 0x8, 0x1, 0x222, 0x6058, 0x3, 0x7, 0x5, 0x3, 0xfffff902, 0x8001, 0x1, 0x90b5, 0xfffff000, 0xaf49, 0xff, 0x1, 0x5, 0x8, 0x3de5, 0x101, 0x3f, 0x0, 0x1000, 0x5, 0x0, 0x20, 0x8, 0x9, 0x0, 0x8001, 0x2, 0xb3, 0x9, 0x3, 0x7, 0x6, 0x401, 0x1, 0x7f, 0x8, 0x80000000, 0x1ff, 0x80, 0x7fffffff, 0xfffffffc, 0x8, 0xff, 0x4e5, 0x5, 0x40, 0x6]}, 0x45c) 12:35:46 executing program 4: openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:46 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000040)=0x1) 12:35:46 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x26000000, 0x0, &(0x7f0000000000)) 12:35:47 executing program 0: setitimer(0x1, &(0x7f0000000040)={{0x77359400}}, &(0x7f0000000080)) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x140, 0x556, 0x0, 0x4, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x9}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7d, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6}) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000000)={0x1f, 0x2}) 12:35:47 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000040)={@any, 0x800, 0x1, 0x8}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 12:35:47 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x20000) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:47 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000000)={@any, 0x7ff}) getrusage(0x0, &(0x7f0000000040)) prctl$PR_SET_KEEPCAPS(0x8, 0x1) mlockall(0x1) 12:35:47 executing program 3: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 12:35:47 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x26010000, 0x0, &(0x7f0000000000)) 12:35:47 executing program 0: fcntl$getown(0xffffffffffffffff, 0x9) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0xc80, 0x78, 0x0, 0x467cc7f9d9fa5afa, 0x0, 0x0, 0x10, 0x2, {0x0, 0x8, 0x3}, {0x4}, {0x0, 0x9}, {0x0, 0x3}, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x70, 0x0, 0xffffffff, 0x2, 0xfffffffd}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) write$fb(r1, &(0x7f0000000000)="3271d1542ed76a4986bd01f2aee0314687bfefc87a9b70088f20e9dfd3eb39febc1f0be548b41cba8a88653b1af509ffde3c4c2fc6e362b262282018a2e981263b4e35d5cf3d6dd5c0a7dab5519c5f34", 0x50) openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x8780, 0x0) 12:35:47 executing program 5: syz_io_uring_setup(0x746f, &(0x7f0000000000)={0x0, 0x9760, 0x0, 0x3, 0x2aa}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) syz_io_uring_setup(0x179b, &(0x7f0000000100)={0x0, 0x81e0, 0x1, 0x1, 0x112, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 12:35:47 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x20000) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:47 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x27000000, 0x0, &(0x7f0000000000)) 12:35:47 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$cec(&(0x7f0000000040), 0x1, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0x8, 0x6, {0x0, 0x2710}, {0x3, 0xc, 0x7f, 0x4, 0x6, 0x4, "d07a7044"}, 0x7, 0x3, @offset=0x3, 0x4, 0x0, r1}) 12:35:47 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x20000) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:47 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {0x0, 0x7fc}}) 12:35:47 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x2) 12:35:47 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x27010000, 0x0, &(0x7f0000000000)) 12:35:48 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000080)={0xd, 0x6, 0x401}) prctl$PR_SET_KEEPCAPS(0x17, 0x800400000005) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0x10, 0x8, 0x400}) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x7, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r1}, 0x4) 12:35:48 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x20000) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:48 executing program 0: ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000000)) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000140)={0x97, 0x3, 0xffffffff, "ef281d8f0b4961adde0b1f6284ebae747213941019ef2726fa44b36c9a658e8821a34c88bdb957d3894fb689ede3c4e373e4b10a0a456163efed3570b0631e7d3f7b6ee811c98d0aef473d2b7f0450ea9215d18e322200c30d0c8ad97fb8152788d75b01d578e6246f2f41e51dfd5ff9d337f03451b1c6f64ea2e3ae67c844bdf8d976402c671a1e6a58c9c049b4437b0c5ca73ad45666"}) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000000c0)) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x631, 0x401f8cc9}) 12:35:48 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x5ccd, 0x80) openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x480040, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100), 0x1, 0x280101) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000000)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) 12:35:48 executing program 5: openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000040)=r0) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) 12:35:48 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x28000000, 0x0, &(0x7f0000000000)) 12:35:48 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x28010000, 0x0, &(0x7f0000000000)) 12:35:48 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0241, 0x0) read$fb(r1, &(0x7f0000000200)=""/147, 0x93) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x50561, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000140)={0x356, 0x960, 0x640, 0x960, 0x59, 0x401, 0x8, 0x2, {0x20, 0x0, 0x1}, {0x4, 0x3, 0x1}, {0x8, 0x0, 0x1}, {0x4, 0x6, 0x1}, 0x3, 0x50, 0x0, 0x101, 0x1, 0x3, 0x1f, 0x101, 0xe285, 0x80000000, 0x8, 0x80000000, 0x1, 0x100, 0x3}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2f7) ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, &(0x7f0000000040)) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) ioctl$FBIOPUT_CON2FBMAP(r3, 0x4610, &(0x7f00000002c0)={0x14, 0x2}) 12:35:48 executing program 3: read$fb(0xffffffffffffffff, &(0x7f0000000040)=""/26, 0x1a) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:48 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) write$qrtrtun(r0, &(0x7f0000000000)="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", 0x1000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000001000)) 12:35:48 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x20000) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:48 executing program 2: write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:35:48 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x29000000, 0x0, &(0x7f0000000000)) 12:35:48 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:48 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x2d, 0x7, 0x81, 0xcff, 0x4c, @local, @remote, 0x7800, 0x1, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000180)={'syztnl0\x00', r0, 0x29, 0x2, 0x1f, 0x8001, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x700, 0x4}}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1a, 0x200, 0x7fff, 0x8000, 0x8, r2, 0x5, '\x00', r1, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) 12:35:48 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x3fffffffe) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x701040, 0x0) syz_open_dev$sndctrl(&(0x7f0000000340), 0xd1e, 0x32481) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000002c0)=0x4, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x7, 0x80201) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000240)={0x2400, 0x7, 0x3f, 0x20005, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}]}) 12:35:48 executing program 2: geteuid() r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000005, 0x20010, 0xffffffffffffffff, 0x8000000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000240)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd=r1, 0x2, &(0x7f0000000140)=""/241, 0xf1, 0x1a}, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x3c00, 0xb51083911a70c21, 0x640, 0x320, 0x0, 0x10000, 0x8, 0x1, {0x5, 0xd5, 0x40}, {0x6, 0xaa3}, {0x800, 0x8}, {0x6a24, 0x3ff}, 0x2, 0x2, 0x1ff, 0x4, 0x0, 0x2, 0xfffffffc, 0x2, 0x9, 0x40, 0x4, 0x7, 0x8, 0x0, 0x2, 0x6}) sendmsg$802154_raw(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14, &(0x7f0000000300)={&(0x7f00000002c0)="e723121dcdfce19d568bf7e700e4df8db2", 0x11}, 0x1, 0x0, 0x0, 0x20000011}, 0x40000) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f0000000100)={0x1d, 0x2}) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:35:48 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:49 executing program 3: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) 12:35:49 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x29010000, 0x0, &(0x7f0000000000)) 12:35:49 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r0 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:49 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 12:35:49 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0xffffffffdffffffe) r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) r1 = shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0xe000) shmdt(r1) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) r3 = shmat(r2, &(0x7f0000ffe000/0x2000)=nil, 0xe000) shmdt(r3) r4 = shmat(r2, &(0x7f0000ffc000/0x4000)=nil, 0x1000) shmdt(r4) 12:35:49 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000)) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xc) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:49 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb, 0x100010, 0xffffffffffffffff, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) syz_io_uring_submit(r0, 0x0, &(0x7f0000000040)=@IORING_OP_NOP={0x0, 0x2}, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:49 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r0 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:49 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 12:35:49 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x2a000000, 0x0, &(0x7f0000000000)) 12:35:49 executing program 2: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x200080, 0x0) 12:35:49 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:49 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x8000) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz0\x00') socket(0x23, 0x5, 0x100) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x80ef29ed51d6c896, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f000000bc40)={0x0, @ax25={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6}, @can={0x1d, 0x0}, @ipx={0x4, 0x1, 0x5, "e589893624e9"}, 0x3, 0x0, 0x0, 0x0, 0x9, &(0x7f000000bc00)='rose0\x00', 0x0, 0xfffffffffffffffc}) sendmsg$can_j1939(r1, &(0x7f000000bdc0)={&(0x7f000000bcc0)={0x1d, r2, 0x3, {0x2, 0xff}, 0xfd}, 0x18, &(0x7f000000bd80)={&(0x7f000000bd00)="2a212637db236f42ee9abbf8748a611fb100bb91b2a4a8c51fbe96f67d0053567be404edb426dfb6e685b0303c78a8a1cdcceda806723215ffe9cebd2f2e1b9bf4a061474eb0fb7087cff2d4c4e00386e2be13badde1b3b744babfc283a55c45ddfed9d2b82c612f5bc7cb", 0x6b}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) 12:35:49 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x2a010000, 0x0, &(0x7f0000000000)) 12:35:49 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) prctl$PR_MCE_KILL(0x29, 0x1, 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xc, 0x1, 0xff, 0x1, 0x2, 0xffffffffffffffff, 0x40, '\x00', 0x0, r1, 0x5, 0x3, 0x2}, 0x40) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:49 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r0 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000240)={{0xffffffff, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:49 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) mmap$qrtrtun(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000006, 0x110, 0xffffffffffffffff, 0xf3) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 12:35:49 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x1) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:49 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x2b000000, 0x0, &(0x7f0000000000)) 12:35:49 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 12:35:49 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) prctl$PR_GET_SECCOMP(0x15) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000040)) 12:35:49 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:49 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 12:35:49 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x2b010000, 0x0, &(0x7f0000000000)) 12:35:49 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000000)={0x23, 0x1}) 12:35:49 executing program 2: accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:35:49 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0xfffffffffffffffd) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f00000000c0)={@none}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x2f, 0x1f, 0x2, 0x101, 0x0, @private2, @local, 0x10, 0x8, 0x3, 0x7}}) 12:35:49 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) 12:35:49 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x2c000000, 0x0, &(0x7f0000000000)) 12:35:49 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 12:35:50 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 12:35:50 executing program 5: r0 = shmget(0x2, 0x1000, 0x1000, &(0x7f0000ffc000/0x1000)=nil) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = fork() rt_tgsigqueueinfo(0x0, r4, 0x0, &(0x7f0000000140)) getpgrp(r3) shmctl$IPC_SET(r0, 0x1, &(0x7f0000002180)={{0x2, r1, 0xee01, r2, 0x0, 0x2a}, 0x9, 0x10000, 0x9, 0x3, r4, 0xffffffffffffffff, 0x4}) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) socket$bt_hidp(0x1f, 0x3, 0x6) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x7}, 0x8) 12:35:50 executing program 0: ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000000)=0x7) ioctl$SNAPSHOT_GET_IMAGE_SIZE(0xffffffffffffffff, 0x8008330e, &(0x7f0000000040)) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:50 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) setresuid(0xee01, 0xee00, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000002300)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x20, 0x800, 0x10, @local, @mcast1, 0x20, 0x40, 0x10000, 0xb946}}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000002380)={'ip6_vti0\x00', r0, 0x2f, 0x20, 0x6, 0x5, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x7800, 0x7, 0x5, 0x6}}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000280)={0x5, &(0x7f00000000c0)=[{@none}, {@fixed}, {@fixed}, {@fixed}, {}]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x2040, 0x0) write$qrtrtun(r1, &(0x7f0000000140)="d551b6fbc333e8054f700a7fb47482303989d1aada2b760c2565149c55950c354da735c94e931bcffae0bc49124cc3bc3d41c2af132205d7eefaa5d7392401297e029c2ebe6f32d6c58e367b708c7692b317658cc0a6d66cfc156ddddbdb48586b903deb2cc141ad081a51901bfe0896e3584aa2c70b2ded734a12cbf761c66aa0f0ffc1d428b67f5fb8c5536b97d7c171b4fe7b9073a49f0e974b1cf7bdc72850b26bb11a8780a5bf99cfeeb14405528e96cbef71bf11fe78ad409e6cd73548dc5eeb281dbffded30e7b661fe994e94583b1982458ba2dda0", 0xd9) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020}, 0x2020) fork() seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:50 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x2c010000, 0x0, &(0x7f0000000000)) 12:35:50 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 12:35:50 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0xc80, 0x400, 0x640, 0x400, 0x7f, 0xff, 0xf, 0x0, {0x4, 0x1}, {0xffff00, 0x36b}, {0x7f, 0x7}, {0x4, 0x2}, 0x3, 0x26fad1e93103c78e, 0x7f, 0x3, 0x0, 0x2, 0x11f, 0xffff, 0x0, 0x0, 0xf9b, 0x0, 0x8, 0x0, 0x0, 0x2}) 12:35:50 executing program 2: ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x19e) r0 = socket(0x2, 0x1, 0x1) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SET_KEEPCAPS(0x17, 0x1) 12:35:50 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x2d000000, 0x0, &(0x7f0000000000)) 12:35:50 executing program 5: r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @dev, @default, 0x0, [@netrom, @rose, @null, @null, @null, @bcast]}, &(0x7f0000000040)=0x40, 0x0) accept4$rose(r0, &(0x7f0000000080)=@short={0xb, @remote, @rose}, &(0x7f00000000c0)=0x1c, 0x80800) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000100)={0x1ff}, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) 12:35:50 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x2, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:50 executing program 3: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000080)) r0 = fork() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000140)) ioprio_set$pid(0x2, r0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 12:35:50 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x2d010000, 0x0, &(0x7f0000000000)) 12:35:50 executing program 0: getrusage(0x1, &(0x7f0000000140)) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) r1 = socket(0x3, 0x4, 0x6) sendmsg$802154_raw(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14, &(0x7f0000000080)={&(0x7f0000000040)="7b0b44a78d895424a3bd39d15fea16d15d3c8341be3424fd", 0x18}, 0x1, 0x0, 0x0, 0x4c004}, 0x40004) 12:35:50 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1000) shmget(0x2, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) 12:35:50 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000003440)=[{{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1}, 0xdf}, {{&(0x7f0000000140)=@in6, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/153, 0x99}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000340)=""/96, 0x60}, {&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000440)=""/151, 0x97}, {&(0x7f0000000500)=""/179, 0xb3}], 0x6, &(0x7f0000000640)=""/71, 0x47}, 0x10000}, {{&(0x7f00000006c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/64, 0x40}, {&(0x7f0000000780)=""/104, 0x68}], 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/145, 0x91}, {&(0x7f0000000900)=""/49, 0x31}, {&(0x7f0000000940)=""/141, 0x8d}, {&(0x7f0000000a00)=""/37, 0x25}, {&(0x7f0000000a40)=""/202, 0xca}], 0x5}, 0x200}, {{&(0x7f0000000bc0)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000000c40)=""/216, 0xd8}, {&(0x7f0000000d40)=""/207, 0xcf}, {&(0x7f0000000e40)=""/215, 0xd7}, {&(0x7f0000000f40)=""/86, 0x56}, {&(0x7f0000000fc0)=""/138, 0x8a}, {&(0x7f0000001080)=""/12, 0xc}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x7, &(0x7f0000002140)=""/129, 0x81}, 0x7fff}, {{&(0x7f0000002200)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002280)=""/52, 0x34}, {&(0x7f00000022c0)=""/4096, 0x1000}, {&(0x7f00000032c0)=""/206, 0xce}], 0x3, &(0x7f0000003400)=""/56, 0x38}, 0x1}], 0x6, 0x0, &(0x7f00000035c0)={0x0, 0x989680}) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:35:50 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x1, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:50 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) setsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040), 0x4) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:50 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x2e000000, 0x0, &(0x7f0000000000)) 12:35:50 executing program 0: syz_open_dev$sndctrl(&(0x7f0000000040), 0x4, 0x40040) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x4) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000080)={0x32}) 12:35:50 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$SG_GET_SG_TABLESIZE(r2, 0x227f, &(0x7f00000004c0)) write$uinput_user_dev(r1, &(0x7f0000000040)={'syz1\x00', {0x7035, 0x1ff, 0x6, 0xfff7}, 0x16, [0x2, 0xfffffc2f, 0x10, 0x7, 0x1ff, 0x1f, 0x9e, 0xa55, 0x5, 0x3, 0x2, 0x81, 0x4, 0x362, 0x1, 0x3, 0x316c25c2, 0x200, 0x2, 0x1000, 0x6d47, 0x5, 0x80, 0xc0, 0xfff, 0xd8c8, 0xff, 0x2, 0x81, 0xa3d, 0x10001, 0x401, 0x401, 0x493e, 0x0, 0x7fffffff, 0x5, 0x6, 0x0, 0x8, 0x5, 0xfffffb72, 0xfff, 0x6, 0x7, 0x1, 0x8, 0x0, 0x0, 0x1ff, 0x4, 0x5, 0x0, 0xf45, 0x1, 0x9, 0x669, 0xc175, 0xffff7fff, 0x0, 0x0, 0x8, 0x2, 0xcc0], [0x200, 0x9, 0x6, 0x7ff, 0x6, 0x20, 0x8, 0x1b7, 0x9, 0x1000, 0xffff, 0x72d8, 0x87, 0x784, 0x4, 0x81, 0x80000000, 0x8, 0x0, 0x4, 0x6, 0x20, 0x8, 0x62e5, 0x101, 0x4, 0x29a2, 0x4, 0x1, 0x7, 0x5, 0x1, 0x80000001, 0x4, 0x0, 0x5, 0x5, 0x4, 0x7, 0x8, 0x7, 0x100, 0x21, 0x1d, 0x0, 0x9b0, 0x7, 0xd5ac, 0x920, 0xffff, 0x6, 0x20, 0xff, 0x7, 0x6, 0x8, 0x9, 0xcd5b, 0x6, 0x9, 0x8, 0x80000000, 0xd3b, 0x25f], [0x0, 0x80, 0x3, 0x59, 0x80, 0x80000001, 0x93, 0xffffffc1, 0x1f, 0x20, 0x8, 0x1, 0x1, 0x6, 0x20, 0x4, 0xffffffff, 0x5, 0xcc10, 0xe9, 0x7, 0xa7, 0x1c000000, 0x52b8, 0x1, 0x2, 0xe1f4, 0x9, 0x4, 0x6, 0x4, 0x3, 0x9, 0xa7, 0x3, 0x8, 0x2, 0x8, 0x2, 0x7, 0x3, 0xbc61, 0x7, 0x9, 0x68, 0x6f, 0x8001, 0x5, 0x3ff, 0x8, 0x9, 0x1, 0x101, 0x800, 0x1, 0x9, 0x72, 0x3ff, 0x8, 0xff, 0x7, 0x6, 0x4, 0x6], [0x40, 0x80, 0xfffffff7, 0x566c, 0x101, 0x2087, 0x7, 0x3, 0x210, 0x6, 0x10, 0x0, 0x100, 0x3ff, 0x5, 0x9, 0xffffffff, 0x0, 0x6, 0x6, 0xce5, 0x9, 0x7fff, 0x7f, 0x4, 0x8, 0x5cbb, 0x81, 0x7ff, 0x6d, 0x8, 0x5, 0xa, 0x30c5, 0x2, 0x8, 0x8, 0x1ff, 0x1000, 0x0, 0x3, 0x9, 0x6, 0x2, 0x3, 0x3, 0x2, 0x3e, 0x101, 0x0, 0x5, 0x1d, 0x9, 0xe3, 0x7, 0x9, 0xfffffc00, 0x98000000, 0x7, 0xffff, 0x8000, 0x81, 0x80000000, 0x2]}, 0x45c) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1) syz_open_dev$vim2m(&(0x7f0000000500), 0x7, 0x2) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 12:35:50 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x1) 12:35:50 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0xe788, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:50 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x2e010000, 0x0, &(0x7f0000000000)) 12:35:50 executing program 3: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x1, 0x2, 0xc6, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x700, 0x8, 0x3ac}}) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) 12:35:50 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0x3}}, 0x14) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) 12:35:50 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x105000, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x550, 0x10, 0x690, 0x600, 0x80, 0x3, 0x2f, 0x0, {0x7f, 0xf002}, {0x7, 0x6, 0x1}, {0x1c16, 0x2, 0x1}, {0x710, 0xa14, 0x1}, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x40, 0x100, 0x53f9, 0x5, 0x3, 0x3, 0x80000001, 0x0, 0x1, 0x3, 0xb}) 12:35:50 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xf18a, 0x5, 0x2, 0x4, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x0, 0x0, 0x1}, 0x40) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x8, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa}, 0x8) 12:35:50 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4}, 0x5, 0x10000500, 0x1, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:51 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x2f000000, 0x0, &(0x7f0000000000)) 12:35:51 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000008, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x26d5, &(0x7f0000000100)={0x0, 0x65c6, 0x0, 0x3, 0x39c}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000340)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x0, @fd_index=0xa, 0x1, 0xc064, 0x4, 0x3, 0x1, {0x1}}, 0x5) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:35:51 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getgid() shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) prctl$PR_SET_KEEPCAPS(0x8, 0x1) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) 12:35:51 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x1000, 0x4b0, 0x690, 0x960, 0x7, 0x7fffffff, 0x18, 0x2, {0x4, 0x2}, {0x5, 0x8, 0x1}, {0xfffff001, 0x3, 0x1}, {0x5, 0x6}, 0x2, 0x1, 0x40, 0x7f, 0x0, 0x7f, 0xff, 0x1, 0x7, 0x4736, 0x550, 0x2, 0x10, 0x200, 0x3, 0x7}) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x1) 12:35:51 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000240)={0x1, 0x41, "1b6d0d2ba818349e3cbe5f431070261b1fce49251448d71be3a5dc4eeb13d5f3785e456a90b8a0bf2dc45b3ab35d0a9fa76f9280916da1a8878b198dea717c3234"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x7, 0x8000, 0x42, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x700, 0x700, 0x2, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', r2, 0x29, 0x5, 0x3, 0x7ff, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x20, 0x8, 0x4}}) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r3, 0x0, &(0x7f0000003c00)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x9, 0x0, 0x0, 0x401, 0x8, 0x1, {0x0, 0x0, r4}}, 0x6) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x6, 0x3f, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, 0x700, 0x8, 0x2, 0xb05}}) 12:35:51 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x2f010000, 0x0, &(0x7f0000000000)) 12:35:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x10000500, 0x1, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:51 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000080), 0x4) fcntl$getown(r0, 0x9) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000040)={0xa034, {0x100, 0xa0d, 0x27, 0x4, 0x5, 0x10}}) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:35:51 executing program 3: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000000)=0x4) 12:35:51 executing program 0: setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:51 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x1) 12:35:51 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x30000000, 0x0, &(0x7f0000000000)) 12:35:51 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) write$fb(r1, &(0x7f0000000040)="2c4a8203b51a8471a661341ba931405fee6e5d4619d3751a7f4a7f2ff3373b27bef875a1ee67870ece72db6f0382dd8cc44a57ae970e265e9593575044c528cd574b02bc3716caa757f8", 0x4a) openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x10000500, 0x1, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:51 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000080)='syz1\x00') openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f00000000c0)={0x6, 0x3, 0x100}) 12:35:51 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x840, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x1000, 0x0) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000140)={0x1, 0xa, 0x4, 0x4000, 0x3b, {r2, r3/1000+10000}, {0x1, 0xc, 0x3, 0x4, 0x9, 0x1, "9380d122"}, 0x7fffffff, 0x1, @userptr=0x6, 0x7, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0xd}, 0x10) fcntl$getown(r0, 0x9) 12:35:51 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x30010000, 0x0, &(0x7f0000000000)) 12:35:51 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x0) r0 = fork() sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x2) getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) 12:35:51 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x31000000, 0x0, &(0x7f0000000000)) 12:35:51 executing program 0: ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000000)) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:51 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xbbc71b4, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r0, 0x1, 0x8}, 0xc) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x8200) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:51 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000080)='./file0\x00', 0x0, 0x2c}, 0xa9) prctl$PR_GET_SECCOMP(0x15) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 12:35:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x10000500, 0x1, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:51 executing program 5: openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x2fe500, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x205018, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030313830302c626c6b73697a653d3078303030303030303030303030323830302c626c6b73697a653d307830303030303030303030303030ffff302c6d61785f726561643d3078303030303030303030303030303766662c626c6b73697a653d3078303030303030303030303030303830302c657569643e", @ANYRESDEC=0xee01, @ANYBLOB=',dont_appraise,fowner>', @ANYRESDEC=0xee01, @ANYBLOB=',\x00']) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) getpgid(0xffffffffffffffff) 12:35:51 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x31010000, 0x0, &(0x7f0000000000)) 12:35:51 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r0, 0x330f, 0x3) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) read$snapshot(r1, &(0x7f0000000040)=""/161, 0xa1) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:51 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x4) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:51 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x6900, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xa) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)={0x4b07, {0x0, 0x1, 0x7, 0x6, 0x7, 0x9}}) prctl$PR_SET_KEEPCAPS(0x8, 0xfffffffffffffffd) 12:35:51 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) prctl$PR_SET_KEEPCAPS(0x17, 0xfffffffffffffff9) 12:35:51 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x10000500, 0x1, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:52 executing program 5: getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x3, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r0, 0x4) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x2304c0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000140)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) shmget$private(0x0, 0x4000, 0x200, &(0x7f0000ffc000/0x4000)=nil) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x5f) 12:35:52 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x32000000, 0x0, &(0x7f0000000000)) 12:35:52 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) read$FUSE(r0, &(0x7f00000020c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0x0, r1, {0x7, 0x4, 0x7}}, 0x20) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:52 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x210400, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000040)=0x2a00000) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$FBIOGETCMAP(r2, 0x2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:52 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000000)=0x1, 0x4) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:35:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:52 executing program 3: ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5387, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x29, 0x0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000080)) 12:35:52 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x0) 12:35:52 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x32010000, 0x0, &(0x7f0000000000)) 12:35:52 executing program 2: socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x26, 0x4, 0x6, &(0x7f0000000080)) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x20, 0x410040) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000040)={0x1f, 0x1}) 12:35:52 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_setup(0x429f, &(0x7f0000000000)={0x0, 0x5038, 0x2, 0x0, 0xc8}) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x240, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) socket$inet6_udplite(0xa, 0x2, 0x88) 12:35:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x0, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:52 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x0) 12:35:52 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$SG_SET_TIMEOUT(r1, 0x2201, &(0x7f0000000140)=0x2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x29, 0x8, 0x69, 0x20, 0x78, @loopback, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7, 0x700, 0x101, 0x400}}) 12:35:52 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x33000000, 0x0, &(0x7f0000000000)) 12:35:52 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x32440, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x42) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:35:52 executing program 5: r0 = socket(0x2, 0x5, 0x0) connect$can_j1939(r0, 0x0, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000000)="e165e02fd361a65d2c445bc897da6a346debd5d2788549d5b08eddeb154ebe072d947a36f1deddffa4b6a45e8b6c99d8b495d5c43cf4d3f8af1d802472228d7c5c082aec05d63472080cbeb499e6537a24dfcb4a26d8a5f2727738b79de96f03ee7f3f8795ca181eb8f1c2dabb7a04625a3d3d3b41cd9a8e15cdc48b295c739d8e9e1a836ea8752539be4422fc1c7429fc1fe6e0c9871c4691da728b73250391cda37a589d3e34b754d0be31a04327", 0xaf) 12:35:52 executing program 0: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000180)={0x7fffffff, 0x3, &(0x7f0000000040)=[0x1f, 0x2, 0x1000], &(0x7f0000000080)=[0x4, 0x5, 0x1], &(0x7f00000000c0)=[0x4, 0x20, 0x3034, 0x1f, 0xf74f, 0xff, 0x0, 0xcd69, 0x6f35, 0xffff], &(0x7f0000000140)=[0x4, 0x60d, 0x4, 0x3, 0x7, 0x7ff, 0x4]}) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x0, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:52 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x33010000, 0x0, &(0x7f0000000000)) 12:35:52 executing program 3: mlockall(0x3) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, &(0x7f0000000080)={0x342d, 0x8}) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x224a00, 0x0) 12:35:52 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) r0 = fork() ioprio_set$pid(0x3, r0, 0x2007) [ 3133.620287][T32579] Unsupported ieee802154 address type: 0 [ 3133.658538][T32579] Unsupported ieee802154 address type: 0 12:35:52 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x0, r1, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:52 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x47bd1b6411cd9dce) 12:35:52 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x34000000, 0x0, &(0x7f0000000000)) 12:35:52 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000240)={0x3, 0x2, &(0x7f00000000c0)=[0x8dbe, 0x9], &(0x7f0000000140)=[0x240, 0xfbff, 0xfff, 0x9, 0x822], &(0x7f0000000180)=[0x20, 0x401, 0x9, 0x3, 0x1], &(0x7f00000001c0)}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000440)={0x80000000, 0x1, &(0x7f0000000280)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0]}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) memfd_create(&(0x7f00000001c0)='\x00', 0x2) 12:35:52 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x34010000, 0x0, &(0x7f0000000000)) 12:35:52 executing program 5: openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000180)={&(0x7f00000000c0)="17f7901c51eac3fccef3990702277d9c0da34fd2f92ab19a4b6d18b415ca8494986e7d47ac52fe525b1c17cbc15121d2063db12eb32b31353461704e3e5506ce381d7bba674ebc219b047a11f3b2536944800ad765486d8e0ed30fd95dd66a5b3f6eb54fbb089117a40e639eaa0867025823f0926107e5bcc1a6c76f8414cdbc8a565bdac4d3071d", 0x88}, 0x1, 0x0, 0x0, 0x2000001}, 0x1) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, &(0x7f0000000040)) 12:35:53 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:53 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {}, {}, 0x0, 0x80}) 12:35:53 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 12:35:53 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x35000000, 0x0, &(0x7f0000000000)) 12:35:54 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:54 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) 12:35:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:54 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x35010000, 0x0, &(0x7f0000000000)) 12:35:54 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x8001) 12:35:54 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x2) 12:35:54 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x36000000, 0x0, &(0x7f0000000000)) 12:35:54 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"]) shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000100)=""/233) [ 3135.242921][T32627] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present 12:35:54 executing program 5: ptrace$getenv(0x4201, 0x0, 0x3, &(0x7f00000000c0)) r0 = fcntl$getown(0xffffffffffffffff, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{0x9, 0x6, 0x4, 0xffffffff, '\x00', 0x10001}, 0x3, 0x2, 0x3f, r0, 0x3, 0x1, 'syz1\x00', &(0x7f0000000100)=['/dev/full\x00', '/dev/full\x00', '\x00'], 0x15, '\x00', [0x9, 0x1, 0x80, 0x40]}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) recvmmsg(r1, &(0x7f0000002400)=[{{&(0x7f00000002c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)=""/231, 0xe7}], 0x1, &(0x7f0000000440)}, 0x20}, {{&(0x7f0000000480)=@ax25={{0x3, @rose}, [@bcast, @rose, @netrom, @netrom, @bcast, @null, @rose, @rose]}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)=""/191, 0xbf}, {&(0x7f00000005c0)=""/83, 0x53}], 0x2, &(0x7f0000000680)=""/43, 0x2b}, 0x7f}, {{&(0x7f00000006c0)=@ipx, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/227, 0xe3}, {&(0x7f0000000840)=""/2, 0x2}, {&(0x7f0000000880)=""/40, 0x28}, {&(0x7f00000008c0)=""/73, 0x49}, {&(0x7f0000000940)=""/119, 0x77}, {&(0x7f00000009c0)=""/38, 0x26}], 0x6, &(0x7f0000000a80)=""/219, 0xdb}, 0x2}, {{&(0x7f0000000b80)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000c00)}], 0x1}, 0xab1}, {{&(0x7f0000000c80)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000d00)=""/137, 0x89}, {&(0x7f0000000dc0)=""/102, 0x66}, {&(0x7f0000000e40)=""/159, 0x9f}], 0x3, &(0x7f0000000f40)=""/46, 0x2e}}, {{0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000f80)=""/209, 0xd1}, {&(0x7f0000001080)=""/195, 0xc3}, {&(0x7f0000001180)=""/162, 0xa2}, {&(0x7f0000001240)=""/6, 0x6}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/83, 0x53}], 0x6, &(0x7f0000002380)=""/128, 0x80}, 0x3}], 0x6, 0x10001, &(0x7f00000025c0)) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000440), &(0x7f0000000280)=0x30a6) 12:35:54 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000140)={0x4, 0x1, &(0x7f0000000000)=[0x0], &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 12:35:54 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) 12:35:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:54 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x36010000, 0x0, &(0x7f0000000000)) 12:35:54 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0xf}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10040, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000080)={{0x1, 0x8}, 0x2}, 0x10) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) 12:35:54 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x800000000008) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 12:35:54 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:54 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x37000000, 0x0, &(0x7f0000000000)) [ 3135.534393][T32651] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present 12:35:54 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) read$fb(r1, &(0x7f0000000000)=""/213, 0xd5) 12:35:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, r1, 0x1, 0x0, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:54 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x400180) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) shmctl$IPC_RMID(r0, 0x0) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000080)=""/34) 12:35:54 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) socket(0x27, 0x800, 0x8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)={0x2, 0x3, 0x4, 0x1000, 0x72, {r2, r3/1000+60000}, {0x1, 0x2, 0x3f, 0x4, 0x0, 0x44, "207c4dce"}, 0xffffffff, 0x3, @userptr=0x2, 0x37, 0x0, 0xffffffffffffffff}) r5 = fcntl$getown(r4, 0x9) ptrace$getenv(0x4201, r5, 0x1, &(0x7f0000000080)) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg$802154_raw(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000001c0)={&(0x7f0000000240)="4d5da219bfda9ff36a6686155d3bf9b011294d666d99e9dd9420936f9e3d092680cefcfb177b880b9d64e83b2eb3878f1eddb5605a3ba26770cc49cc038f791b4e82a888455483b16d6cd32500ef2264738330d31d4528b55f9a4c44db676d7f7490876b166e1ad75f8124b1da24f7e68fa16185cca2", 0x76}, 0x1, 0x0, 0x0, 0x8000810}, 0x4004040) ioctl$UI_BEGIN_FF_ERASE(r6, 0xc00c55ca, &(0x7f0000000040)={0x2, 0x1000, 0x3ff}) prctl$PR_SET_KEEPCAPS(0x8, 0xfffffffffffffffe) 12:35:54 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/166) 12:35:54 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x37010000, 0x0, &(0x7f0000000000)) 12:35:54 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x2f, 0xdf, 0x3f, 0x66, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x7, 0x7b08}}) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r5, 0x800443d2, &(0x7f0000000500)={0x8, &(0x7f0000000440)=[{@none}, {@fixed}, {@none}, {@none}, {@fixed}, {@fixed}, {@none}, {@fixed}]}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000400)) getsockname(r4, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80) getresuid(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000000)) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:54 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, r1, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:54 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) syz_open_dev$media(&(0x7f0000000040), 0x80000000, 0x400) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000080)={0x8}, 0x8) 12:35:54 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x38000000, 0x0, &(0x7f0000000000)) 12:35:54 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0xa04100, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) read$qrtrtun(r1, &(0x7f0000000240)=""/252, 0xfc) clock_getres(0x2, &(0x7f0000000000)) 12:35:55 executing program 5: r0 = shmget(0x3, 0x3000, 0x10, &(0x7f0000ffc000/0x3000)=nil) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002140)=0x0) syz_io_uring_setup(0x3946, &(0x7f0000002080)={0x0, 0x8943, 0x8, 0x2, 0x39}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000000000), &(0x7f0000002100)) shmctl$IPC_SET(r0, 0x1, &(0x7f0000002180)={{0x1, r1, 0xee01, 0x0, 0x0, 0x108, 0x6}, 0x4, 0x6, 0x4, 0x4, 0xffffffffffffffff, r2, 0x2}) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000002200)=""/222) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 12:35:55 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, r1, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x9dc, 0xfff7, 0x3]}) 12:35:55 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x2f, 0xdf, 0x3f, 0x66, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x7, 0x7b08}}) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r5, 0x800443d2, &(0x7f0000000500)={0x8, &(0x7f0000000440)=[{@none}, {@fixed}, {@none}, {@none}, {@fixed}, {@fixed}, {@none}, {@fixed}]}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000400)) getsockname(r4, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80) getresuid(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000000)) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:55 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x38010000, 0x0, &(0x7f0000000000)) 12:35:55 executing program 2: ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000000)=0x2) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:35:55 executing program 3: prctl$PR_MCE_KILL(0x29, 0x0, 0x2) getrusage(0x1, &(0x7f0000000000)) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000300)=@isdn, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)=""/200, 0xc8}, {&(0x7f0000000480)=""/214, 0xd6}, {&(0x7f0000000580)=""/47, 0x2f}, {&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000000640)=""/2, 0x2}], 0x5}, 0x9}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000700)}, {&(0x7f0000000740)=""/59, 0x3b}, {&(0x7f0000000780)=""/7, 0x7}, {&(0x7f00000007c0)=""/195, 0xc3}, {&(0x7f00000008c0)=""/197, 0xc5}], 0x5, &(0x7f0000000a40)=""/200, 0xc8}, 0x1}, {{&(0x7f0000000b40)=@can, 0x80, &(0x7f0000000bc0), 0x0, &(0x7f0000000c00)}, 0x7fffffff}, {{&(0x7f0000000c40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000cc0)=""/33, 0x21}, {&(0x7f0000000d00)=""/5, 0x5}, {&(0x7f0000000d40)=""/102, 0x66}], 0x3, &(0x7f0000000e00)=""/215, 0xd7}, 0xf5}], 0x4, 0xcefae6de1eb51c7b, &(0x7f0000001000)={0x0, 0x3938700}) 12:35:55 executing program 5: r0 = getpgrp(0xffffffffffffffff) r1 = gettid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000000)={{0x0, 0xee00, 0xee01, 0xee00, 0xee00, 0x140, 0xff}, 0xedf6, 0xb24, 0x1, 0x1, r0, r1, 0x357d}) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) 12:35:55 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, r1, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x9dc, 0xfff7]}) 12:35:55 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x2f, 0xdf, 0x3f, 0x66, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x7, 0x7b08}}) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r5, 0x800443d2, &(0x7f0000000500)={0x8, &(0x7f0000000440)=[{@none}, {@fixed}, {@none}, {@none}, {@fixed}, {@fixed}, {@none}, {@fixed}]}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000400)) getsockname(r4, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80) getresuid(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000000)) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:55 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x39000000, 0x0, &(0x7f0000000000)) 12:35:55 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0xe480, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000140)={0x8, 0x4, 0x0, 0xffffffa9, &(0x7f0000000040)=[{}, {}, {}, {}]}) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000001c0)=ANY=[@ANYBLOB="0700000081000000093b0933c05598468ee563f94b135fc5b3e7fa3aaf638d6469986e6edc8eb271ebc59b860d4189213c49a4025af283fc06d7917c70612810e03342159aa30b342fb05ec9b9c34beb1714d1856444cb196e4e5c1b69c4778b9a0ab7b8a7402241c345ed0c98f5b9891bc0697fa7d023c6a2ddd5370053161a092b"]) 12:35:55 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000040)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SNAPSHOT_PLATFORM_SUPPORT(r1, 0x330f, 0x7f) 12:35:55 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x18800, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x8000, 0xc, 0x4, 0x71002, 0x9, {}, {0x3, 0x0, 0x20, 0x6, 0x8, 0x81, '!F%i'}, 0x570c, 0x1, @offset=0x6, 0xfff, 0x0, r1}) 12:35:55 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, r1, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x9dc]}) 12:35:55 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x39010000, 0x0, &(0x7f0000000000)) 12:35:55 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x2f, 0xdf, 0x3f, 0x66, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x7, 0x7b08}}) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r5, 0x800443d2, &(0x7f0000000500)={0x8, &(0x7f0000000440)=[{@none}, {@fixed}, {@none}, {@none}, {@fixed}, {@fixed}, {@none}, {@fixed}]}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000400)) getsockname(r4, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80) getresuid(&(0x7f00000000c0), &(0x7f0000000240), &(0x7f0000000000)) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:55 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0xdc833325e2315122) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) 12:35:55 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000100)={0x20, 0xfffffffffffffff5, 0x0, {0x94, 0x132567a8be2389a, 0x80f1fe, 0xfffffffe}}, 0x20) mount$fuseblk(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80000, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x3}}, {@max_read={'max_read', 0x3d, 0x7fff}}, {@max_read={'max_read', 0x3d, 0x100}}, {@max_read={'max_read', 0x3d, 0xf8}}, {@default_permissions}, {@allow_other}], [{@audit}, {@obj_type={'obj_type', 0x3d, '/dev/loop0\x00'}}]}}) shmget$private(0x0, 0x3000, 0x100, &(0x7f0000ffa000/0x3000)=nil) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000280)={r1, 0x0, 0x1000000000000, 0xfffffffff0000000}) read$qrtrtun(0xffffffffffffffff, &(0x7f0000000240)=""/57, 0x39) 12:35:55 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000000)) 12:35:55 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, r1, 0x0, 0x0, 'syz0\x00', 0x0}) 12:35:55 executing program 3: keyctl$set_reqkey_keyring(0xe, 0x1) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) syz_io_uring_setup(0x22cd, &(0x7f0000000040)={0x0, 0x5f26, 0x10, 0x0, 0x298}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:55 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3a000000, 0x0, &(0x7f0000000000)) 12:35:55 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 12:35:55 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) r0 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$getenv(0x4201, r0, 0x6, &(0x7f0000000000)) 12:35:55 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x2f, 0xdf, 0x3f, 0x66, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x7, 0x7b08}}) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r5, 0x800443d2, &(0x7f0000000500)={0x8, &(0x7f0000000440)=[{@none}, {@fixed}, {@none}, {@none}, {@fixed}, {@fixed}, {@none}, {@fixed}]}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000400)) getsockname(r4, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:55 executing program 3: ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:55 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r1 = fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, r1, 0x1, 0x0, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:55 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3a010000, 0x0, &(0x7f0000000000)) 12:35:55 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x3) 12:35:55 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 12:35:56 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x2f, 0xdf, 0x3f, 0x66, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x7, 0x7b08}}) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r5, 0x800443d2, &(0x7f0000000500)={0x8, &(0x7f0000000440)=[{@none}, {@fixed}, {@none}, {@none}, {@fixed}, {@fixed}, {@none}, {@fixed}]}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000400)) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:56 executing program 3: r0 = getpgrp(0xffffffffffffffff) sched_getparam(r0, &(0x7f00000000c0)) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) shmget(0x1, 0x3000, 0x100, &(0x7f0000ffc000/0x3000)=nil) shmget(0x2, 0x2000, 0x20, &(0x7f0000ffe000/0x2000)=nil) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000080)={0x1}, 0x4) 12:35:56 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3b000000, 0x0, &(0x7f0000000000)) 12:35:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:56 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0xffffffffffffffff) 12:35:56 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) epoll_create(0x6) 12:35:56 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3b010000, 0x0, &(0x7f0000000000)) 12:35:56 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x2f, 0xdf, 0x3f, 0x66, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x7, 0x7b08}}) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r5, 0x800443d2, &(0x7f0000000500)={0x8, &(0x7f0000000440)=[{@none}, {@fixed}, {@none}, {@none}, {@fixed}, {@fixed}, {@none}, {@fixed}]}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2040, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:56 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) rt_sigsuspend(&(0x7f0000000000)={[0x5]}, 0x8) getpgid(0x0) 12:35:56 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000100), 0x3, 0x42c000) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000040)) [ 3137.253724][ T312] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present 12:35:56 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) bind$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) 12:35:56 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3c000000, 0x0, &(0x7f0000000000)) 12:35:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:56 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x2f, 0xdf, 0x3f, 0x66, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x7, 0x7b08}}) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r5, 0x800443d2, &(0x7f0000000500)={0x8, &(0x7f0000000440)=[{@none}, {@fixed}, {@none}, {@none}, {@fixed}, {@fixed}, {@none}, {@fixed}]}) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:56 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) 12:35:56 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x2f, 0xdf, 0x3f, 0x66, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x7, 0x7b08}}) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r5, 0x89f7, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:56 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4400, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000100)={0x17}, 0x4) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000040)=0x62a) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0xa1e}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f00000000c0)=0x6) modify_ldt$write2(0x11, &(0x7f0000000180)={0x55, 0x100000, 0x2000, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}, 0x10) 12:35:56 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3c010000, 0x0, &(0x7f0000000000)) [ 3137.546491][ T338] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present 12:35:56 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) ptrace$cont(0x1f, 0xffffffffffffffff, 0xb707, 0x9) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000040)={{0xffff, 0xa71}, 0x36}, 0x10) 12:35:56 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) fork() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) [ 3137.748498][ T350] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present 12:35:57 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040)=0x8000, 0x4) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x2) 12:35:57 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3d000000, 0x0, &(0x7f0000000000)) 12:35:57 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x800}, 0xffffffffffffffd5) shmdt(0x0) 12:35:57 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x2f, 0xdf, 0x3f, 0x66, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x7, 0x7b08}}) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:57 executing program 3: ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000080)) prctl$PR_MCE_KILL(0x29, 0x0, 0x1) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x1ff, 0x8}, 0xc) 12:35:57 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:57 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3d010000, 0x0, &(0x7f0000000000)) [ 3138.267919][ T366] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present 12:35:57 executing program 3: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000000)=0x44) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) 12:35:57 executing program 2: getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4000, @fd=r0, 0x1, 0x7d823d88, 0x7fff, 0x9, 0x1, {0x2}}, 0xb6d3) 12:35:57 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x2f, 0xdf, 0x3f, 0x66, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x7, 0x7b08}}) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:57 executing program 4: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:57 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0xffffffe) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={0x0, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @llc={0x1a, 0x307, 0xa4, 0x1, 0x65, 0x2}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, 0x3ff, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='ip6gretap0\x00', 0x10000, 0x0, 0x8}) getgid() seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x8}]}) syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socketpair(0x2b, 0x800, 0x1, &(0x7f0000000180)) 12:35:57 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000040), 0x9, 0x0) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x1) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:35:57 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3e000000, 0x0, &(0x7f0000000000)) 12:35:57 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x2f, 0xdf, 0x3f, 0x66, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x7, 0x7b08}}) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:57 executing program 4: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:57 executing program 3: clock_gettime(0x6, &(0x7f0000000000)={0x0, 0x0}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f00000001c0)={0x6, &(0x7f0000000140)=[{@none}, {@none}, {@fixed}, {@fixed}, {@none}, {}]}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000080)={0x1ff, 0x0, 0x4, 0x10820, 0xb6cb, {r0, r1/1000+10000}, {0x4, 0x8, 0x0, 0x1f, 0x6, 0xfa, "e314bc51"}, 0x8, 0x4, @planes=&(0x7f0000000100)={0x5, 0x0, @userptr, 0x80000000}, 0x3}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) bind$802154_raw(r3, &(0x7f0000000280)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000240)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) 12:35:57 executing program 5: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000040)) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) 12:35:57 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000002d40), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000002f80)={'ip6tnl0\x00', &(0x7f0000002f00)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0xff, 0x80, 0x3e, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000, 0x80, 0x1, 0x1}}) socket(0x1e, 0x0, 0x9) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$can_j1939(r0, &(0x7f0000002fc0)={0x1d, r1, 0x1, {0x1, 0xf0, 0x4}, 0x2}, 0x18) 12:35:57 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3e010000, 0x0, &(0x7f0000000000)) 12:35:57 executing program 4: ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:57 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x2f, 0xdf, 0x3f, 0x66, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x7, 0x7b08}}) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:57 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000001c0)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x101802, 0x0) pselect6(0x40, &(0x7f0000000040)={0x9, 0x1000, 0x4, 0x80800, 0x0, 0x7, 0x23, 0xfffffffffffff567}, &(0x7f0000000280)={0x20000d3, 0xff, 0x1ff, 0x6, 0xfff, 0x0, 0xf8f, 0xfff}, &(0x7f00000000c0)={0xffffffff, 0x2, 0x0, 0x22b, 0xfffffffffffffc05, 0x3c71, 0x8, 0x26}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x1]}, 0x8}) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x148) 12:35:57 executing program 5: r0 = shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x800) shmdt(r0) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) 12:35:57 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3f000000, 0x0, &(0x7f0000000000)) 12:35:57 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x1) 12:35:57 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:57 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x2f, 0xdf, 0x3f, 0x66, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x7, 0x7b08}}) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:58 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x3f010000, 0x0, &(0x7f0000000000)) 12:35:58 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x1) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x3ff}, 0x8) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:58 executing program 2: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x5, 0x40, 0x20, @mcast2, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x10, 0x20, 0x495, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', r0, 0x29, 0x1, 0x0, 0x1, 0x48, @private2, @loopback, 0x1, 0x7, 0x9, 0x400}}) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000000)={0x400, 0x280, 0x30, 0x20, 0xffffffe0, 0x1, 0x0, 0x1, {0x2400000, 0x100, 0x1}, {0x8000, 0x6}, {0x37f0, 0xfffffff7}, {0x3, 0x1}, 0x0, 0x10, 0x3, 0xb34, 0x0, 0x6, 0x2, 0x3, 0x1, 0x5, 0x401, 0x3f, 0x2, 0x0, 0x1, 0x1}) 12:35:58 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x0, {0x1, 0x0, 0x2}, 0x1}, 0x18) 12:35:58 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:58 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x2f, 0xdf, 0x3f, 0x66, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x7, 0x7b08}}) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:58 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:58 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x40000000, 0x0, &(0x7f0000000000)) 12:35:58 executing program 3: setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) prctl$PR_MCE_KILL(0x29, 0x1, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x8775e830675e127, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 12:35:58 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000040)) 12:35:58 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x3) 12:35:58 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x2f, 0xdf, 0x3f, 0x66, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x1, 0x7, 0x7b08}}) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:58 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:58 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x40010000, 0x0, &(0x7f0000000000)) 12:35:58 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x200, 0x200000) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x4, 0x4, 0x400, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:35:58 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 12:35:58 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 12:35:58 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) r3 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:58 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:58 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x1) 12:35:58 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x0) 12:35:58 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x41000000, 0x0, &(0x7f0000000000)) 12:35:58 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:58 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:58 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:58 executing program 5: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x4802c0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)=0x14) prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) 12:35:58 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000000)) prctl$PR_SET_KEEPCAPS(0x17, 0x1) 12:35:58 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x41010000, 0x0, &(0x7f0000000000)) 12:35:58 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000040)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:58 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:58 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 12:35:58 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x42000000, 0x0, &(0x7f0000000000)) 12:35:59 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) modify_ldt$write2(0x11, &(0x7f0000000040)={0x9, 0xffffffffffffefff, 0x1000, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) 12:35:59 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 12:35:59 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:59 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x1) 12:35:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 12:35:59 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x42010000, 0x0, &(0x7f0000000000)) 12:35:59 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) 12:35:59 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:59 executing program 5: prctl$PR_SET_KEEPCAPS(0x8, 0x400000001) modify_ldt$write2(0x11, &(0x7f0000000000)={0x8, 0x0, 0x2000, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) read$qrtrtun(0xffffffffffffffff, &(0x7f0000000040)=""/126, 0x7e) 12:35:59 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x0) epoll_create(0x7) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@none, 0xbde}) 12:35:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 12:35:59 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 12:35:59 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:59 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) syz_open_dev$mouse(&(0x7f00000000c0), 0x4, 0x54102) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000140)) socketpair(0x3, 0x6, 0x88d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r2, 0x89f7, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000100)=0x5, 0x4) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x1, {0x2, 0x1, 0x4}, 0x2}, 0x18) 12:35:59 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000540), 0x40000) write$qrtrtun(r1, &(0x7f0000000580)="f67a3358d5bfef9264f20c365f37e470bbbeb03cbe04e9c8af1b309baaab83bb22bd63f3fb9728db7a4397393aea97af7f8b24c65baec1db999678bf4b667b07371da8f46b03a847991355dcca8cd63ec256c968e3bc8e7744d386cc01", 0x5d) openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:59 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x43000000, 0x0, &(0x7f0000000000)) 12:35:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:59 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0xffffdffffffffffc) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 12:35:59 executing program 3: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000180)={0x0, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @l2tp={0x2, 0x0, @loopback, 0x7}, @ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)='gretap0\x00', 0x14d, 0x4, 0xead}) prctl$PR_MCE_KILL(0x29, 0x1, 0x3) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f0000000080)=0x2) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 12:35:59 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x43010000, 0x0, &(0x7f0000000000)) 12:35:59 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 12:35:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:59 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x8c0, 0x0) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:59 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x0) 12:35:59 executing program 3: prctl$PR_MCE_KILL(0x29, 0x0, 0x1) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)={0x2, 0x6f, "b2dba2e6f37a37a451c54c13a747948d2567406d620e4c28a4e00dc5098386b88db46a41c0cefefd8f178dcce83ecc115005489b422f36f8c69cbe77c0e8f9bbefa6f0c12164d8b981a9de67fd64de40988c20cdc0e3062994344ae60faa1e515f91105a3620b0189bc96070aedbd2"}) socket(0x0, 0x4, 0x5) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000100), &(0x7f00000000c0)=0x4) epoll_create(0x4cdd) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:35:59 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x44000000, 0x0, &(0x7f0000000000)) 12:35:59 executing program 5: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x200, 0x200000) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x4, 0x4, 0x400, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:35:59 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:59 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x4, &(0x7f0000000000)=0x1) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:35:59 executing program 5: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x200, 0x200000) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x4, 0x4, 0x400, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:35:59 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x44010000, 0x0, &(0x7f0000000000)) 12:35:59 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:35:59 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x0) 12:35:59 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x0, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:35:59 executing program 3: ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, &(0x7f0000000100)) r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000140)=0x8001, &(0x7f0000000180)=0x2) read$qrtrtun(0xffffffffffffffff, &(0x7f0000000280)=""/65, 0x41) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f00000001c0)={0x10, 0xfe}, 0x2) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f00000000c0)={0x2, &(0x7f0000000240)=[{@fixed}, {@none}]}) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x402100, 0x0) 12:36:00 executing program 5: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x200, 0x200000) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x4, 0x4, 0x400, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:00 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x45000000, 0x0, &(0x7f0000000000)) 12:36:00 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:36:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x0, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:36:00 executing program 2: clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x80000000, 0x100, 0xd200000000000000, 0x5, 0xffffffff7fffffff, 0x100, 0x3, 0x5}, &(0x7f0000000100)={0x3, 0x9, 0x5, 0x7fffffff, 0xfffffffffffffffb, 0x0, 0x4, 0xfffffffffffffffa}, &(0x7f0000000140)={0x80, 0x1, 0x0, 0x81, 0x800, 0x7fff, 0x8, 0x8}, &(0x7f00000001c0)={r2, r3+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0xffffffff, 0xb, 0x4, 0x100008, 0x3, {r0, r1/1000+10000}, {0x1, 0x6, 0x2, 0x7f, 0x0, 0x81, "a355e78d"}, 0x3, 0x3, @offset=0x6, 0x1, 0x0, 0xffffffffffffffff}) ioctl$MEDIA_REQUEST_IOC_QUEUE(r4, 0x7c80, 0x0) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:36:00 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) r0 = fork() r1 = fork() rt_tgsigqueueinfo(0x0, r1, 0x0, &(0x7f0000000140)) r2 = fork() rt_tgsigqueueinfo(0x0, r2, 0x0, &(0x7f0000000140)) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0) rt_tgsigqueueinfo(r2, r1, 0x38, &(0x7f00000000c0)={0x12, 0x5, 0x200}) ptrace$cont(0x20, r1, 0x8, 0xed5) r3 = fork() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f0000000040)={0x0, 0xd73}) getpgid(r0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:36:00 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x45010000, 0x0, &(0x7f0000000000)) 12:36:00 executing program 5: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x200, 0x200000) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x4, 0x4, 0x400, r0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:00 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:36:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x0, 0x0, 0x1, 0x7fffffff, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:36:00 executing program 2: ioprio_get$pid(0x1, 0xffffffffffffffff) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:36:00 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x46000000, 0x0, &(0x7f0000000000)) 12:36:00 executing program 5: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x4, 0x4, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:00 executing program 0: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:36:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f00000000c0)=['/dev/full\x00'], 0xa, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:36:00 executing program 3: socketpair(0x10, 0x800, 0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x4) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:36:00 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x0) 12:36:00 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x46010000, 0x0, &(0x7f0000000000)) 12:36:00 executing program 0: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) [ 3141.505641][ T620] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present 12:36:00 executing program 5: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x4, 0x4, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:00 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 12:36:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:36:00 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f0000005980)=[{{&(0x7f00000000c0)=@alg, 0x80, &(0x7f0000000680)=[{&(0x7f0000000140)=""/241, 0xf1}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000340)=""/164, 0xa4}, {&(0x7f0000000400)=""/208, 0xd0}, {&(0x7f0000000500)=""/162, 0xa2}, {&(0x7f00000005c0)=""/160, 0xa0}], 0x6, &(0x7f0000000700)=""/102, 0x66}, 0x4}, {{&(0x7f0000000780)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000800)=""/103, 0x67}, {&(0x7f0000000040)=""/13, 0xd}, {&(0x7f0000000880)=""/150, 0x96}, {&(0x7f0000000940)=""/149, 0x95}, {&(0x7f0000000a00)=""/120, 0x78}], 0x5, &(0x7f0000000b00)=""/157, 0x9d}, 0x2}, {{&(0x7f0000000bc0)=@ieee802154, 0x80, &(0x7f0000001200)=[{&(0x7f0000000c40)=""/173, 0xad}, {&(0x7f0000000d00)=""/76, 0x4c}, {&(0x7f0000000d80)=""/60, 0x3c}, {&(0x7f0000000dc0)=""/114, 0x72}, {&(0x7f0000000e40)=""/229, 0xe5}, {&(0x7f0000000f40)=""/73, 0x49}, {&(0x7f0000000fc0)=""/121, 0x79}, {&(0x7f0000001040)=""/214, 0xd6}, {&(0x7f0000001140)=""/157, 0x9d}], 0x9, &(0x7f00000012c0)=""/178, 0xb2}, 0xff}, {{&(0x7f0000001380)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001400)=""/128, 0x80}, {&(0x7f0000001480)=""/26, 0x1a}, {&(0x7f00000014c0)=""/163, 0xa3}, {&(0x7f0000001580)=""/250, 0xfa}, {&(0x7f0000001680)=""/15, 0xf}], 0x5}, 0x4}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000002740)=""/208, 0xd0}, {&(0x7f0000002840)=""/167, 0xa7}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000004900)=""/89, 0x59}], 0x6, &(0x7f0000004a00)=""/115, 0x73}, 0x3}, {{&(0x7f0000004a80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004b00)=""/10, 0xa}, {&(0x7f0000004b40)=""/253, 0xfd}], 0x2}}, {{0x0, 0x0, &(0x7f0000004f80)=[{&(0x7f0000004c80)=""/22, 0x16}, {&(0x7f0000004cc0)=""/91, 0x5b}, {&(0x7f0000004d40)=""/222, 0xde}, {&(0x7f0000004e40)=""/245, 0xf5}, {&(0x7f0000004f40)=""/52, 0x34}], 0x5}, 0x1f}, {{&(0x7f0000005000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000005580)=[{&(0x7f0000005080)=""/109, 0x6d}, {&(0x7f0000005100)=""/233, 0xe9}, {&(0x7f0000005200)=""/234, 0xea}, {&(0x7f0000005300)=""/47, 0x2f}, {&(0x7f0000005340)=""/146, 0x92}, {&(0x7f0000005400)=""/249, 0xf9}, {&(0x7f0000005500)=""/21, 0x15}, {&(0x7f0000005540)=""/46, 0x2e}], 0x8, &(0x7f0000005600)=""/50, 0x32}, 0x7}, {{&(0x7f0000005640)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000005900)=[{&(0x7f00000056c0)=""/18, 0x12}, {&(0x7f0000005700)=""/255, 0xff}, {&(0x7f0000005800)=""/2, 0x2}, {&(0x7f0000005840)=""/25, 0x19}, {&(0x7f0000005880)=""/118, 0x76}], 0x5}, 0x2}], 0x9, 0x40000000, &(0x7f0000005bc0)={0x77359400}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000005c00)={0x1d, r2, 0x1, {0x2, 0xf0, 0x3}, 0xfe}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000005cc0)={'sit0\x00', &(0x7f0000005c40)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x7, 0x7f, 0x32, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x700, 0x8, 0x40, 0x5}}) sendmsg$can_j1939(r0, &(0x7f0000005dc0)={&(0x7f0000005d00)={0x1d, r3, 0x2, {0x0, 0xf0, 0x2}, 0x1}, 0x18, &(0x7f0000005d80)={&(0x7f0000005d40)="0fcb3a23a65c9f544c9b3a74e89b06b6f0041a10814d852e32", 0x19}, 0x1, 0x0, 0x0, 0x40080}, 0x48000) syz_open_dev$sndctrl(&(0x7f0000000080), 0x7f80000, 0x200000) 12:36:00 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x47000000, 0x0, &(0x7f0000000000)) 12:36:00 executing program 0: openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) [ 3141.688185][ T632] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present 12:36:00 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x9dc, 0xfff7, 0x3, 0x8d]}) 12:36:00 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 12:36:00 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x4, 0x4, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:00 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0xb1, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r0, 0x1c, 0x10}, 0xc) 12:36:00 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 12:36:00 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x47010000, 0x0, &(0x7f0000000000)) [ 3141.885572][ T647] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present 12:36:01 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f00000000c0)) 12:36:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x9dc, 0xfff7, 0x3]}) 12:36:01 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 12:36:01 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:36:01 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 12:36:01 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0xfffffffffffffff8) 12:36:01 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x48000000, 0x0, &(0x7f0000000000)) [ 3142.091843][ T662] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present 12:36:01 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0) 12:36:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x9dc, 0xfff7]}) 12:36:01 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 12:36:01 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) socket(0x3, 0x2, 0xfffff800) 12:36:01 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:36:01 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x48010000, 0x0, &(0x7f0000000000)) [ 3142.283359][ T676] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present 12:36:01 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:36:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x9dc, 0xfff7]}) 12:36:01 executing program 2: socketpair(0x25, 0x800, 0x79, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$rose(r0, &(0x7f0000000040)=@full={0xb, @dev, @default, 0x0, [@default, @null, @netrom, @bcast, @rose, @null]}, &(0x7f0000000080)=0x40, 0x80000) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) socket$bt_hidp(0x1f, 0x3, 0x6) 12:36:01 executing program 5: bpf$MAP_CREATE(0x0, 0x0, 0x0) 12:36:01 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x49000000, 0x0, &(0x7f0000000000)) 12:36:01 executing program 3: prctl$PR_MCE_KILL(0x29, 0x0, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) [ 3142.458128][ T691] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present 12:36:01 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:36:01 executing program 2: ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:36:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0x0, '\x00', [0x9dc]}) [ 3142.562542][ T3246] ieee802154 phy0 wpan0: encryption failed: -22 [ 3142.569026][ T3246] ieee802154 phy1 wpan1: encryption failed: -22 12:36:01 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x49010000, 0x0, &(0x7f0000000000)) 12:36:01 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000409) 12:36:01 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x10000) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:36:01 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) [ 3142.705786][ T706] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present 12:36:01 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x0) 12:36:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:01 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4a000000, 0x0, &(0x7f0000000000)) 12:36:01 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 12:36:01 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000140)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)) 12:36:01 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:36:01 executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x18, 0xffffffffffffffff, 0x6, 0x9) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) gettid() prctl$PR_SET_KEEPCAPS(0x8, 0x1) prctl$PR_SET_KEEPCAPS(0x8, 0x1) 12:36:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:02 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:36:02 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4a010000, 0x0, &(0x7f0000000000)) [ 3143.012267][ T732] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present 12:36:02 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000000)={{0x0, 0x40003}, 0x59}, 0x10) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x28080, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000080)=0x6, 0x4) 12:36:02 executing program 4: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x4, 0x4, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:02 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000080)={0x38e, 0x3, 0x4, 0x4000, 0x1, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x20, 0xdc, 0x8, "cd7ab243"}, 0x477, 0x1, @planes=&(0x7f0000000040)={0x3, 0x8, @userptr=0x5, 0x101}}) 12:36:02 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:36:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x0, 0x4, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:02 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4b000000, 0x0, &(0x7f0000000000)) 12:36:02 executing program 4: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x4, 0x4, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:02 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0xf) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) 12:36:02 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x0) 12:36:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x0, 0x0, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:02 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x1f}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:36:02 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4b010000, 0x0, &(0x7f0000000000)) 12:36:02 executing program 4: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x4, 0x4, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:02 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, 0x0) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000000)={0x10, 0x1}) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:36:02 executing program 3: socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$802154_raw(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)="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", 0xec1}}, 0x0) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:36:02 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x80000}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:36:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x0, 0x0, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:02 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4c000000, 0x0, &(0x7f0000000000)) 12:36:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x4, 0x4, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:02 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @xdp={0x2c, 0x0, 0x0, 0x1}, @tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x1}}, @ax25={0x3, @bcast}, 0x80, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='syzkaller1\x00', 0x1, 0x68, 0xfff8}) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 12:36:02 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:36:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x0, 0x0, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:02 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4c010000, 0x0, &(0x7f0000000000)) 12:36:02 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:36:02 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 12:36:02 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x1) 12:36:02 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:36:02 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:02 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4d000000, 0x0, &(0x7f0000000000)) 12:36:02 executing program 3: mlockall(0x2) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:36:02 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 12:36:02 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000000)) 12:36:03 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:36:03 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4d010000, 0x0, &(0x7f0000000000)) 12:36:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:03 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000dae000/0x3000)=nil) shmctl$IPC_RMID(r1, 0x0) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/246) prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) 12:36:03 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 12:36:03 executing program 3: seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000040)) prctl$PR_MCE_KILL(0x29, 0x1, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40040, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000080)) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000300), 0x210802, 0x0) write$FUSE_INIT(r0, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0xfffffffd, 0x514411, 0xff, 0x1, 0x5, 0x7fff0}}, 0x50) syz_io_uring_setup(0x76af, &(0x7f0000000100)={0x0, 0xfa2c, 0x10, 0x2, 0x351}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r3, 0x89f7, 0x0) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000002c0)) syz_io_uring_submit(0x0, r1, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x7, 0x0, r2, &(0x7f0000000240), r3, 0x1, 0x0, 0x1}, 0x2ee) 12:36:03 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4e000000, 0x0, &(0x7f0000000000)) 12:36:03 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7}) 12:36:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) 12:36:03 executing program 2: prctl$PR_SET_KEEPCAPS(0x17, 0x400000001) prctl$PR_SET_KEEPCAPS(0x8, 0x0) 12:36:03 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4e010000, 0x0, &(0x7f0000000000)) 12:36:03 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x2000, 0x100000000}) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f0000000000)) 12:36:03 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4f000000, 0x0, &(0x7f0000000000)) 12:36:03 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100}) 12:36:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:03 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xe, 0x0, 0x0, 0x4}, 0x40) 12:36:03 executing program 2: ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) r0 = fork() rt_tgsigqueueinfo(0x0, r0, 0x0, &(0x7f0000000140)) r1 = fork() r2 = fork() rt_tgsigqueueinfo(0x0, r2, 0x0, &(0x7f0000000140)) fork() ioprio_set$pid(0x1, r2, 0x2004) rt_tgsigqueueinfo(r0, r1, 0x20023, &(0x7f0000000000)={0x8, 0x4, 0x40}) 12:36:03 executing program 3: prctl$PR_MCE_KILL(0x29, 0x1, 0x0) write$fb(0xffffffffffffffff, &(0x7f0000000100)="1fb11d9931c872cda6a9842212dadf52b029fccfc210765f74ee4792abc46f0f0356236ddeb6f6aa70ba774aa6256d870259aae7cad60f24887ab35b2945aaddeff0bb76df9dc75c10a339a83c3bc5", 0x4f) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0xd1, 0x2002) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000080)={r0, 0x971}) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000000c0)) 12:36:03 executing program 1: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4f010000, 0x0, &(0x7f0000000000)) 12:36:03 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x400, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x40) 12:36:03 executing program 0: r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000300)={0x280, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x100}) 12:36:03 executing program 5: setresuid(0x0, 0xee00, 0x0) socketpair(0x2c, 0x4d010000, 0x0, &(0x7f0000000000)) [ 3144.620552][ T856] ================================================================== [ 3144.620635][ T856] BUG: KASAN: use-after-free in fb_mode_is_equal+0x284/0x2f0 [ 3144.620663][ T856] Read of size 4 at addr ffff8881d5a37f9c by task syz-executor.0/856 [ 3144.620680][ T856] [ 3144.620686][ T856] CPU: 0 PID: 856 Comm: syz-executor.0 Not tainted 5.13.0-rc2-syzkaller #0 [ 3144.620703][ T856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3144.620714][ T856] Call Trace: [ 3144.620723][ T856] dump_stack+0x141/0x1d7 [ 3144.620746][ T856] ? fb_mode_is_equal+0x284/0x2f0 [ 3144.620761][ T856] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 3144.620784][ T856] ? fb_mode_is_equal+0x284/0x2f0 [ 3144.620799][ T856] ? fb_mode_is_equal+0x284/0x2f0 [ 3144.620814][ T856] kasan_report.cold+0x7c/0xd8 [ 3144.620833][ T856] ? lockdep_hardirqs_on_prepare+0x3d0/0x400 [ 3144.620855][ T856] ? fb_mode_is_equal+0x284/0x2f0 [ 3144.620873][ T856] fb_mode_is_equal+0x284/0x2f0 [ 3144.620891][ T856] fbcon_mode_deleted+0x13d/0x1d0 [ 3144.620912][ T856] fb_set_var+0xae1/0xda0 [ 3144.620932][ T856] ? fb_blank+0x190/0x190 [ 3144.620950][ T856] ? lock_release+0x720/0x720 [ 3144.620991][ T856] ? do_fb_ioctl+0x2ee/0x690 [ 3144.621017][ T856] ? mutex_lock_io_nested+0xf70/0xf70 [ 3144.621039][ T856] ? lock_release+0x720/0x720 [ 3144.621059][ T856] ? lock_downgrade+0x6e0/0x6e0 [ 3144.621078][ T856] ? rwlock_bug.part.0+0x90/0x90 [ 3144.621094][ T856] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 3144.621119][ T856] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 3144.621149][ T856] do_fb_ioctl+0x2f9/0x690 [ 3144.621172][ T856] ? fb_getput_cmap+0x270/0x270 [ 3144.621191][ T856] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3144.621216][ T856] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 3144.621239][ T856] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 3144.621261][ T856] ? do_vfs_ioctl+0x132/0x15d0 [ 3144.621279][ T856] ? vfs_fileattr_set+0xb60/0xb60 [ 3144.621316][ T856] ? __fget_files+0x288/0x3d0 [ 3144.621337][ T856] fb_ioctl+0xe7/0x150 [ 3144.621359][ T856] ? do_fb_ioctl+0x690/0x690 [ 3144.621380][ T856] __x64_sys_ioctl+0x193/0x200 [ 3144.621399][ T856] do_syscall_64+0x3a/0xb0 [ 3144.621417][ T856] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3144.621441][ T856] RIP: 0033:0x4665d9 [ 3144.621456][ T856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3144.621473][ T856] RSP: 002b:00007f53802a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3144.621492][ T856] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 3144.621504][ T856] RDX: 0000000020000300 RSI: 0000000000004601 RDI: 0000000000000003 [ 3144.621518][ T856] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 3144.621531][ T856] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3144.621543][ T856] R13: 00007fff0589392f R14: 00007f53802a2300 R15: 0000000000022000 [ 3144.621574][ T856] [ 3144.621579][ T856] Allocated by task 9440: [ 3144.621589][ T856] kasan_save_stack+0x1b/0x40 [ 3144.621613][ T856] __kasan_kmalloc+0x9b/0xd0 [ 3144.621635][ T856] fb_add_videomode+0x2fb/0x610 [ 3144.621653][ T856] fb_set_var+0x631/0xda0 [ 3144.621670][ T856] do_fb_ioctl+0x2f9/0x690 [ 3144.621687][ T856] fb_ioctl+0xe7/0x150 [ 3144.621703][ T856] __x64_sys_ioctl+0x193/0x200 [ 3144.621720][ T856] do_syscall_64+0x3a/0xb0 [ 3144.621738][ T856] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3144.621755][ T856] [ 3144.621759][ T856] Freed by task 847: [ 3144.621767][ T856] kasan_save_stack+0x1b/0x40 [ 3144.621785][ T856] kasan_set_track+0x1c/0x30 [ 3144.621803][ T856] kasan_set_free_info+0x20/0x30 [ 3144.621818][ T856] __kasan_slab_free+0xfb/0x130 [ 3144.621833][ T856] slab_free_freelist_hook+0xdf/0x240 [ 3144.621851][ T856] kfree+0xe5/0x7f0 [ 3144.621867][ T856] fb_delete_videomode+0x3d2/0x570 [ 3144.621882][ T856] fb_set_var+0xaf1/0xda0 [ 3144.621898][ T856] do_fb_ioctl+0x2f9/0x690 [ 3144.621915][ T856] fb_ioctl+0xe7/0x150 [ 3144.621932][ T856] __x64_sys_ioctl+0x193/0x200 [ 3144.621946][ T856] do_syscall_64+0x3a/0xb0 [ 3144.621962][ T856] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3144.621979][ T856] [ 3144.621983][ T856] Last potentially related work creation: [ 3144.621990][ T856] kasan_save_stack+0x1b/0x40 [ 3144.622012][ T856] kasan_record_aux_stack+0xe5/0x110 [ 3144.622032][ T856] kvfree_call_rcu+0x74/0x8c0 [ 3144.622048][ T856] cfg80211_update_known_bss+0x833/0xa60 [ 3144.622069][ T856] cfg80211_bss_update+0xef/0x1e00 [ 3144.622089][ T856] cfg80211_inform_single_bss_frame_data+0x6e8/0xee0 [ 3144.622112][ T856] cfg80211_inform_bss_frame_data+0xa7/0xb10 [ 3144.622135][ T856] ieee80211_bss_info_update+0x3ce/0xb20 [ 3144.622160][ T856] ieee80211_rx_mgmt_probe_beacon+0xccd/0x16b0 [ 3144.622181][ T856] ieee80211_ibss_rx_queued_mgmt+0xe43/0x1870 [ 3144.622202][ T856] ieee80211_iface_work+0x761/0x9e0 [ 3144.622222][ T856] process_one_work+0x98d/0x1600 [ 3144.622244][ T856] worker_thread+0x64c/0x1120 [ 3144.622264][ T856] kthread+0x3b1/0x4a0 [ 3144.622282][ T856] ret_from_fork+0x1f/0x30 [ 3144.622304][ T856] [ 3144.622308][ T856] Second to last potentially related work creation: [ 3144.622315][ T856] kasan_save_stack+0x1b/0x40 [ 3144.622339][ T856] kasan_record_aux_stack+0xe5/0x110 [ 3144.622359][ T856] kvfree_call_rcu+0x74/0x8c0 [ 3144.622377][ T856] cfg80211_update_known_bss+0x833/0xa60 [ 3144.622399][ T856] cfg80211_bss_update+0xef/0x1e00 [ 3144.622421][ T856] cfg80211_inform_single_bss_frame_data+0x6e8/0xee0 [ 3144.622454][ T856] cfg80211_inform_bss_frame_data+0xa7/0xb10 [ 3144.622477][ T856] ieee80211_bss_info_update+0x3ce/0xb20 [ 3144.622501][ T856] ieee80211_rx_mgmt_probe_beacon+0xccd/0x16b0 [ 3144.622522][ T856] ieee80211_ibss_rx_queued_mgmt+0xe43/0x1870 [ 3144.622540][ T856] ieee80211_iface_work+0x761/0x9e0 [ 3144.622556][ T856] process_one_work+0x98d/0x1600 [ 3144.622573][ T856] worker_thread+0x64c/0x1120 [ 3144.622594][ T856] kthread+0x3b1/0x4a0 [ 3144.622609][ T856] ret_from_fork+0x1f/0x30 [ 3144.622625][ T856] [ 3144.622629][ T856] The buggy address belongs to the object at ffff8881d5a37f80 [ 3144.622629][ T856] which belongs to the cache kmalloc-96 of size 96 [ 3144.622643][ T856] The buggy address is located 28 bytes inside of [ 3144.622643][ T856] 96-byte region [ffff8881d5a37f80, ffff8881d5a37fe0) [ 3144.622659][ T856] The buggy address belongs to the page: [ 3144.622665][ T856] page:ffffea0007568dc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1d5a37 [ 3144.622684][ T856] flags: 0x57ff00000000200(slab|node=1|zone=2|lastcpupid=0x7ff) [ 3144.622709][ T856] raw: 057ff00000000200 dead000000000100 dead000000000122 ffff888011041780 [ 3144.622726][ T856] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 3144.622735][ T856] page dumped because: kasan: bad access detected [ 3144.622743][ T856] page_owner tracks the page as allocated [ 3144.622748][ T856] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY), pid 292, ts 2484284321912, free_ts 2484229480308 [ 3144.622773][ T856] get_page_from_freelist+0x1033/0x2b60 [ 3144.622792][ T856] __alloc_pages+0x1b2/0x500 [ 3144.622808][ T856] alloc_pages+0x18c/0x2a0 [ 3144.622821][ T856] allocate_slab+0x2c5/0x4c0 [ 3144.622839][ T856] ___slab_alloc+0x4a1/0x810 [ 3144.622856][ T856] __slab_alloc.constprop.0+0xa7/0xf0 [ 3144.622875][ T856] __kmalloc+0x315/0x330 [ 3144.622892][ T856] cfg80211_inform_single_bss_frame_data+0x302/0xee0 [ 3144.622912][ T856] cfg80211_inform_bss_frame_data+0xa7/0xb10 [ 3144.622930][ T856] ieee80211_bss_info_update+0x3ce/0xb20 [ 3144.622949][ T856] ieee80211_rx_mgmt_probe_beacon+0xccd/0x16b0 [ 3144.622966][ T856] ieee80211_ibss_rx_queued_mgmt+0xe43/0x1870 [ 3144.622985][ T856] ieee80211_iface_work+0x761/0x9e0 [ 3144.623004][ T856] process_one_work+0x98d/0x1600 [ 3144.623022][ T856] worker_thread+0x64c/0x1120 [ 3144.623039][ T856] kthread+0x3b1/0x4a0 [ 3144.623055][ T856] page last free stack trace: [ 3144.623062][ T856] free_pcp_prepare+0x223/0x300 [ 3144.623078][ T856] free_unref_page_list+0x19b/0x7c0 [ 3144.623094][ T856] release_pages+0x853/0x2120 [ 3144.623113][ T856] tlb_finish_mmu+0x165/0x8c0 [ 3144.623131][ T856] exit_mmap+0x2c2/0x590 [ 3144.623146][ T856] __mmput+0x122/0x470 [ 3144.623163][ T856] mmput+0x58/0x60 [ 3144.623178][ T856] do_exit+0xb0a/0x2a60 [ 3144.623192][ T856] do_group_exit+0x125/0x310 [ 3144.623207][ T856] get_signal+0x47f/0x2150 [ 3144.623223][ T856] arch_do_signal_or_restart+0x2a8/0x1eb0 [ 3144.623240][ T856] exit_to_user_mode_prepare+0x171/0x280 [ 3144.623259][ T856] syscall_exit_to_user_mode+0x19/0x60 [ 3144.623278][ T856] do_syscall_64+0x47/0xb0 [ 3144.623294][ T856] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3144.623311][ T856] [ 3144.623315][ T856] Memory state around the buggy address: [ 3144.623323][ T856] ffff8881d5a37e80: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 3144.623337][ T856] ffff8881d5a37f00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 3144.623349][ T856] >ffff8881d5a37f80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 3144.623360][ T856] ^ [ 3144.623371][ T856] ffff8881d5a38000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3144.623384][ T856] ffff8881d5a38080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 3144.623394][ T856] ================================================================== [ 3144.623400][ T856] Disabling lock debugging due to kernel taint [ 3144.629063][ T856] Kernel panic - not syncing: panic_on_warn set ... [ 3144.629078][ T856] CPU: 0 PID: 856 Comm: syz-executor.0 Tainted: G B 5.13.0-rc2-syzkaller #0 [ 3144.629100][ T856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 3144.629112][ T856] Call Trace: [ 3144.629118][ T856] dump_stack+0x141/0x1d7 [ 3144.629139][ T856] panic+0x306/0x73d [ 3144.629158][ T856] ? __warn_printk+0xf3/0xf3 [ 3144.629179][ T856] ? preempt_schedule_common+0x59/0xc0 [ 3144.629202][ T856] ? fb_mode_is_equal+0x284/0x2f0 [ 3144.629221][ T856] ? preempt_schedule_thunk+0x16/0x18 [ 3144.629243][ T856] ? trace_hardirqs_on+0x38/0x1c0 [ 3144.629262][ T856] ? trace_hardirqs_on+0x51/0x1c0 [ 3144.629280][ T856] ? fb_mode_is_equal+0x284/0x2f0 [ 3144.629298][ T856] ? fb_mode_is_equal+0x284/0x2f0 [ 3144.629317][ T856] end_report.cold+0x5a/0x5a [ 3144.629336][ T856] kasan_report.cold+0x6a/0xd8 [ 3144.629356][ T856] ? lockdep_hardirqs_on_prepare+0x3d0/0x400 [ 3144.629381][ T856] ? fb_mode_is_equal+0x284/0x2f0 [ 3144.629400][ T856] fb_mode_is_equal+0x284/0x2f0 [ 3144.629419][ T856] fbcon_mode_deleted+0x13d/0x1d0 [ 3144.629449][ T856] fb_set_var+0xae1/0xda0 [ 3144.629472][ T856] ? fb_blank+0x190/0x190 [ 3144.629492][ T856] ? lock_release+0x720/0x720 [ 3144.629518][ T856] ? do_fb_ioctl+0x2ee/0x690 [ 3144.629542][ T856] ? mutex_lock_io_nested+0xf70/0xf70 [ 3144.629566][ T856] ? lock_release+0x720/0x720 [ 3144.629589][ T856] ? lock_downgrade+0x6e0/0x6e0 [ 3144.629613][ T856] ? rwlock_bug.part.0+0x90/0x90 [ 3144.629632][ T856] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 3144.629657][ T856] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 3144.629685][ T856] do_fb_ioctl+0x2f9/0x690 [ 3144.629708][ T856] ? fb_getput_cmap+0x270/0x270 [ 3144.629729][ T856] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 3144.629751][ T856] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 3144.629778][ T856] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 3144.629804][ T856] ? do_vfs_ioctl+0x132/0x15d0 [ 3144.629824][ T856] ? vfs_fileattr_set+0xb60/0xb60 [ 3144.629849][ T856] ? __fget_files+0x288/0x3d0 [ 3144.629870][ T856] fb_ioctl+0xe7/0x150 [ 3144.629890][ T856] ? do_fb_ioctl+0x690/0x690 [ 3144.629912][ T856] __x64_sys_ioctl+0x193/0x200 [ 3144.629930][ T856] do_syscall_64+0x3a/0xb0 [ 3144.629949][ T856] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 3144.629970][ T856] RIP: 0033:0x4665d9 [ 3144.629985][ T856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 3144.630005][ T856] RSP: 002b:00007f53802a2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3144.630026][ T856] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665d9 [ 3144.630040][ T856] RDX: 0000000020000300 RSI: 0000000000004601 RDI: 0000000000000003 [ 3144.630054][ T856] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 3144.630067][ T856] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 3144.630081][ T856] R13: 00007fff0589392f R14: 00007f53802a2300 R15: 0000000000022000 [ 3144.633924][ T856] Kernel Offset: disabled [ 3145.830573][ T856] Rebooting in 86400 seconds..