39bebedfe4516faa64b7781a5a3f365707e29fc4221c4502791e8b9cc622274ed9b5a98e02eebc0d2ec054186623ffd02ac0afbf5e973267b3833104a1a315b0d2f44f6e79308a47089d4fbf923d107dd8b7e815ed"], 0x14}}, 0x0) 05:07:30 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$vcsa(&(0x7f0000000480)='/dev/vcsa#\x00', 0x9, 0x200000) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f00000004c0)={'raw\x00'}, &(0x7f0000000540)=0x54) write(r0, &(0x7f0000000040)="b63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cebc9bc2feffffffffffffffe22c9b160096aa1fae1a", 0x30) r4 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x24f7, 0x8000) ioctl$IMDELTIMER(r4, 0x80044941, &(0x7f0000000440)=0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000600)={{{@in=@broadcast, @in6=@rand_addr="bd1688aa4ad3bd05b77e3fb8c0023e6a", 0x4e21, 0x7, 0x4e20, 0x0, 0x2, 0x20, 0x0, 0xc, 0x0, r6}, {0x4000400000000, 0x7f, 0x6, 0x7, 0x70000000, 0x5, 0x401, 0x83a}, {0x8, 0x99c, 0x81, 0x2}, 0x9e90, 0x6e6bb1, 0x2, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, [], 0x1f}, 0x4d5, 0x2b}, 0x2, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3504, 0x2, 0x0, 0x2, 0x8, 0xc08, 0x7ff}}, 0xe8) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@local, @in=@broadcast, 0x4e22, 0x2, 0x4e23, 0x40000000, 0x2, 0xa0, 0xfc3c6b55c7b68034, 0xff, r5, r7}, {0x100, 0x6, 0x7, 0x5, 0x40, 0x9, 0x200, 0x4}, {0x7, 0xb6dd, 0x1, 0xffffffff}, 0x7f, 0x6e6bbd, 0x2, 0x1, 0x2}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0xa, @in6=@loopback, 0x3506, 0x0, 0x0, 0xfffffffffffffc00, 0x2, 0x7fffffff, 0xffff}}, 0xe8) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x5, 0x4) read(r0, 0x0, 0x0) accept4$x25(r2, &(0x7f0000000580), &(0x7f00000005c0)=0x12, 0x800) [ 271.970251][ T9333] mmap: syz-executor5 (9333) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 05:07:31 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x3ff, 0x0, 0x46, 0x1000}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000001c0)={r1, 0x8}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xfffffffffffffffe, @mcast1, 0x109}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getpriority(0x1, r2) r3 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x2, 0x2) ioctl$TIOCGLCKTRMIOS(r3, 0x5456, &(0x7f0000000240)={0xb010, 0xa1, 0xffff, 0x81, 0x1, 0x100000001, 0x6, 0x80000000, 0x2, 0xffff, 0x19, 0x6}) syz_extract_tcp_res(&(0x7f0000000300), 0x7fffffff, 0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0xfd90, 0x286c, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) 05:07:31 executing program 3: r0 = socket(0x22, 0x2, 0x4) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000080)={0x0, 0x5, 0xffffffffffffffc0, &(0x7f0000000040)=0x6}) bind$netlink(r1, 0x0, 0xfffffffffffffe6e) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0xa6ba0) fsetxattr$security_capability(r2, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x3, 0x1}]}, 0xc, 0x2) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r3, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000008040000, 0x3f00000000000759, 0x8, 0x1, 0x3, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f00000000c0)) fcntl$getown(r0, 0x9) mmap$perf(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x4, 0x1011, r2, 0x0) 05:07:31 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000240)=0x0) prlimit64(r1, 0xe, &(0x7f0000000280)={0x7ff, 0xf}, &(0x7f0000000300)) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x5, 0x4200) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x1, 0x8, 0x3f, 0x5, 0x80}, &(0x7f0000000580)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000005c0)={0x0, 0x5, 0xffffffffffffffe0, 0xffff, r3}, &(0x7f0000000600)=0x10) tee(0xffffffffffffffff, r0, 0x5, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x111}}, 0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x4, 0x10001, 0x0, 0x4, 0x40, 0xfffffffffffffe01, 0x7, 0x1000, r3}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000002c0), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') write(r2, &(0x7f0000000400)="d63ae1df06f0a33da4e81c0c8f7ff3f0173385e5f6ada8cdafd36758f9d04471488c6352c315a525c169a0bcbc5a84eef40999a7c34032a638f8056860a552a80ee09d636b0131578d886fad34a1c5109f44827762e709927b697ed69555350a10554b01fd98d187656ec38dfa", 0x6d) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4040}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfb}, 0x1c}}, 0x4000000) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00900, 0x1, &(0x7f0000000000), 0x1, 0x2000000000002) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000100)=0x1e) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000340)=ANY=[@ANYPTR], 0x1) dup(0xffffffffffffffff) 05:07:31 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f00000002c0)=""/246) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$EVIOCGREP(r1, 0x40047440, &(0x7f0000d1df52)=""/174) 05:07:31 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:31 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x80802, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000140)=0xfffe, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") timer_create(0x2, &(0x7f0000000380)={0x0, 0x28, 0xcee5626de609a6a4, @thr={&(0x7f0000000180)="45758e05f205152343eb702b11f31c102f350d7f23786f3b2f297ddddf70a0c31c596a6062db16db052a6e861be8de9008b9b8241aad38b7fe22efe0848b7a76c3a11dc07fc5ae683356133d38a743d6dbcf7b7e2218a835bf657e322349b63b67f3fffc8002b506ae7532dd7a273c2ffb61e21643d962ade7608cabc0e988c201af61a2", &(0x7f0000000080)="d5bf83e5c8bf"}}, &(0x7f00000003c0)=0x0) timer_delete(r3) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000400)={0x0, 0x233, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYRES16=r1, @ANYRES16=r2, @ANYRES16=r2], 0x3}, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) setrlimit(0xb, &(0x7f0000000440)={0x2, 0x10000}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000240)) 05:07:32 executing program 3: r0 = socket(0x22, 0x2, 0x4) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000080)={0x0, 0x5, 0xffffffffffffffc0, &(0x7f0000000040)=0x6}) bind$netlink(r1, 0x0, 0xfffffffffffffe6e) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0xa6ba0) fsetxattr$security_capability(r2, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x3, 0x1}]}, 0xc, 0x2) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r3, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000008040000, 0x3f00000000000759, 0x8, 0x1, 0x3, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f00000000c0)) fcntl$getown(r0, 0x9) mmap$perf(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x4, 0x1011, r2, 0x0) 05:07:32 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r3, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r5, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r6, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:32 executing program 0: clone(0x802182001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x24, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) exit(0x10000000003) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="73656375726974432e2f0012c03bd276aa3fd19ab6ab17a480a6ab1f7df805aed6b578626f35548bed75f8160ebf73b5d044decf0a6a5dca34daab90d3fba54cb5e2d0ac35b7a876a7e436ac8e2b53ef599eb3fc18902a6f24d339ba482c2753a330e55ecdb5b8e74b4ccbcda62e540856717f5c2fe03164220b8cd5"]) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_G_PRIORITY(r1, 0x80045643, 0x2) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x3, 0x40) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000200)=@int=0x3, 0x4) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000300)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x1002}) 05:07:32 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000200)=0x77e) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000180)={0x1, 0x0, 0x80, 0x1, 0x4, 0xffffffff}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) listen(r1, 0x50) syz_mount_image$btrfs(&(0x7f0000000480)='btrfs\x00', &(0x7f00000004c0)='./file0\x00', 0x6, 0x5, &(0x7f00000018c0)=[{&(0x7f0000000500)="7e4a5bfa226d86816f8f8b509f92981c1fabbfa2e18bf3cfcb06b8953a6d2c1aa79d7237d6cc832e76fdd23452ab1d0184cc7c98824b3894d47b422f933d58a66048748d655120ef7d693cb7d18bbc6137125edb37d32baa7e7cf100b0fc0324d06d5d7cb846ce023a8cb8b5f8f3eab722a06fa98149f06eb38ccbd0bfed0bd3a59c8cf3d614115df1096db32f44eaf1dfb37ec4072c07830c527e62e3fc8b1f6d928423ba2eceb26116bef4a3a473313ed98dc23934546819f9cfe79cbf2c5ecbd0491d64e1657abff716720d30ea03505137afcb9d47ceef3c5e47573817", 0xdf, 0x8000000000000000}, {&(0x7f0000000600)="252de566671d555ba5184903b2ea719826c93b982a5257d7c1f524516979fe668ccf530729db00fef826801a60a09faaca26cbf2449e8f181fd5b26d1814686ef70836b4f61c836ff4094b599763784418febfd4e4b44d60df8aa13c1b6714f7a080b0dfb4251292950cfa318c9d24c0034d18fe50b7b98be78e2ccd124bb9b7bd794d6c41aff0ecf1a284de72200cca7fe5b1af86740e8ad5a372012d8ba85d83cafbe02ccde2e8e2a2fe2ec2ede6fa39d17fe371cec26741db8db435831e345825c31e30a9d6d1e4d818d3977aac0622b843b2bd71cd083d3fdf74f22463f9189fcbcf432ad8fbaaa0169694a058bfd846ceede0808cde7a01bcc6b8e20a7f08809330510fb410e066b9baf8a770a03a9041b091c0cad721e3ab104be980f0e3c7f06cbf961711fd9b6e948bd146d96dcfa7767209b4e1f977c8a0844f1f3b45f52499a95a201416b858375a5451b7c355b69be437146302f99945e9abfec608ed87f46a3baf941cfc9e07fe494da175cbda10628f0590ddf0071d9f121e93508f9eb891e9d3d937a6310e59061a84bd760e87d96dc9978a63d95aabf64f82c8511a045ba3759256523cf44c661f7dd9c5f98f1e85734330562f647fe2dc63647688506f2e30fa799fb6c588612d9cb04a26741a34cda73e4154d11a657de793da6e3ca6a729efa9ade961bde2921686e4708abd4ffd7e973793ecaba5fd49c946f9fe32ca726b92f8c6c3f2bf6516d187e3762cdd2f21a3648a73e9c65ad1b7f884e45505f209b1afa6e545a05199e9b2ae8d2bebf4e3e247b9d275f04b05d08441b5a75d0c04333027933dcb1e0e77a43d7cd1c1d37db0f057062bceaa76e4a9bb1eb83992b97b4bfc4b2f5a43248f4486b147c112708a404e0780fdafda70c8d203ec628dfdb75d0b68bd3ebce9b91b82e2572001f3afea134a22c174128df42a05a35ddcbea1d5bc71be233a68818725feb9a904541df78e575c615ebffd89a5adb4301809502b88bc01a3a2e0b17d74d90729b91788a66dc9104118eb16feb667230b20bf49c220c7f12630fccd458af5b0b432fe931bae16ec664016e081c49d58a037df20966555d991a0371b48296bcdf431b4471fadfb4611f4be3c94a5132003af14fabb3821ee95cd7c8afbab4255220e304890239809a89a6a39b482f2b704e79f83f8dd4d72ceb0244c9f712236333c8705eff7df75484b278f0bd58e8b86d2b3e469ab4fae9c6fe407255a4dde8311b49c275c4834af4a27ec80b046485fd3100cf8d5d9d9c7d61caa183f450ca04487747ffe8fb7dd7902dfdeb42b3c773418ac08226e9e74783867438f0f3cb8c0deb83a1aa51cbce94355087c8f3a693d2051bbff8ca1a903d38bd89a073db9c0f6fa574927ce2037f36f4f3505c2db02f1beb9b4c6d02bc6d662258590d4eda3ab22231dcbbe41a8f84ee74ae59926478850cf0ffb7d0ce31adcd911e222cce3683650fbe537b6f505ada499989afdeeab54fde5355d74aea5086208c048edaaed564f8c52866b7d6056f93751e97e12b7dd31f2e07b9cbe204eaa3f4041b4827fd616e489f370187a6a469da3eca99ece7fcbb2e99fdb5e1cae7282026cbaa775186edd9416086d27dd8b0ab052d08cc263420ca2e8864934d99b0ddc323c42b557c5cb4bca25cca6a0ebcde6a319a578b89c123c5bd6ecf1a71c5a86ed10f5e409030e4e3d48eb5de223614749cf713c2ab5864a0060e17988dcbac3514dd9c8619fc3808a5084739c5edb866acbb6775405bf06658b09f10ef1318c26c4cfb2dbd103d788453d53ca8c2a29eeb1ab4480de95dbeef8a92a8073e6038e9d7b6580df276c5cdbcce1a38287c6133bd53494be0cfc89da96a682217ea1c254157751c2c7f576765fc4a3bfc92ccc69acf4b077177e78b7684aa6e1eee8061c7da5d28b48df46bbb29fa2134798e07894a3163c6cbd1b94a734c394b26a981e5de6ee2cc7f9fb93999bb15486a2051bcfa2305090cb2ae384f82288cd5fd26000d55386db154a82f083e95c8dc5e119dcc5ae35133e197b491945120e041ae0a0aa67af7b8884a6fd7bfd7dabe50cbfc3d94eb453bceaac2df2833d7040cb5a840e6387fdbafa4a87cefa39220223255de6c136799c47606d2e8cdca4e827af522bf7529577e4df8ee8cfc31d6e045bdd7bbafe40a14b017da5975a9b67e1af90637f9b84b198d83cff32fc03206cccbdcc207f6cc81560ae57b93e89c580d331cf8cdde6db1dc0cd06f5b827417cc445d330058897213c4cc1e9284f9e196f14cf18cd42d5bf21afb631f0c7870f4da5ce75e286c5eb2ad68f78b3f66964c4e1caf31121a474109954d85c2c4c6886c9b2e3d362256da939a2fdb915ce90b00825f1bda21737a744dbf15adab7dee518dd07466756b209a23f2d299cce7a6399b2dc92be06ae31f6b45fe3b5fbadb9af20761a991b63e3c3acee7f7f17a0b335dc482b4869c557d30a7d8dedc311571de7507029e541447f61690815543f65dbb5ab8c8144c213070e1a59c34801cc270bc70a8ff14ed0d136042a4a0b7ef93fe67fc94c7dea365e60c8f8a2e53752ebbb1805e684127a52c4dbecc0556d46951f6ce3fff6199ad34bb694c4f490374b85d54be44c6726b1dcf827454e054c7721a534dd11dc5f90174e14513d4fc5b494aeaea931cd684b2f2a18f355248ab225ae9c4ee3a0b70b7911007a09a53af87588000eaa7e0ab61c7656fdefa07efd1b74abc9d89bcd6edc62c7e6e1373da5b99c083b1bce9ff1eabcdf43e1d35c8aeb694f25ae1265a8445274c17d470e07afee4850da9b5665b948114e4d190b9f9d4d3e1394affd7e7401742285326f55662cd8f7734d4950f6934bedc023122d716e2c86736831c868bdf7cdf66e1b2b89eabfcb9ac00b2c4c20285edd28a1778fba439214974b4bceb3af1056cb42d38e9ad286362a1729e29e39396d3fbb604f4216c0e0cf99484cfdfeefe37acb2c5655e580465686c85f275a7ceca3e36342d86ac3c82bf50f81a0169649a9e2c7311fe5d529125a052771ea7b33ecdf293330325f420a0a677e2c2d386022e256d3a51a6564434f0fc5b89bc6faddd60a84536edb2b6b4c11acd59e977ab3e5512e21fd43eb15e78e5705b265ff504b0cbe87dfddfb3d7e5623db8367522f782b00cdef1511d8e8f421f849de264128d8fbc110edc4ea35ab3e16755eb6d4e3bd8271af63813ee8a07c2e1643b2363b944723cfef2f1a922541506e03cca53bf034b7d582387d0a71f5925ac5485a07ce071ba9c67accb6bf8c2fd6230b96d8c2eda9535ef6f75af83a4d33c7b10a001f1bbae33c4b8efe21a6708cfc4ac55da3b1bf6bfc01254ffab15513532e495580d8e3d62a425a5d94e2b9eaa27eb8cbee2b4c675b1199fc2b14acea211443e9c847fb6c63c05f71bbcd2013cfb286d89a413916b772bc5dce436bed83a6a6b702c2b7a4117efe179bc6597d8f5631285cdfd038bb42521d280ad41aec9dc62b07f762fe0e1f4ba5ffdd6b57efb5c504e0bb6c3111ab6489ad803bced98cdce29ed99c1cd2b6c9e3620522725284613a9e61fbcfba6bcfa15122951364fe34d2ff312e3b88fe4eacc4034314f87befdbf431505febbecf0c7de220934fd72930275984dc83949d264fc36a53d70c5662b7bc506c8361d0326f079e7d233d1635760f2bbde80ef476cff9ae6fb8f92060664cf3b1568a95def5b5f25d4c1f5cf2ce11dd45df6433edb7b8a8230ac14974df6b97ae71ea4e87aab50b17c7cb202f5aa86edf7bf35de5cadfc4bc40ec571677631a81a28ed78953590759800f6ee727dd58faf7870b04aacc425ad1fe71d30e57a838eb6804c776c220d6693339946a344a9400e638629fc9206a6496808e5d27dd3827217a50cd70c7e78adc95ee3811edcc731bb6cb07daae742ffc6f33b544f401811606d8a91aa0e86c2f5a6bbff1d0d7fb26b8e14e26c12d8e18e48600202f71279ee6dd03c9b5a81449c7fc9a7c102d5b283c2530586588e67e505430f54899ed5c7c9147470d497a19352f5d78cd3d306e967c71857cfc34f821d4b8e7be8f3e26f695f3fd10f222ee35b5a78a1ce3e1701cba1f4523f52af25b4c2685e7607d5d6fa4e34a136e6b65c9177bfb155d293ea00e14da8b2e235ea3e21d03fccdd6734e561f18128b6d4bed7632314656cd318cf92fc4e603a4456c1198e64854fb1dd606b6ffdf95881a54f1abf22ed27b46c599a930adc35522fe28bfb79ca6a69ae364764bb3427fa77f48d5589340f88792361eed83979910b42f307128a53e2f78840f73c8321ad5b471f66de8057f802da19e03972f3e9e58b74b8f298b1a4d43e0eb2241adca5543eb7d631f3e917244e5ba6f21a45ed94ea7b707ad21d9bfb2eaa66c273f14c260ee2dcd111b4fb640df966aba5fcddb54d391594888a9000fe89e0699e0fb69ca2005e623478d8cd3bb983611096d11ca2ae7f7ea07a1b07d999c40d972cc532382a6ab626bf41a83be684d9deb7bc2c780d4cc6798bff9701015b258af6c3a9319f149c1e5dbcaea1d50cd88cb858eab54c326e39ce0620f81ae2221332301383b23762b28b82f0a8ebe5f22ea57d28f335d43a1a0bdc9cd704fb448758f755259d12e961899047fae433b07f42fd7bef6acf0d935cfd010e690254704a607f7dc0d886b202c4a34225151ce99308ba9c2c89ea5d46d8447a464bfd901637832c3ec96232a7253afe2aa0b8da5444ae4a0135a9c465f0cc211558256ab81f3c786b9a5d3203d8f8bbac455e0563c83f6153221ce9331558fe9f93752268f284713c4613043ae61e15d0e5f3327f9dfefcb4035574ae57369d6844ddf2552340e64a6f7254630ded6adf102c8c0f01ca75478ef4450c771accb0675961804b0f124f8a10998075575e19592af8da78d0e4b01b0d8ff0bd25fdd1a61c0aab9bb4453dfdf09c40dfc1d2fc7d1184c257e4e5fc10ad6a98527d4edd8d2cd8d4f20e90b2e72a1cade5dd7e14bdae36bd332576f5dcdfc6d8be85a9ec656c7743f1c4ef127f246a6665cc940aa7628eb4a131990c256dc673d0250eb2231e657b4847d55b4f771201a331ef1d411832f2362a1f27a883ccac455b7262d5d4d0c4dc393baf8a69b95cef242e1fed919f0bc3623f7f8e14b1250b6149a2d8c87fb2bf0f4ec831b264e135ff72eec916691c5e8df93a2eeed4b91f142cc80500dfe7d3ccb6d2f5f73e8bc29592446a6f23dfea0dcc66b5419ff05e2c87c1a1842dc82500bd4218a0a940707504335c0d563f35884837d4029b298163d14e82f73aaf672ad133124f8668bde8df8142b6a2dbc84e52b4acae6ab748b96b970a144e49f4901f40a2476cbc309e63c3b76bd494f16a1bed7950a60c34f6ded94a3894fa5664c49b81eb2d7377605aa6c4f214c03ea7011170a8f270976de7763cca94bed824f3c07ee7e959748910f4a441b3d2943b8da9855972eeae8a36da61c8712a475bb722111a1d6ce4304fa6135517de30cba3faad2db6a65dfd8d20645dec0f8b412307f6401775c85d966ebfc26b787d5b2bd8b28f094d35b035bedc692ca0af8abcb29c618609e40d4ecd80df5514961dcdec7cba6d2f57f3aaea69d517430c626956b3f75568f909d8dd2fa6e7e6079663ef6f01d3cea96f14a7a88e7658b3b6c49e4ae84d81379744c731c576c8ae63eee49896fdddaf5b51146f351bc61cae98c22701017894b3887bc38613401479d7ae34f743d3d70d4ecb2d18ec2fa413b9a5fe12d11b63931038043", 0x1000, 0x2}, {&(0x7f0000001600)="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", 0xfa, 0x8000000000000000}, {&(0x7f0000001700)="4d1932f3ed27a38bc7e472f2f7a99d3690674c7659b55fee72881ad6cd4328badf16478d5fb818cc30eb34bdaa5a0da3a771df9f612280ffd2257c579ae3c5f9af5e92d1da2ec191459d37f2f4b6a2c4d34e1a7275ad7b0a4314ecc11782b9a4a68350f27a1eab234e4cc305f262870bbcbb40b2107c1df4dfc3bc4c2c34f36b5ff2f4f483992be81d0b38f53c5f20ba50c8379ba3fe4fcf1cc5a761cdc6549d0a677f668087c2bd843d83792eaf4be50a16c740117d702012f1134ab1128c9f3db3a36eab24a4f937f7d54f3297569e411e0292d2633585341a39f58f67ac41e2c09a09ac621684d3fc955692ffa697df9a4e", 0xf3, 0xfffffffffffffff9}, {&(0x7f0000001800)="212bce1237d82d9294eec1bc87c7a9675f61a7409c40c1358a60770de17a116de1cfd29e5348d65b9e32bb80487a94f92aee578f61429c4fa9c261ffb646133aa9fbe7cbe2905a436d615b64bc993106aa69511df6fd2fa2c303b7e273df3f2f55b19e4ef6e5df7a134d7df4b85a3336bb5f3ba85e4af0fe69c2455a8c33952a5a09afcdbd759ed3121c6e906cdb2cfddcc2b8f6be5aa77d7d4ec89510015d28b722fb870285a1f1e22c3c2f4cb1", 0xae}], 0x8040, &(0x7f0000001940)={[{@fragment_data='fragment=data'}, {@commit={'commit', 0x3d, 0x4}}, {@compress_force='compress-force'}, {@datacow='datacow'}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@measure='measure'}]}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000003c0)=""/78, &(0x7f0000000440)=0x4e) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000240)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0xf0ff7f, &(0x7f0000004480)={0x0, r3+30000000}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f00000001c0)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e) 05:07:32 executing program 5: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() getrusage(0x0, &(0x7f0000000400)) fadvise64(r0, 0x37, 0x0, 0x7) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='reno\x00', 0x5) close(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f00000004c0)='net/unix\x00') r3 = gettid() write$P9_RREADDIR(r2, &(0x7f0000000500)={0x30, 0x29, 0x2, {0x7ff, [{{0x80, 0x3, 0x3}, 0x17e, 0x5, 0xd, './file1/file0'}]}}, 0x30) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000000)) mount$overlay(0x400600, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000380)={0x0, 0x8001, 0x0, 0x2, &(0x7f0000fff000/0x1000)=nil}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) fallocate(r6, 0x0, 0x0, 0x81000f3) 05:07:33 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) 05:07:33 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r4, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r5 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:33 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000200)=0x77e) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000180)={0x1, 0x0, 0x80, 0x1, 0x4, 0xffffffff}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) listen(r1, 0x50) syz_mount_image$btrfs(&(0x7f0000000480)='btrfs\x00', &(0x7f00000004c0)='./file0\x00', 0x6, 0x5, &(0x7f00000018c0)=[{&(0x7f0000000500)="7e4a5bfa226d86816f8f8b509f92981c1fabbfa2e18bf3cfcb06b8953a6d2c1aa79d7237d6cc832e76fdd23452ab1d0184cc7c98824b3894d47b422f933d58a66048748d655120ef7d693cb7d18bbc6137125edb37d32baa7e7cf100b0fc0324d06d5d7cb846ce023a8cb8b5f8f3eab722a06fa98149f06eb38ccbd0bfed0bd3a59c8cf3d614115df1096db32f44eaf1dfb37ec4072c07830c527e62e3fc8b1f6d928423ba2eceb26116bef4a3a473313ed98dc23934546819f9cfe79cbf2c5ecbd0491d64e1657abff716720d30ea03505137afcb9d47ceef3c5e47573817", 0xdf, 0x8000000000000000}, {&(0x7f0000000600)="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", 0x1000, 0x2}, {&(0x7f0000001600)="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", 0xfa, 0x8000000000000000}, {&(0x7f0000001700)="4d1932f3ed27a38bc7e472f2f7a99d3690674c7659b55fee72881ad6cd4328badf16478d5fb818cc30eb34bdaa5a0da3a771df9f612280ffd2257c579ae3c5f9af5e92d1da2ec191459d37f2f4b6a2c4d34e1a7275ad7b0a4314ecc11782b9a4a68350f27a1eab234e4cc305f262870bbcbb40b2107c1df4dfc3bc4c2c34f36b5ff2f4f483992be81d0b38f53c5f20ba50c8379ba3fe4fcf1cc5a761cdc6549d0a677f668087c2bd843d83792eaf4be50a16c740117d702012f1134ab1128c9f3db3a36eab24a4f937f7d54f3297569e411e0292d2633585341a39f58f67ac41e2c09a09ac621684d3fc955692ffa697df9a4e", 0xf3, 0xfffffffffffffff9}, {&(0x7f0000001800)="212bce1237d82d9294eec1bc87c7a9675f61a7409c40c1358a60770de17a116de1cfd29e5348d65b9e32bb80487a94f92aee578f61429c4fa9c261ffb646133aa9fbe7cbe2905a436d615b64bc993106aa69511df6fd2fa2c303b7e273df3f2f55b19e4ef6e5df7a134d7df4b85a3336bb5f3ba85e4af0fe69c2455a8c33952a5a09afcdbd759ed3121c6e906cdb2cfddcc2b8f6be5aa77d7d4ec89510015d28b722fb870285a1f1e22c3c2f4cb1", 0xae}], 0x8040, &(0x7f0000001940)={[{@fragment_data='fragment=data'}, {@commit={'commit', 0x3d, 0x4}}, {@compress_force='compress-force'}, {@datacow='datacow'}], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@measure='measure'}]}) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000003c0)=""/78, &(0x7f0000000440)=0x4e) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000240)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) recvmmsg(r2, &(0x7f0000004300)=[{{&(0x7f00000002c0)=@in, 0x80, &(0x7f00000027c0), 0x1, &(0x7f0000000080)=""/210, 0xfffffd94}}], 0x684, 0xf0ff7f, &(0x7f0000004480)={0x0, r3+30000000}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f00000001c0)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e) [ 274.964356][ T9413] overlayfs: './file0' not a directory 05:07:34 executing program 4: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) close(r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x82002, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x50400, 0x80) r4 = inotify_init() ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)={0x6, 0x2, 0x4, 0x0, {}, {0x3, 0x3, 0x82, 0x9e61, 0xdaf, 0x81, "54e5b6bb"}, 0x1f, 0x2, @offset=0xd7e, 0x4}) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f00000002c0)={0x5, 0x6, 0xae2, 0x9, 0x40}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="7472fbffffffff1500ff66646e6f3d", @ANYRESHEX=r0, @ANYBLOB="2c7766646eac496f3d", @ANYRESHEX=r4, @ANYBLOB=',\x00']) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000240)="0f213526642e0a6313c4e1f96f391143f266ba4000b000ee0f350f21e30f01cb66baf80cb828536d8def66bafc0c66b88aad66ef260fbbc6", 0x38}], 0x1, 0x8, &(0x7f00000002c0), 0x0) 05:07:34 executing program 3: r0 = socket(0x22, 0x2, 0x4) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000080)={0x0, 0x5, 0xffffffffffffffc0, &(0x7f0000000040)=0x6}) bind$netlink(r1, 0x0, 0xfffffffffffffe6e) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0xa6ba0) fsetxattr$security_capability(r2, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x3, 0x1}]}, 0xc, 0x2) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r3, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000008040000, 0x3f00000000000759, 0x8, 0x1, 0x3, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f00000000c0)) fcntl$getown(r0, 0x9) mmap$perf(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x4, 0x1011, r2, 0x0) 05:07:34 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) 05:07:34 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000140)="5f9849ebbd571c4726d952c82e6ca1a3", 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001240)="2e0000002a00815fe45ac11850f923311615fcce95cf0400b5eba0b4d65cdbaa98cb930007fff080000000000000", 0x2e}], 0x1}, 0x0) 05:07:34 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r4, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r5 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) [ 275.100355][ T9464] netlink: 26 bytes leftover after parsing attributes in process `syz-executor0'. [ 275.145902][ T9472] netlink: 26 bytes leftover after parsing attributes in process `syz-executor0'. 05:07:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x402c542b, &(0x7f0000000080)) 05:07:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x40100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0fbf"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) r5 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xb649, 0x2000) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000180)={0x3, r5}) 05:07:34 executing program 5: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000100)='./file0\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = getpid() getrusage(0x0, &(0x7f0000000400)) fadvise64(r0, 0x37, 0x0, 0x7) sched_setscheduler(r1, 0x5, &(0x7f0000000040)) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$btrfs(&(0x7f0000000240)='btrfs\x00', &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX]) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000880)=ANY=[]) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000340)='reno\x00', 0x5) close(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f00000004c0)='net/unix\x00') r3 = gettid() write$P9_RREADDIR(r2, &(0x7f0000000500)={0x30, 0x29, 0x2, {0x7ff, [{{0x80, 0x3, 0x3}, 0x17e, 0x5, 0xd, './file1/file0'}]}}, 0x30) r4 = getpid() kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, 0xffffffffffffffff, &(0x7f0000000000)) mount$overlay(0x400600, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) r5 = creat(&(0x7f0000000080)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000280)='./file0\x00') ioctl$DRM_IOCTL_GET_MAP(r5, 0xc0286404, &(0x7f0000000380)={0x0, 0x8001, 0x0, 0x2, &(0x7f0000fff000/0x1000)=nil}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x526, 0x0) fallocate(r6, 0x0, 0x0, 0x81000f3) 05:07:34 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) r2 = epoll_create1(0x0) fallocate(r1, 0x10, 0x3, 0x495) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000cd8ff4)) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) 05:07:34 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) 05:07:34 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80002, 0x0) syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000200)) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000040)={0x6, 0x2, 0x6caa, 0x2d, 0x3, 0x1000}) signalfd(r0, &(0x7f00000000c0)={0x4}, 0x8) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x6, 0x4) 05:07:34 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x7ff, 0x20c0) timerfd_gettime(r1, &(0x7f00000001c0)) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$clear(0x7, r2) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000200)=0x6) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18f014ff9e00000000000000000000006112edf9b1484f60c391000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfe, &(0x7f00001a7f05)=""/251}, 0x48) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r3, 0x4038564f, &(0x7f0000000040)={{0x4, @addr=0x7}, 0x8, 0x3, 0x81}) r4 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x4, 0xa0000) mmap$perf(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x40010, r4, 0x0) [ 275.714900][ T9495] __ntfs_error: 10 callbacks suppressed [ 275.714920][ T9495] ntfs: (device loop5): ntfs_fill_super(): Unable to determine device size. 05:07:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0xc018aec0, &(0x7f00000001c0)) [ 276.133975][ T26] audit: type=1800 audit(1548911255.192:39): pid=9477 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="bus" dev="sda1" ino=16634 res=0 05:07:35 executing program 3: r0 = socket(0x22, 0x2, 0x4) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000080)={0x0, 0x5, 0xffffffffffffffc0, &(0x7f0000000040)=0x6}) bind$netlink(r1, 0x0, 0xfffffffffffffe6e) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000700), 0x0, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r2, 0x0, 0x0, 0xa6ba0) fsetxattr$security_capability(r2, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v1={0x1000000, [{0x3, 0x1}]}, 0xc, 0x2) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r3, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000008040000, 0x3f00000000000759, 0x8, 0x1, 0x3, r2, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f00000000c0)) fcntl$getown(r0, 0x9) mmap$perf(&(0x7f00000da000/0x2000)=nil, 0x2000, 0x4, 0x1011, r2, 0x0) 05:07:35 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r4, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r5 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:35 executing program 0: syz_open_dev$evdev(&(0x7f0000001140)='/dev/input/event#\x00', 0x2, 0x0) 05:07:35 executing program 4: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x5) clone(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x20400200) 05:07:35 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:35 executing program 0: r0 = inotify_init() r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x80000002) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x3, &(0x7f0000000180)=[{&(0x7f0000000080)="25b75d16021a4b5fbff1a875f9d101afd9143a1126c3e2966884", 0x1a, 0x7fff}, {&(0x7f0000000440)="b6e9eee0ffe066ee8ab822bad2e63564826b4eaef8caca3fa5936f15b3948f027b88be5d47ba17e878ea0abbf00414cd0e33b26268e67f88f202f117dbec34b92e236c2eed37784eac7fd3d13aac03a0d2ddd31d42b02e852c45ba8408f887bdbbc53302f99ca21eb4bacf889049f5e6fb3a9ef85a8ee83724c43c40bf2191579eb3114ebc80f9e4d071c29e90995908949901ede9dd7eafd6bfb17c0e8e84391bdd8e02bcbbbba53bcbb360e48460a1a6985970094abb848bf7da085629c6ab7c7eaf193b7ffc2ab74a33706827a51c8e5b22d6d387073f0b49e8ed70", 0xdd, 0xc9}, {&(0x7f00000000c0)="4f28de77ba53254a7168adcc22bedf543512fc0caa615548e1a745ab757c8cf224644fd143545244b494a4a546445903b9dd98ae514793a27555f0e0d17a97e6886bcbeaaf45fdf4e5eabcf922", 0x4d, 0x9}], 0x200000, &(0x7f0000000240)={[{@ikeep='ikeep'}, {@sunit={'sunit', 0x3d, 0x3}}, {@norecovery='norecovery'}, {@rtdev={'rtdev', 0x3d, './file0'}}, {@ikeep='ikeep'}, {@discard='discard'}, {@logbsize={'logbsize', 0x3d, [0x31, 0x2d, 0x78]}}, {@logdev={'logdev', 0x3d, './file0'}}], [{@hash='hash'}, {@context={'context', 0x3d, 'staff_u'}}, {@smackfshat={'smackfshat', 0x3d, '9p\x00'}}]}) write$FUSE_ENTRY(r1, &(0x7f0000000300)={0x90, 0xffffffffffffffda, 0x4, {0x0, 0x3, 0xb292, 0x80000000, 0x1, 0x6997, {0x5, 0x6, 0x20, 0xa6, 0x0, 0x9, 0x4, 0x3, 0xffffffffffff8d54, 0xffffffff, 0x10001, 0x0, 0x0, 0x8000, 0xa5f0}}}, 0x90) [ 277.298580][ T26] audit: type=1800 audit(1548911256.352:40): pid=9548 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="bus" dev="sda1" ino=16637 res=0 05:07:36 executing program 5: futex(&(0x7f0000000000), 0x800000005, 0x0, 0x0, &(0x7f0000000000), 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, 'pids'}, {0x2d, 'cpu'}, {0x2f, 'cpu'}, {0x2d, 'memory'}, {0x2b, 'memory'}, {0x0, 'memory'}, {0x2d, 'memory'}, {0x2b, 'pids'}]}, 0x36) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 05:07:36 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc3c6b00123f3188a070") r1 = socket$rxrpc(0x21, 0x2, 0x2) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0xc84, 0x10000) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000080)={0x1, 0x5, 0x3, 0x4000, r3}) sendto$rxrpc(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x24) 05:07:36 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) write(r2, &(0x7f0000002680)="e8", 0x1) ioctl$sock_ifreq(r2, 0x0, &(0x7f0000000000)={'eql\x00', @ifru_addrs=@generic={0x0, "b5ab8f3f24fae76cef5ffd547b9f"}}) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) vmsplice(r2, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) socket$inet6(0xa, 0x6, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r1, 0x0, r3, 0x0, 0x10005, 0x0) sendto(r4, &(0x7f0000000180)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r4, &(0x7f0000000240)=@abs, 0x6e) poll(0x0, 0x9, 0xc1c3) 05:07:36 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="4a000000148cf6890ff04c241e8697336a711e068988fef2336ffd0fb818ed00acde27a7580a949821ef733461f37038b241d26633eea5ef43de4263478dee079d3b2955bfff6d5b9a09cf6bbc9f9745fd904f637d0698b6f0eca87f2da8c74438ee9abd26656e32038b622cd119620f8c71a8ba6c6e7d3c6a5a06ca87e6dcbc53141b08869b663d8725d4396549e6000f96d7f2d4e22f767986df820a6e21da4e44d3aca0d55c84aa62adb70c88b14cfb92e6ed543b52ffef0057393e6c08914df3e2cb1550c4b4254b4789d8d7a25cafeca0210c17f4dda8beff6fd2539725abf3b61c24b4b6d644f5e1b610fc495951ae9b5931b44a9654b7431e27d8c908aa685931c508cef3c67ed8f932da767dc1a87f12c4cf79655fa0"], 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:36 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:36 executing program 3: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:36 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000020e101000000000000000000070000000800020000000000f6ff000018000100ac1414aa"], 0x28}}, 0x0) 05:07:36 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r1, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = accept(r0, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)=0x81, 0x4) mremap(&(0x7f000002e000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) 05:07:36 executing program 4: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x0, 0x3) fchdir(r0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x4) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x100) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000000), 0xc) renameat(r0, &(0x7f00000003c0)='./bus\x00', r0, &(0x7f0000000580)='./file0\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000340)={0xffffffffffffffff, r0, 0x0, 0x1c, &(0x7f00000002c0)='\'vmnet1).eth1cgroup,!/wlan1\x00', 0xffffffffffffffff}, 0x30) ioctl$sock_FIOSETOWN(r0, 0x8901, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980)={0x8, "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", 0xfffffffffffffd14}, 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sendfile(r2, r2, &(0x7f00000000c0)=0x500, 0x8080fffffffe) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x6, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000140)={'team0\x00', {0x2, 0x4e23, @broadcast}}) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000540)=0x8) sched_setparam(r3, &(0x7f0000000300)=0xffffffffffffa1f4) write$P9_RREMOVE(r2, &(0x7f0000000240)={0xffffffffffffff98, 0x7b, 0x2}, 0x7) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000200), 0x12) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)={0x7, [0x9, 0x4, 0x1, 0x1, 0x3, 0x6, 0x508]}, 0x12) msgget$private(0x0, 0x40) 05:07:36 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f00000005c0)='syz0\x00') semctl$SEM_STAT(0x0, 0x2, 0x12, 0x0) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x0) ioctl$SIOCRSSCAUSE(0xffffffffffffffff, 0x89e1, 0x0) syncfs(r0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net\x00\x00\x00\x00\x00\x00\x00\a/expire_nodest_conn\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x800}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfffffffffffffffe, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/11, 0xeb) 05:07:36 executing program 5: r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ip6tnl0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x20, 0x1) sendmmsg(r0, &(0x7f0000000d00), 0x0, 0xfffffffffffffffe) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x2, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f00000001c0)) getpeername$ax25(r0, &(0x7f0000000080)={{0x3, @netrom}, [@null, @default, @null, @default, @netrom, @default, @rose, @default]}, &(0x7f0000000000)=0x48) 05:07:36 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) [ 277.913967][ T9616] QAT: Invalid ioctl [ 277.966362][ T9621] QAT: Invalid ioctl 05:07:37 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='bpf\x00', 0x0, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',lowerdir=.:file0,workdir=.']) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000600)={'filter\x00', 0x4}, 0x68) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat(r1, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) 05:07:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000d00)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10010174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b19eeb299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c888c9ff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x3, 0x40000) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4004ae99, &(0x7f0000000100)) dup2(r1, r2) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8000, 0x2) [ 278.247743][ T9633] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 05:07:37 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) [ 278.367779][ T9638] overlayfs: option "workdir=." is useless in a non-upper mount, ignore 05:07:37 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f3188b613fb7c58db0226b0706f524cb602f8a05b87a0ebf95b494db2ea32160e95c556640284cda540ca77620db8202fec4c76") openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x200, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3ab85f04000000d2eb", 0x10) r1 = accept(r0, 0x0, 0x0) r2 = shmget(0x2, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8804000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x4, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x10) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000240)=""/169) sendmsg$tipc(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="37384bad0f9a265db41f24c0f0a57ac52e05756811ce7ced93b1b94a970cc96365897f", 0x23}], 0x1}, 0x8090) sendto$packet(r1, &(0x7f0000000340)="4dad026954a3b311ff384b8bc46e2b1a13071cc8b9e995f3a770dfe7e9d1015be1df343a3f2cf6b6c6803c5ae5a5c1bd8f2b8b365832c673b71a5cc71d02700d675a686c3dab35a5c61873679f5c7ff848acbc1d275ceeae61fb519d0d7a7d3325eea63ef668c88e3397cf7642e6", 0x6e, 0x8000, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r4 = syz_open_dev$usb(&(0x7f0000000540)='/dev/bus/usb/00#/00#\x00', 0x80, 0x1000000000420902) write$P9_RLINK(r4, &(0x7f0000000200)={0x7, 0x47, 0x1}, 0x7) sendmmsg$unix(r1, &(0x7f0000003f00)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}], 0x2, 0x0) 05:07:37 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:37 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000300)={0x56aa, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x10, r0, 0x0) r5 = memfd_create(&(0x7f0000000c80)='[trusted$\x00', 0x100000000) r6 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x100, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r6, 0x40045730, &(0x7f0000000080)=0x9) r7 = semget$private(0x0, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000180)=ANY=[@ANYBLOB="72ff05629a28a64303b22d16da306cc33f4f50e5b2d80781c706a449d16e04aaa1654dbe7043968e8fd206b9d972b7fe18077c421d1555fc89fd21a015c7828bfe9f2622a57317a5fb019b27bc9a70a13dc40df34bb300028f8d9a874043362e540000b9e747f1ed45a4f535f99a8eb4e9debf59b357624d149eaa69506e544bdf7e4fbc7f057b5a5dba0601e44a68e9df1e177f735645d61b4e3bd42d80d91d727eae04764ecb687590d4"]) sendfile(r2, r4, 0x0, 0xfffffffffffffffe) semctl$SEM_STAT(r7, 0x0, 0x12, 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x1, "b92481f2b6049517f74de08916cf213343b15d035fc2fe51426f3c9125e1da89cad2929cd06aca1bd4b0a988279268e61234ff8a41cd19abd481eb55130d64ca", "a3510a8deb27705deb2fac58f4f379ddd8e50e8d868ee0425ecfc1c6f4a716df3e4be867d973bcc3e056a1a04eafdeacbd0e434a62db69a6bd53316c42f16b21", "f0642b0793a51cd04ad5c00d6cf24b506d17a8df96c5968a4226e09f847e4b08", [0x0, 0x4]}) [ 278.702785][ T26] audit: type=1804 audit(1548911257.762:41): pid=9662 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir006806395/syzkaller.NJZYro/45/file0/file0" dev="sda1" ino=16645 res=1 05:07:37 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xc800000000000000, 0x200000) write$selinux_attr(r0, &(0x7f00000000c0)='system_u:object_r:auth_cache_t:s0\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643da9291942967f0e0c2b2cb96c60fcd02af3837cd94c8047f92b012a6f59103963081b67b46a29d863b9d28b7aa70377022a18ba3714a59c495ba4c7d1609963759edb7b037477fea5d109a59574cd43010a763333ecaead661c8dbb813161a17339938b78b567419063e4aae1ba5613266ceb8b8459e0", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r2 = epoll_create1(0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 05:07:38 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f00000000c0)="adc21c3bf542937a00fabdc0e7dac967e790467da81da2138deb8d7516e9faf174d6e665318901e5dc21c73e93f046adb15d15981b0c3a873a443da48f9cee58fe5a02bacfe56a05eb5fd07c6d851f052db3e5f5031ffa4ddcb711b5ca", 0x5d}, {&(0x7f0000000200)="3f762e727b790dbb018715aede7bde0009dbdd90658c54c54a52cdf23f8e6a67a7e8ca906fbdc8f7229d00dfc0276ce86699deebc343f28b881f3967e3368af5f2ddb52c677dffdb001103a3c3e61ee9a2161bcecead5e69a44985c71aaa381686163a130c8bbd6546276148505ef0859f6bf8ae27d1a2a0c956f4d907ed9cc36986a1c7381de6de2d71f0d0c3907d9741fcd6a2bf92f71e7cf0a808c36297ca988751f600ca92c9bbc8b96ae0630fd5789bc39f4d2325e00717921bdc80798b4e27d222fef689a5ddd52991dcc3ca976373db49005a3044e98e4fdd18c35d09ec01aefb4af313bc4f41e98775fea098fa64a8c1de89", 0xf6}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000000140)="593d73b2eadc3cb92e4a90d8691dd4b375974aa850914ec7818197e77db4cbb002e87edd3742be19f6c5154e", 0x2c}, {&(0x7f0000001300)="b2b7f34207c1765a26e47b422b63c7f0adfa71a699d25ef149128153443b09baea72687da15f22b5ef04345751bc66056ddeaf5a9eedb25a3f482505dbdcea1ad0e07ca1805db30c3976ea471b154bd16b934b1f0b7ddd17bde906f8ed74787752a741d58e4a0204eb6c4923a0e9193d06c4a2167a4e4cb48232aad14bcb267c010bcc8c9ed57ba4233ed13f56ad0a22fa7da5dd5d3e10e23367bb55cedf5a97884e6580cf1dba01bf2030ec3636fbedb133cc6095ee5209e50fe1a0d0686cef14fbe47039a3a0844e5aac29e04ff2ba3be865ad64027aeec70c187ff739c020900bcdcafe41e93a804d5f3eabb3659fc4de074e2c3d064ee6b8cc8dc5a3012d25f3e0ff400796329525999443d13cc21eab6e92d1ceba9efc1495124bbfb5a9b967b1ef86564931baf8065d3bf935e9c2af78f13ee37c05f9dc6bcf7bc3b654defaaf85afe8ec0799b34d7b915923536d41746e61472d3b05295cd9d121f07c8e9f0e75a5e753746402be057648981539c7afbcb74c231c317206f6986bfc68dde3b810e6888e8ef2b66d6df1e12eb88cb9db7bb5eb5a27c2ca72a55df35c7e3a46d4073cafce181f73915e1e4c64a9fe69d5c00db9566645d01e8477ffaf71d94d0b771c04b49b80c48ec610fef27e5bd21669618781b788e1674498cb5a40c87093686226a01025d39a62268df2bb7f926b5c603c8da62761b44d68b9b90e5bf84d476d1074d313da8bc1e573fee220dbbd8c483d4c24b7d20d5ff97cc53a00841e7c0eb04e587b052186619485e103f7db63da639202600588dec659cee95f5af92042d03243867b73524c2f8f6656c7798cbcf1a605fe5ec99be13558d60a61837b30d8a25420816b873d98119e760046a74804d99c87e65603407f028387a144501bd901122065ca58b3fe7169478d3d57fe98e2ced718bc484adcfbff98085a5bd968f7939ead128ebaa8c4c7128665e08419c68c02256b7ed397c3b7513f3e630b10bd41d28ff3be6e913cb6357b6485c669b836cd2b96d991377bf489285fb53fdc2ba4f65920bdf2a2ee54bd6e4df1a67308d377e028694181247a09e5123a791a3d4dc6574dea8463a76b422758e335bf195ae2f57a5b2a526213dd054cf630e8c19a7e64fcedafec3701236532827f889e1565938419c021b516edd1c2daa5c39d124fbf4333922cf893c766a8265e491f18fc530939f64d5db45937c7ba9452243c2b97f20c6d1df8768279f45549ea769e68b593b746f342cb0628efccfe913594948d4391fd7669c532ff93833498dffbee8b34451b69525064f612ed3feba07b8124944da16e2f69400c77bba306a4fdbcfa87e3b0ab25536620fc0bc8d88e2b8ec02be1c76bacfd7e00fcf5af2e2ceeb3d9858b2a6af91a99ee8c4a0d54f7abed3a9887bbc0ef07ad65a414a09904ee6e69fe7eb14f21289b92758aa0748b2846093f47b5a62b23e3dea520f3d081821de5dcc5ea33d480b94e9f75e7ea5b9a1f71bb8a5a1cd0bee6f46fae7eb1a04a7ce5a994b8092c0071b7cd94a81f99c4e800f6aba6b2dd34a9582d22163369c473040dabed4c3b538b14ae1636d21c32f28715efacf4307e9017c310f7e076dc0e38f7ec883258f8fba0f502059743f2a38a3cf54bccd546c2e28bc92f909395991c6c0aebcc5fc81f2c1fd65366dc657762dd8175abcfa918de82cfdfe6f19ed94ac07583fa443acac487a794465ac47e2881c57cc2499b54acc8440fa1751511e5c46c61c9ef339fc25117cfb1404c547d3138899cd440a7d7458ae3f022cec4a983e363b7c0871007c17d7d972ca29c80f8b926761633ae0173faa367018e4db18812de795d7c622242b130b111531110a44a5627e90afc1dd365de9f2129c5b54b4dc1d5115ae645a9ae8aaa5597a39da29c37a65eea6ebfa87308b0f210a51169372dcb2de71abb93a73d5380301cc0ef910f95b77e7be4f7e3d5502dff286de33f410e080d84dd0ef3f9b97bf5410b25a6d9c0337b5d2d22748aa4aca88628a3fc1601e3c21784bc318dcca2e355dc50fe37e35f262fc8537e1f737fd8b9809bd4ced26029e0e098172203221c36cc562d937b71c7b3be1ad1920be4c37a12dfc8b9bf8d50c34379c6d5453509a35576c2e2ca8f2233334585b0aead2fd889c24da2dced3836b9c58575836ba4f358f725519320009387c365842195e99d2463a8644bc97d53ab0c3bd231928f4f79934f7e8b77dc7c5e17f1df5d9fc42d979cceb5504183f88868e1bad64b0e645e3c060db1ddbebf8b5949478f98c301a21b54eb58cff97de34949e894d8391ae4581fde58ee10c5bfdb8777bed69d15f886d9c5e41570cc1a59dfce31eb4c71e4f83d5c12cdee02f48c8ca49903f7daea9fdeb005c0a5332ac1ca94246895a87cd44aaff4368c1b44a7d264f69116e762883d4b7237eb3bddde89503ca67260cf6f48c8ff51f040a4f090f898e031552eb9df60eb736c67a9c01f69d6fd884db6072b958e0550324f0da85669dbce260f60628e4193ae4f530999ec8c142491b60a37f871860517b989a46c672245efb3ce7a1f96ceebc51b2f58abdfe513111fe9e06aaee71e2a1cef1cdc4747a47513e5f5196ebf169ecd76e6a320aaf3415fd0256b8a90e85b3e134cd1dca50fb8e741a0bdcd38eec68008d7e174323543f95b42ca028b7efaf0ddedb0e92226eba2f737983cd4513207710c388812e8aeb943dd00afee128ea080387eef5ab001bc32b9136e6db434aba21736f931a7957d86d7840ef02f65dc9dca7b87350ea612b40116dcdb5048aeebe526e526add7d6f497d302f0b2d033c1b4da7e3bcedf440fb157d10cd5ce4e97e949738e213d7ad492a09366d099891e4bc4167e83b1f0b31e2c78511cd5ee809a75f94c31ab760e9745ee68c277a2d1280c6b64cea42d8ad90a589a67e6afd1aba78f83591245e161f5905d82a9dfedc2638fa26025f1e7a39ff8ffab61a4e2c5621251eafaebd6c7c0a890f24ae4532695504f827c04ac720258c2c7a220c389cf3d819867af0c9334dececc768ae58df8775dcf59a7a2c08e9480df29072bb01f4279719f7ff275c2101851b04af9516ad74c3f7f4a88f92d4133e79af6823a0ec9febe0f3ec23f6bf12c2c3f8ef5eaa6cfbd324ab0d2722f54076d12ae25865e53c04ff2ff31925905eda110243562a4fc833ca65db0b97be973bdcc29128fe5c5caacb3d7826bc324c00fc95adb3b834d6b690bdd598498613999fa5b54b2702dab2700853b631262056d607dc1e5910610349433b4590a7cdaa3a0552c2264b2dec59d137553d85b49db0bd63fc94487c0d988cb25414c68fcc42c6aff57986118ef172d1c7c31a44931fb6e4c392e3ee178fa5a4e64085357df45537e3fb2a974e138873ca5e4885ed9812bc430f0f283704c35292b2902c994e8a6e2906cde8a6eee43870d6f75b2aafb182408f866e7ee8484740be38127b71f26319d7114cb8e9e5070f383be2a8e25ad425417b3d9b7a551df800da3e0f3ad4865d75ed804002ba6f39c74bbd2025df09cd570807aacf2e936cace2e5620a981306deab6e431f5e93ab1696afb025d4c61917f3f76cc68e59195d930d8f4bb6c711135b4f500e792b4de9288909e759825d03aa53b5239b487513fedb34d1b4b62e7cab8b3e70b88cb885cfb2fabd6610a06a0a081be09acc4cc24e5311829a3c0893dd2a9fd545c5ec6d5b338964e4ab6c36d16e4cae0cb4b49f583c01e207b09c1337b6f8cef08f293537116ce82177b8aab1777180ec36046fe7ff0448952d66cbf734c95b62d961ebc86847274d66846200e3eb060d6e627056e21144ededd861a4951e1da5b4c35b47474719b724dc6edc19648924bc2734c4686ccafe9371291984c4067b2e4135edc70567e92d55e4ebca85ea8ce678130f49bfb0989a1bb18e9f1192be55ef9dae680076aa2d29a4537f6647c7de268f29c5196f8df87705b7efe850a2b25fc87065d1883b05718e1f2e73fb1b904e3329af6a34d9b1e8323faf42d526b46e1562d8fc37151ae06e44df45945bb424771cfb8fcd4e9f1f0cc6b4c34958b1888f1e4f4fb7304df43d7a83bb4daade1f6270e4c32f2a3fd26f1193ee54f1b2e5dacfaf0209be1619ac843af03c0a461fd102e14b624ae39e03d89dd152c841639a2485afb1bc91b1af47f4dd460dc6ee386b94bb0dd742d01a739fe56dd7c5318cb4fa01c829b170bc4fcc24b3c28c055890b54b9c419b2006f61a2cfcfcff1a6fbaa2007f8741927051408987690de0e16287159fc6123423cd92b97a130dbd6f7e39f96132d92992200d8769ea0f1427a029d9f2e9b3f43af10c595b4ec7166261d2b77443b339e233436a4d7e9ac33a067fa0a60e888b5f0e6f312e5a556799f049c5494e9718e049ea6e7168835150fad4d3844a2bf98bcc97eea43806cacb16cd11649367a712f4237b5192721f2b9c9d9af67e41614f8cda923478f8b747fb7adc2ca177337cb2c6c7799d66d6e4b5f480c6cfec92b527c2abb8c8c2cbdf840d9eb182eb5da80be47e6c1f1513a1ed361849fdb5358ed9d7da131bfa24496bf4f99fb93389b188c03df2129c5489c8b6dc0988c5d4a873489b1542ebc13c69fd9d6d140a45d17e77ab1923015f026ecefa959cee1d89b52a9bec60daf9a959b9be52f65a743517b898b6d8857e14518f7ee74f0b4ace373e1b3d1ead5a5b7ee7339127b622d04465858e0775fbdacace9da617b4ec53670759d56bcfd0b0f11be789c3647d67199449ce04c26866e3affa5dd35a48a78f5b7d2cc758110fc90b4b8db173d04cfb32efb6726e85f480302caf5d0a7d5f02ec842e13e24a9f916e25d60befdf807df0c5bdc4c72bd0e755afa5ee99b9732c059bee2e0b8c49cdb22b95e1a04ae7847d67077cfd39d8db13caed50a1e8145ccf3dd72da79421f13ced4897e1f2a012852584e12b5c952e3f1413cf9ba29b4567152fb4f8771438cac09a1f926258e36374955b52ccd41db56fd850b20e1e7f5fca636a869b83880e80b7375e9d558e8270a9a34f03654e04b78595c664e7c50d16707c1a02330e6357a8a8cfc79a9a5bf1ddb913f5fb00ba83853c47bd18ea7152827d21e5b68cdb3e14f7aa254da3f08eb2d34ca1333816abbd9c07883af9d30e6ccbc231d6a0dd112d36fcec68a516c5672bdb8fc129a2fe2541b5bec159548e2e8d98c0e7c747b4706296fcb0a26d29f2c8d71c510f3204245e874eedefaf2f20032c512c1aac9efe3cf78a035d9a7704718f5c771e913675b1db3c177f73119f0e37b850a5ec785e54f7b4ec47d820d0593cc320cf9c236b99f9217f7ab4c9ae7d987358100a6bc59af31855521cd0a2968bed2d18b9919076b2579a1b8f2c4d68173240d1bc66e2c3be5a0a02fdcbd9887e3878b990487e6c6ced673d68958ca3c7887f5a379470c92f87edb802ff390cd0a3cae9da6ce06e7d783ad3256134c98a505fe8ae17978f72293b90959a8583dc2444858770db030533da783fdcef9ddcf5faece6799208003caff39289e6e249d693661fc4603881cb13a6c043d4048626fea85d3415eb64860326eee295a489739ba664edcc255eea53b7fc3295c299881d6cf6bbd798dbfe6872397d33f26b9334cc050a724885af195edab74e6c928f25726a2ee7e98228374a6f3993fd843c4890d29bd568c256b7d8cbf634b293dc549ee5623f5b69899f7040629e65a9795aadcfa04a6f5476346afdfb0ebe12c5aadf344f7340b199ec078296993a91e00d649c99b", 0x1000}, {&(0x7f0000002300)="2b6d940d4e9811ca039a5a6d8d0506f0d0ffc62fd76b7f06cb6ae7e5b641c6bbacd44cd32a43173f4dc95ba748c72d0d65bae47cabc97865e7e05588678499d90988b5b08f51c2f5fac43063ea839906ac25ce8e9803ea132340fa47c1f686cf801ad1a130600f47cd4f6bdb86d20001c556f989e0cf80a7137a93be2606d988d707489715fb78a4ff066e489d5664aac8e4446bf15e273dcc03408a457df2116f83b809638f634424411ed32417f34fe44202431e319fc53a8c8708f7", 0xbd}], 0x6}, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xee67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f00000017c0), 0x1c7, 0x400000000000) 05:07:40 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f00000000c0)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) clock_gettime(0x3, &(0x7f0000000000)) getsockopt$sock_int(r2, 0x1, 0x26, &(0x7f000059dffc), &(0x7f0000d8cffc)=0x4) 05:07:40 executing program 4: socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0) move_pages(0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) getuid() shmctl$IPC_SET(0x0, 0x1, 0x0) request_key(&(0x7f0000000000)='cifs.spnego\x00', 0x0, &(0x7f0000000080)='/dev/video#\x00', 0xfffffffffffffff8) add_key(&(0x7f0000000600)='encrypted\x00', &(0x7f0000000640)={'syz'}, &(0x7f0000000680), 0x0, 0xfffffffffffffffd) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000040)) add_key(&(0x7f0000001f00)='syzkaller\x00', &(0x7f0000001ec0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) add_key$keyring(&(0x7f0000001900)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff9) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000004c0)={0x1000000a, 0xfffbffffffffffff, 0x1, 0xffffffffffffffff}) mmap(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x6, 0x10, r2, 0x0) 05:07:40 executing program 5: socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) accept$alg(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) semget$private(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0xbd1b) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r1, 0x0, 0x0, 0x0) openat(r0, &(0x7f00000001c0)='./file0/file0\x00', 0x400, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) stat(0x0, 0x0) mount$bpf(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x4400, &(0x7f0000000140)=ANY=[@ANYBLOB="267ce39963e035e975e463d9ed5b01e88b50deae87b749fa0208"]) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x20000000, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x2001002, 0x0) 05:07:40 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3", 0x2b}, 0x60) listen(r0, 0x0) write(r0, &(0x7f0000000180)="c5572f914f2cebf1bdee4db96a319c0b69a47694e9f7065bac6d584074cbded41e957c3ded2026c8e1a99e44c15aa015e7cd9195f291194d0e2f285f9dcfaeebf49a81a8f0a112e26444d7fc5d90262d981ee87b4b6016b1f2b587cc10a33f66724b11cda257fc9301ea10d86375aeb3eda7af1eada8522c3c9d7202a7c4b4a26a3a7a396573481634498194c9b74ab0526f7982af2658d47c7209c7b9425353ee05aa0049c432fd6a4cf66bf539e26ea984aef8ad0dd6787485a69d5c0d361e286d41e060f0ef52bdbcec587d7cf9ceaaa2514ce21264ce2d87eb9b6adaaac581bc10a9ab5778", 0xe7) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x22181, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000080), 0x80800) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000280)={0x400, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @broadcast}}}, 0x108) 05:07:40 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:40 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:40 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8811e78754a539d39c2bd6a40fa8c8aa024d86cdc834bc921c0525fec2541e21ccf67e1d7b55cabe9e068dd58ce565aa9a9d325ebac7627ffe7a54cdbd77b3", 0x2b}, 0x60) listen(r0, 0x0) write(r0, &(0x7f0000000180)="c5572f914f2cebf1bdee4db96a319c0b69a47694e9f7065bac6d584074cbded41e957c3ded2026c8e1a99e44c15aa015e7cd9195f291194d0e2f285f9dcfaeebf49a81a8f0a112e26444d7fc5d90262d981ee87b4b6016b1f2b587cc10a33f66724b11cda257fc9301ea10d86375aeb3eda7af1eada8522c3c9d7202a7c4b4a26a3a7a396573481634498194c9b74ab0526f7982af2658d47c7209c7b9425353ee05aa0049c432fd6a4cf66bf539e26ea984aef8ad0dd6787485a69d5c0d361e286d41e060f0ef52bdbcec587d7cf9ceaaa2514ce21264ce2d87eb9b6adaaac581bc10a9ab5778", 0xe7) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x22181, 0x0) accept4$netrom(r2, 0x0, &(0x7f0000000080), 0x80800) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000280)={0x400, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e21, @broadcast}}}, 0x108) 05:07:40 executing program 0: r0 = timerfd_create(0x0, 0x0) semget(0x2, 0x3, 0x1) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/14, 0xe}], 0x1) timerfd_settime(r0, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x80004003, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x2b, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x2) 05:07:40 executing program 3: r0 = socket(0x1000000000000013, 0x4, 0x6) write(r0, &(0x7f000018efdc)="2400000052001f0014f9f407000904000a00071008000700feffffff0800000000000000", 0x24) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x0) 05:07:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840)='/dev/kvm\x00', 0x6001, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") unshare(0x400) r1 = socket(0x15, 0x80005, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') r3 = shmget(0x3, 0x3000, 0x78000000, &(0x7f0000ffb000/0x3000)=nil) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000580)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8) r5 = getegid() stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() r8 = getpgid(0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000780)={0x0, 0x0}) shmctl$IPC_SET(r3, 0x1, &(0x7f00000007c0)={{0x6360, r4, r5, r6, r7, 0x98, 0x1}, 0xffffffff, 0x4, 0x1, 0xfffffffffffffff8, r8, r9, 0x1ff}) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="f009b828759078395713f165c3e9b71880c8560ee3292946299f34dfaf9b4880821928f73047c2237e2477774fe287874e835ca7fedb1823d5c2f480ec46ebaee177c2eaecb538280628ae6d4401041e9b7a0bd466c3ee46ec7098a4802e76a7d04a2f0ca5e5d3a1e422117826e8c644112a2f52365e9a8cf08b70b3c886", @ANYRES16=r2, @ANYBLOB="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"], 0x2f0}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) getsockname$packet(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x14) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) 05:07:41 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:41 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:41 executing program 3: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:42 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getresgid(0x0, 0x0, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) listen(r1, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, 0x0, 0x0) stat(0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000200)=""/32) open(&(0x7f000000fffa)='./bus\x00', 0x80000000141042, 0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fsetxattr$security_smack_transmute(r2, 0x0, &(0x7f0000000540)='TRUE', 0x4, 0x2) ftruncate(r2, 0x208200) open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f00000001c0)={0x0, &(0x7f0000000100)}) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f0000000000)='/dev/ashmem\x00') write(r4, &(0x7f0000000340), 0x100000428) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000400)='/exe\x00\x00\x00\x00\x00\x04\t\x00K\xdd\xd9\xde\x91\xbe\x10\xee\xbf\x00\x0e\xe9\xa9\x0fy\x80XC\x9e\xd5T\xfa\aBJ\xde\xe9\x01\xd2\xdau\xaf0\x02\x00\xf5\xab\xfb\x98E\xf9\xe1\x98Y\xc9i2\x06\xf2\xc6\v\x00\x00\x00\a\x19\xe1\xd6n\x97\x01#\xd8\x93\xd9t\xe5\xb9\xc3(Vw\xb2\x13\x98#\xe5P\f\x92\xab[\x94\xda:}\xe1\x9f\x06;\xb7e\xb0+\xd5\xb6`\xfb\x7f\xa8\x98\xc6\xf5\xc66\x9c?60h\xd1\n\xf83\xf6G[\xbe\x8byg%[\x17v\a\xba\x10\x0flFTq\x822\xdb\xdad\xaa\x1fi\xcf\x9a\xb5\xb3\xea>\xd64R\xb7\xeb\xd3|\x9d\xaefN2.\b\xad\x8f`)\xfe\x8f\xd0\xb3Lq\x17H\x04q\xae\xca\n?\xc9\xec\xeb(P\x9c\xa8\xa8>O\x8b\x85\x13\x18\b\xbc\\\xfbL\xc2N\x19\x01v\x9c\bL\b\'\x12\xb4pfkm\xdd\xf7L\xedi9s\xba\x1d\xed\x8b') preadv(r6, &(0x7f00000075c0)=[{&(0x7f0000006200)=""/220}, {&(0x7f0000000000)=""/90, 0xfffffec3}, {&(0x7f0000006300)=""/247}, {&(0x7f0000006400)=""/4096}, {&(0x7f0000007400)=""/204}, {&(0x7f0000007500)=""/192}], 0x1000000000000212, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:07:42 executing program 5: clone(0x800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:07:42 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:42 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:42 executing program 0: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:42 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000040), 0x1, r2, 0x0, 0x1, @ib={0x1b, 0x8, 0x9, {"27fa21ed1a233a3ece68831663150271"}, 0x101, 0x3, 0x7}}}, 0xa0) lseek(r0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0xc23}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xef}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x40000) 05:07:42 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}, 0x800}}}, 0xa0) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r2 = accept4$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000640)=0x10, 0x80000) r3 = syz_open_dev$mice(&(0x7f00000007c0)='/dev/input/mice\x00', 0x0, 0x400801) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000800)=0x9, &(0x7f0000000840)=0x4) r4 = msgget$private(0x0, 0x10) msgsnd(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000000000005ff5568c59ad3ab1a56d7d6efb8d7e5f996189d736f5db6b93694ec10331ee27b7100c318a5a652680a319ac85c787f86067bd429d95613978275f923a6774b0b80e84f05609995a92de89c8a3b83216695a1f3885581fb74ce5ff473a10568c4bb12e3cc21f4615e40f7b0bbacad5eeed97d391cad95dfd34c5f52923910df09e60d03b1ce7406654df0b5b7ae7d3ad340000000000000082b3a964704c7b7e2a7b68b79f9773b96ab35d9e4b031abf57548aac3721fc546bc97823162fd1ac8ca00c"], 0x1, 0x522764f9c6e071be) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000680)={0x0, 'team_slave_0\x00', 0x4}, 0x18) openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x100, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000580)={0xfff, 0x8001, 0xfffffffffffffffe}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0)) r6 = socket$inet6(0xa, 0x3, 0x8000000000000a) bind$inet6(r6, &(0x7f0000000a00)={0xa, 0x4e24, 0x3, @local, 0x5}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev={0xfe, 0x80, [], 0x60}, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) renameat(r7, &(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000240)='./file1\x00') clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f0000000000)) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x400000, 0x0) clone(0x800000, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @mcast2, 0x1}, {0xa, 0x4e23, 0x0, @empty, 0x2}, r0, 0x4de8a597}}, 0x48) setsockopt$inet6_dccp_int(r6, 0x21, 0x10, &(0x7f0000000a40)=0x2, 0xfffffffffffffd65) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000440)={0x0, 0x5, 0x81, 0x100000000, 0x2, 0x2000000000000000}, 0x14) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000600)=0x10) 05:07:42 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x111000, 0x0) write$P9_RSTAT(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="750000007d010000006e002903feffffff00000000000100000000000000000000014000000004000000020000000000000018002d3a73656c696e757826776c616e30406b657972696e672506007663616e30001c00656d31776c616e31637075736574776c616e312c6d643573756d5b2601005ec549cc908f25857d52bb2125a73765f365de9fb6bb750bd19c9981438dbf55b3347d223dde3869aa1f41086399d3ed9020a3b260ba2ce9399c0e8f9158c4ac823c71ac58c7a68a2a25c7de5f1e82e7b633d8b31caf57cae5bf389adcc6824ff8463e505d8f77b338814c88fe797c677e7ae677832769f308f9c06d4218a14f22d5b330cf3cdc66cc7402e6423717ba8b0e662785ae82b44ea2bfed42d00d08c9d60de56cb943f91fc72980246d5100f36e06113b3a80629af5f283aec6946e5bcc519de3f5d0f3ac0000"], 0x75) connect$can_bcm(r0, &(0x7f0000000080)={0x1d, r1}, 0x10) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x8000, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="05000000000000000000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="00000000010000000000000000000000388dbba23b65e4c3a44a35884405e8b150d176c6aefb1156d611b0093baacc6746172d8468b273dd"], 0x48}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000440)={0x5, 0x6, 0x1, 0x8, 0x1f, 0x37f6, 0x40, 0x3, 0x0}, &(0x7f0000000480)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000004c0)={r3, 0x4}, 0x8) sendmsg$can_bcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x6, 0xfffffffffffffffd, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d5db64275bd004c0"}}, 0xfffffffffffffd4e}}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x8, 0xc, 0x8, 0x40, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000002c0)={r4, 0x4}, &(0x7f0000000400)=0x8) [ 283.717747][ T9811] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:07:42 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000180)={0x0, 0x1}) 05:07:42 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000280)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000002c0)={0x0, @bt={0x5, 0x5, 0x1, 0x1, 0x0, 0x6, 0x2, 0x3ff, 0x20, 0xfffffffffffffffd, 0x1, 0x4, 0x6, 0x8, 0x2, 0x22}}) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x2}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) rt_sigpending(&(0x7f0000000400), 0xab) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000380)={0x8, 0x3ff, @value=0x7fff}) r3 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x5, 0x0) ioctl$VIDIOC_G_FMT(r3, 0xc0d05604, &(0x7f00000000c0)={0x10000000000001, @win={{0x3e0, 0x1, 0x100000001, 0x1}, 0x3, 0x5, &(0x7f0000000040)={{0x242, 0x5, 0x96, 0x200}, &(0x7f0000000000)={{0x2, 0x3, 0x4, 0x1}}}, 0x8, &(0x7f00000001c0)="99452676fefa42ccba05edfd3613127edc52d28449ad1dd8d55f44e6edfcf0e7cddd297e37c22d5669c7f52f0cc4618cd89f0cd604b8bce76b290ecfbf6d0780ab66f684255e1e0a95ac506d7523adb374d49a7e5795ab0ef3a1bf4ffe2af4b04dd3a61930c60336e7ddb3a9f5e7e037f7f45349151d74bf52f2251d0fe52b73c59d41940f0267df1ed07600", 0x5}}) fcntl$getownex(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0}) rt_sigqueueinfo(r4, 0xb, &(0x7f0000000440)={0x11, 0x6, 0x3}) 05:07:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="3b01000000000000220000000400010000003ce81c8f8bc494f2eb7a498c2c042c487bbe850dbb1c6c"], 0x18}}, 0x0) 05:07:43 executing program 0: pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) openat(r1, &(0x7f0000000040)='./file0\x00', 0x4240, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="000775b005e381e5b3b60ced5c54dbb7", 0x10) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xf}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) write(r1, &(0x7f00000001c0), 0xffffffea) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:07:43 executing program 4: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:43 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:43 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}, 0x800}}}, 0xa0) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r2 = accept4$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000640)=0x10, 0x80000) r3 = syz_open_dev$mice(&(0x7f00000007c0)='/dev/input/mice\x00', 0x0, 0x400801) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000800)=0x9, &(0x7f0000000840)=0x4) r4 = msgget$private(0x0, 0x10) msgsnd(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000000000005ff5568c59ad3ab1a56d7d6efb8d7e5f996189d736f5db6b93694ec10331ee27b7100c318a5a652680a319ac85c787f86067bd429d95613978275f923a6774b0b80e84f05609995a92de89c8a3b83216695a1f3885581fb74ce5ff473a10568c4bb12e3cc21f4615e40f7b0bbacad5eeed97d391cad95dfd34c5f52923910df09e60d03b1ce7406654df0b5b7ae7d3ad340000000000000082b3a964704c7b7e2a7b68b79f9773b96ab35d9e4b031abf57548aac3721fc546bc97823162fd1ac8ca00c"], 0x1, 0x522764f9c6e071be) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000680)={0x0, 'team_slave_0\x00', 0x4}, 0x18) openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x100, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000580)={0xfff, 0x8001, 0xfffffffffffffffe}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0)) r6 = socket$inet6(0xa, 0x3, 0x8000000000000a) bind$inet6(r6, &(0x7f0000000a00)={0xa, 0x4e24, 0x3, @local, 0x5}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev={0xfe, 0x80, [], 0x60}, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) renameat(r7, &(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000240)='./file1\x00') clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f0000000000)) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x400000, 0x0) clone(0x800000, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @mcast2, 0x1}, {0xa, 0x4e23, 0x0, @empty, 0x2}, r0, 0x4de8a597}}, 0x48) setsockopt$inet6_dccp_int(r6, 0x21, 0x10, &(0x7f0000000a40)=0x2, 0xfffffffffffffd65) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000440)={0x0, 0x5, 0x81, 0x100000000, 0x2, 0x2000000000000000}, 0x14) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000600)=0x10) 05:07:43 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}, 0x800}}}, 0xa0) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r2 = accept4$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000640)=0x10, 0x80000) r3 = syz_open_dev$mice(&(0x7f00000007c0)='/dev/input/mice\x00', 0x0, 0x400801) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000800)=0x9, &(0x7f0000000840)=0x4) r4 = msgget$private(0x0, 0x10) msgsnd(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000000000005ff5568c59ad3ab1a56d7d6efb8d7e5f996189d736f5db6b93694ec10331ee27b7100c318a5a652680a319ac85c787f86067bd429d95613978275f923a6774b0b80e84f05609995a92de89c8a3b83216695a1f3885581fb74ce5ff473a10568c4bb12e3cc21f4615e40f7b0bbacad5eeed97d391cad95dfd34c5f52923910df09e60d03b1ce7406654df0b5b7ae7d3ad340000000000000082b3a964704c7b7e2a7b68b79f9773b96ab35d9e4b031abf57548aac3721fc546bc97823162fd1ac8ca00c"], 0x1, 0x522764f9c6e071be) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000680)={0x0, 'team_slave_0\x00', 0x4}, 0x18) openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x100, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000580)={0xfff, 0x8001, 0xfffffffffffffffe}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0)) r6 = socket$inet6(0xa, 0x3, 0x8000000000000a) bind$inet6(r6, &(0x7f0000000a00)={0xa, 0x4e24, 0x3, @local, 0x5}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev={0xfe, 0x80, [], 0x60}, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) renameat(r7, &(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000240)='./file1\x00') clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f0000000000)) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x400000, 0x0) clone(0x800000, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @mcast2, 0x1}, {0xa, 0x4e23, 0x0, @empty, 0x2}, r0, 0x4de8a597}}, 0x48) setsockopt$inet6_dccp_int(r6, 0x21, 0x10, &(0x7f0000000a40)=0x2, 0xfffffffffffffd65) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000440)={0x0, 0x5, 0x81, 0x100000000, 0x2, 0x2000000000000000}, 0x14) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000600)=0x10) 05:07:43 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet(0x2, 0x0, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) [ 284.526654][ T9854] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 284.649825][ T9856] FS-Cache: Duplicate cookie detected [ 284.656244][ T9856] FS-Cache: O-cookie c=0000000079080b36 [p=00000000d9ba38ef fl=222 nc=0 na=1] [ 284.665363][ T9856] FS-Cache: O-cookie d=00000000886ae024 n=00000000167d5282 [ 284.672886][ T9856] FS-Cache: O-key=[10] '02000200000002000000' [ 284.679466][ T9856] FS-Cache: N-cookie c=00000000698539ba [p=00000000d9ba38ef fl=2 nc=0 na=1] [ 284.688331][ T9856] FS-Cache: N-cookie d=00000000886ae024 n=000000005209c387 [ 284.697479][ T9856] FS-Cache: N-key=[10] '02000200000002000000' 05:07:43 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:44 executing program 3: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}, 0x800}}}, 0xa0) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r2 = accept4$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000640)=0x10, 0x80000) r3 = syz_open_dev$mice(&(0x7f00000007c0)='/dev/input/mice\x00', 0x0, 0x400801) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000800)=0x9, &(0x7f0000000840)=0x4) r4 = msgget$private(0x0, 0x10) msgsnd(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000000000005ff5568c59ad3ab1a56d7d6efb8d7e5f996189d736f5db6b93694ec10331ee27b7100c318a5a652680a319ac85c787f86067bd429d95613978275f923a6774b0b80e84f05609995a92de89c8a3b83216695a1f3885581fb74ce5ff473a10568c4bb12e3cc21f4615e40f7b0bbacad5eeed97d391cad95dfd34c5f52923910df09e60d03b1ce7406654df0b5b7ae7d3ad340000000000000082b3a964704c7b7e2a7b68b79f9773b96ab35d9e4b031abf57548aac3721fc546bc97823162fd1ac8ca00c"], 0x1, 0x522764f9c6e071be) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000680)={0x0, 'team_slave_0\x00', 0x4}, 0x18) openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x100, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000580)={0xfff, 0x8001, 0xfffffffffffffffe}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0)) r6 = socket$inet6(0xa, 0x3, 0x8000000000000a) bind$inet6(r6, &(0x7f0000000a00)={0xa, 0x4e24, 0x3, @local, 0x5}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev={0xfe, 0x80, [], 0x60}, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) renameat(r7, &(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000240)='./file1\x00') clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f0000000000)) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x400000, 0x0) clone(0x800000, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @mcast2, 0x1}, {0xa, 0x4e23, 0x0, @empty, 0x2}, r0, 0x4de8a597}}, 0x48) setsockopt$inet6_dccp_int(r6, 0x21, 0x10, &(0x7f0000000a40)=0x2, 0xfffffffffffffd65) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000440)={0x0, 0x5, 0x81, 0x100000000, 0x2, 0x2000000000000000}, 0x14) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000600)=0x10) 05:07:44 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x2, 0xffffffffffffffff, 0x0, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}, 0x800}}}, 0xa0) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r2 = accept4$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @remote}, &(0x7f0000000640)=0x10, 0x80000) r3 = syz_open_dev$mice(&(0x7f00000007c0)='/dev/input/mice\x00', 0x0, 0x400801) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000800)=0x9, &(0x7f0000000840)=0x4) r4 = msgget$private(0x0, 0x10) msgsnd(r4, &(0x7f0000000900)=ANY=[@ANYBLOB="02000000000000005ff5568c59ad3ab1a56d7d6efb8d7e5f996189d736f5db6b93694ec10331ee27b7100c318a5a652680a319ac85c787f86067bd429d95613978275f923a6774b0b80e84f05609995a92de89c8a3b83216695a1f3885581fb74ce5ff473a10568c4bb12e3cc21f4615e40f7b0bbacad5eeed97d391cad95dfd34c5f52923910df09e60d03b1ce7406654df0b5b7ae7d3ad340000000000000082b3a964704c7b7e2a7b68b79f9773b96ab35d9e4b031abf57548aac3721fc546bc97823162fd1ac8ca00c"], 0x1, 0x522764f9c6e071be) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000680)={0x0, 'team_slave_0\x00', 0x4}, 0x18) openat$vsock(0xffffffffffffff9c, &(0x7f0000000540)='/dev/vsock\x00', 0x100, 0x0) ioctl$KDGKBENT(r3, 0x4b46, &(0x7f0000000580)={0xfff, 0x8001, 0xfffffffffffffffe}) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000800)=ANY=[], &(0x7f00000002c0)) r6 = socket$inet6(0xa, 0x3, 0x8000000000000a) bind$inet6(r6, &(0x7f0000000a00)={0xa, 0x4e24, 0x3, @local, 0x5}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0xb}, 0x1c) syz_emit_ethernet(0x437, &(0x7f0000000200)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev={0xfe, 0x80, [], 0x60}, @local, {[], @dccp={{0x0, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x10) renameat(r7, &(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000240)='./file1\x00') clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='nfs\x00', 0x0, &(0x7f0000000000)) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vsock\x00', 0x400000, 0x0) clone(0x800000, 0x0, 0xfffffffffffffffe, &(0x7f00000008c0), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x0, @mcast2, 0x1}, {0xa, 0x4e23, 0x0, @empty, 0x2}, r0, 0x4de8a597}}, 0x48) setsockopt$inet6_dccp_int(r6, 0x21, 0x10, &(0x7f0000000a40)=0x2, 0xfffffffffffffd65) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000440)={0x0, 0x5, 0x81, 0x100000000, 0x2, 0x2000000000000000}, 0x14) sched_setscheduler(0x0, 0x5, &(0x7f0000000040)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000600)=0x10) 05:07:44 executing program 0: r0 = open(&(0x7f0000000180)='./bus\x00', 0x8000, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) r2 = syz_open_dev$rtc(&(0x7f00000005c0)='/dev/rtc#\x00', 0xf37, 0x0) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vga_arbiter\x00', 0x40, 0x0) socketpair(0x1b, 0x80007, 0x5, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)={0x1d, 0x8, 0xee87, 0x27fe, 0x9, 0x1, 0xfffffffffffff6d1}, 0x2c) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/uhid\x00', 0x802, 0x0) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000700)='/dev/userio\x00', 0x200, 0x0) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000740)='/dev/dlm-control\x00', 0x10000, 0x0) r10 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000e40)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000f40)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000f80)={0x0, 0x0, 0x0}, &(0x7f0000000fc0)=0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001000)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001040)={{{@in6=@ipv4={[], [], @remote}, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000001140)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getpgid(0x0) getresuid(&(0x7f0000001200)=0x0, &(0x7f0000001240), &(0x7f0000001280)) r18 = getgid() r19 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f00000012c0), 0x800) socketpair(0x1d, 0x1, 0x6d5c, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(0xffffffffffffff9c, 0xc0405610, &(0x7f0000001340)={0xa, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x80000, 0xffffffffffffffff}) r22 = inotify_init1(0x80000) r23 = accept4$unix(0xffffffffffffffff, &(0x7f0000001380)=@abs, &(0x7f0000001400)=0x6e, 0x80000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000001440)={0x0, 0x80000, 0xffffffffffffff9c}) r25 = socket$xdp(0x2c, 0x3, 0x0) r26 = syz_open_dev$sndpcmc(&(0x7f0000001480)='/dev/snd/pcmC#D#c\x00', 0x6, 0x8000) r27 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/mISDNtimer\x00', 0x100, 0x0) r28 = creat(&(0x7f0000001500)='./bus\x00', 0x40) pipe(&(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r30 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002a00)='/dev/sequencer\x00', 0x10000, 0x0) r31 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002a40)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r32 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000002a80), &(0x7f0000002ac0)=0xe, 0x0) r33 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002b00)=0x0) lstat(&(0x7f0000002b40)='./bus\x00', &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002c00)='./bus\x00', &(0x7f0000002c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000002cc0)=0x0) fstat(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002d80)='./bus\x00', &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000002e40)={0x0}, &(0x7f0000002e80)=0xc) r41 = getuid() fstat(r1, &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r43 = getpgrp(0xffffffffffffffff) r44 = geteuid() getresgid(&(0x7f0000002f40)=0x0, &(0x7f0000002f80), &(0x7f0000002fc0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003000)={0x0}, &(0x7f0000003040)=0xc) r47 = getuid() getgroups(0x1, &(0x7f0000003080)=[0xee00]) r49 = timerfd_create(0x9, 0x800) r50 = syz_open_dev$dri(&(0x7f00000030c0)='/dev/dri/card#\x00', 0x7fff, 0x80102) r51 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000003100)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r52 = syz_open_dev$vivid(&(0x7f0000003140)='/dev/video#\x00', 0x3, 0x2) r53 = memfd_create(&(0x7f0000003180)='{md5sumX:^\x00', 0x4) r54 = dup2(0xffffffffffffffff, r24) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000031c0)={0x0}, &(0x7f0000003200)=0xc) lstat(&(0x7f0000003240)='./bus\x00', &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000003300)=[0xee01, 0xffffffffffffffff, 0xee01, 0xee00, 0xee01]) r58 = ioctl$KVM_CREATE_VCPU(0xffffffffffffff9c, 0xae41, 0x2) r59 = syz_open_dev$video(&(0x7f0000004540)='/dev/video#\x00', 0x9, 0x2000) r60 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000045c0)={&(0x7f0000004580)='./bus/file0\x00', 0x0, 0x18}, 0x10) r61 = syz_open_dev$sndseq(&(0x7f0000004600)='/dev/snd/seq\x00', 0x0, 0x103000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000004640)={0xffffffffffffffff}) r63 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000004680)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000004780)=0xe8) r65 = getgid() sendmmsg$unix(r0, &(0x7f0000004840)=[{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000240)="1c3b11cc7bcc7a1472aff86fac3a2a9cd2f47c7ddfcd121ed67cde835c9e1c045d", 0x21}, {&(0x7f0000000280)="2d166d2fcf40aac13c98cb8237918ff46b1403583a62010e5fc0b447b9bf85c24ad093fbb5d31a4fcaa9ef5ee82dd0bc92074b6d22eb15daa9dd9105d45950bd97e221acc8", 0x45}, {&(0x7f0000000300)="e968b5612a05c4e1da6334fe18e54cc5f88e53275f108b5f6ee28e56eb86a61c5e8c22d78e2bc5a370c284cab4c290778cfdad52ce835ae3acdc7a0c2dbe7d41b07c8910cf0f4e004e5dee42e5e01f12798d3cbf634aa1dbd5bdfda007dbd9fc08ce9077a19caa93b19916f7cc7560812d4d762489e8ab399b473d9eca4f919d89f91fe7a394b2f09d1a5570a3627023a74729179e71341c83ec08e387db42719717db558395e7c479eb3f20ccde73df29c06d2cce8329ea786e6172b354efae", 0xc0}, {&(0x7f00000003c0)="6afb7310570143275146324231c08290df5f549059030039da76f0ee4a44e510c02488e51a15a30137569fdd8b9edae73dc98b55ddf7249f60c65d105d7117e733766c15ec94ff773e48467efcc201eaf3f43299936248fa08c39a1f12b7441f31c2437f", 0x64}, {&(0x7f0000000440)="13a7d12f9565020665cc4156718ede3e88e2464946f70a978f3ae8862d3ecd46912f669ad560ac6389b6ff51a4cb474f86eb", 0x32}], 0x5, &(0x7f0000000780)=[@rights={0x20, 0x1, 0x1, [r1, r2, r3, r4]}, @rights={0x28, 0x1, 0x1, [r5, r6, r7, r8, r9]}], 0x48}, {&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000880)="ba958d8421848426", 0x8}, {&(0x7f00000008c0)="a0356ac4a87fd26b8bd9f04706ca88d52dc87aec7e600ff2654efa1112049529ababce5c23f0d59c9d64943943c520eff35a639d5bbfc861c4b3bcc3337f2e7c4d9ed00e92a7be81051e066d5a3337eabd347e15a08c1c3dff2fff98bf6e61dcd7fb1a6c55", 0x65}, {&(0x7f0000000940)="74cb7343a3f1f6b790f4062378150c5a14ee2f9102711ecff9f06662f4ae726b600b887278690720db1a879e8b99957c68e75458b8d2fde18458b71c32f87abc6f6a60657145b987f526ca920a89e03d6246880ff124a464ab65f14f21057ec0206265e42bfb3bc5ba3853e234c1d38c4b8ac2e4fbce4c25b084525b2e384a34f5453e5b3081a30b7cf6cbcc5395ed60f717b8754fb4862a537679c125c93d266ce47615dd2a05e13f1725590fed64e22cb061d6611c", 0xb6}, {&(0x7f0000000a00)="846857781d3af72f2ed94fef", 0xc}, {&(0x7f0000000a40)="8a7108dfba9407bccf13d1a925d7c4982d3ca1e19a1dc1b355b9e5555795c729841138f02049ebdeb2c86286259c654a928f64137b", 0x35}, {&(0x7f0000000a80)="0a408671269dace9bf1e446164603067f05c51a182703788e7f78fdc84247995111340d45c49c0a4babbbd1592238c326242064cc7d5d14f174a9fb52ea6c035503b0352f610e043396035c3f63b1a77ac592aa580aeca80cf9c5d3022da8dfe5ea448abd0d1daafeaee48263451a626fef2fff92d4f374f717fc6e4a920b21844", 0x81}, {&(0x7f0000000b40)="47c75bd9676c351d8774842bacaf7de7cd7ad9ff867c64cbb3720f8f5454173e005eef48b83174d7f9bcd2011a1cf3ef639a01b659e0da4f14c1e26a0f28e7b63748ac24fdf4d377e13ee6b1b16174e2849a146bab6717e94cb6212300350c83ec28d9f4dfac2fa99c2faa45d4da3d0b5afffa685eefd5e16ff2b577b7a3106950ad7193130c7ce2748a95f8d004529875bcc758958d7b685139fccdcb85969566a3602be34a94ea9b4d863e48cdd773548ac50e428bc94fbc51a4925169af617ffec08e84955f3f414ae3c06550d3c3c158edb73e54cd8b5ccef18e421f9ccd977766", 0xe3}, {&(0x7f0000000c40)="c0d6462e34a1ec8e354a1deea1d39f50503dd4a6bc063186647762346f1369f81e527d3f9c1bff995167b544a8df311e8867160231f4960d15ee2d8602ce26510e6f5494b071d5dd630862a5c39baea98096dc777df36380011feb9f5fbbeeacc30e10e74e2ef4d10ce385846e5ca8504f02b02b72dcf7efbca46428a5906176346a7e3916193ab8ab5b3773522c6a586e5572d95517294bef1a3560e13a7f8448e5ced4d4e12819797185bd377d187b64f400ae82c527a95441a39df151ca9e6c35fc59f6cce09c2ebc6d2b3b8d67842c2e075c00db", 0xd6}, {&(0x7f0000000d40)="2e081bb4491f7b7ce999a830575bb4efd5fde549521ee8a9dbe3d4cced00ebc1f9606e", 0x23}], 0x9, &(0x7f0000001540)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0000060000000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB="0000000038000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r21, @ANYRES32=r22, @ANYRES32=r23, @ANYRES32=r24, @ANYRES32=r25, @ANYRES32=r26, @ANYRES32=r27, @ANYRES32=r28], 0x98, 0x20000000}, {&(0x7f0000001600)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002940)=[{&(0x7f0000001680)="dc4f20e7fa6b1d3f826e785c5f9acb1d6579cc9cf2528437b528c6d73a51eb076ce7590167822927c19efae398e6ef4e9281ff0d138ca0b61d59edd5e758ad223304f42a88f99a522a0dc2081dbd48ef96dcfed93c29c6ada0654dc7370df23e4d94bfbcfde98e4a0e03527ca72a5ac8607e837f9c4c67a6227b10f4feda34a45ba48acf014adadc64de3558c95a070eaccade002c780b6a9953bf8ff4514584d9a829ed2ba2620410210c4f7e1c35967d8dff9f49d15a59507dc26bb4de750cde8f383ef1353d25f214f305e7de68e544f5df34b516f35535288f8a86c0eea372a5c35823e240f10281476a", 0xec}, {&(0x7f0000001780)="07f20237b6afac49588e37728a72a8eca1a2b4cacc20a5506fde0f3d039781db2bc0b030490173dda3fcbaec91d7c48ecbcce83ef346479427d5a7799176a787e86062b33a9e963e9652fc2c", 0x4c}, {&(0x7f0000001800)="15f6ab925df73a36baa8d2d1a30c51644146cb635b4fde77ce97377360e0f0c7982cc362c9fec5fe22261ce212244aed3fdeca8376ab50be08cd190e50a4815a6f558824c439acffdefb85b6d79e5163bc940635c3d308d4762710e866936177a6004c21b7340318c084002135fff6d6d1e7b5538676aede38fffb17f377d3004d7f78109b15bdd2053596a52b4b6284935c8f7c0b1ea16a65ab47e0e52eba784b97a8458806d8696a9d3693fe5868f49766d8c9c44fccfa6c602f2aae543156d72995bb", 0xc4}, {&(0x7f0000001900)="a657037f4b42d069", 0x8}, {&(0x7f0000001940)="e67e24feea5af805a6f54a585e6bdd82dcff943a59d12497d5deef5e7dca0ac0b22d1b658fd32070dede433372fe5f7406dd58b527beb123dc721766f8978d73a94e68132c74b4e9ab56e4dc02ae501e95ec4b56bbfcb65006b0d0c07abce5fea58fffbc514936d84ee3ba4d7636f5abc62484de2d79e5c96c14f2e88b70a801d78831d8c54cb6fb54728bbff7fe86f099fb5f4bcca226a135d3f18350aa663ddc4afbf45ec9c561ea4ee86d0ce9141e7c740f84603d2946024e949aa22dc9adfefc903761247928b1a69a29259629ef00194c0d687c47c98a7d38ae88c286f7628645b47ee3d403f0f622f2aaae78710e02b7f0f12fff7c823c792c7066ec54b6945ab77763ffa88141b6f7afdfaeee8e1fbd16342780ea1a99fa3136c7502278bb3349504c2659bf6469751f6c6e7c6676853f47d0c422f125485722be0552773e9408617017405a4ffc890ee4383027731b88b87de393f8e95a7b5dded910cec6354dc9989fb30bf241a7840987b1e6e4834503e6700b7fc87430f4fe1e560d7a5e23746c1038c698755bada1675394357f6c0e80f588ccf77fdd2339455154f54b3ec29a3a5d1596b3e24be9d629a0a649c0f381f0e243fd72335a4cc8dfa2f21f6042680b425553f316f5118352d1c3353c363f20fede8845ec8ce22b3024c4ed55e1dfa457b2f01099262fc2d31819bb48cd3f67d42426f519c87b962ec4957866cf2a2efb9475b34d2dbee6656451aa18897c98954eac8d187b433c3d6b993d5e8099d3c7ca00c8b5aa825ef86700c10bb3baea5decbdbdd26ab7d247462ac5523ab431f44da07a7aadf9e79a0de5e49caeb974968b9c20662b1ee31fae4c7105e3b0838a884241b9e63b60b51063008e1eed2f7492fa50be718eca3adf0249131824564ee9c3fce62e54722433662f86e2258fedaaddfe6ef23b1411a1fc48abe0c369a1dfb0d4818b7457db3ea04b063a79eb400ee5562e9e30e77cb99f629b0929593fc5fd4ae86950f88e0327d04dda28327756483c7f879d135bda039bfa89ec3b75706a483cea13d3c42b840fb9f70780da2aa47461438c6c9e1e130e191293a052220d940203dd9a12a2d419d8a4f87131492910557af66be462f4880b3d03a4493ce8d5b2afa5323d57b7a6a6dbc8635d4503af5177317ac17fadb540ef87bedb530eb06781e328e049fd1ab7813930b330c7cdebe09a4d9d2f689c5bffae61f5d84293d046d90c713e6b62a62d639b9e2483747880375dd87143ad51da4547efd9fc706f2adf0b30b0654191e4dd474874321b1ea534a6e963c76f91f7f966e93ca7670d532a6c3c84bc850129c457628a3a2c3160648426a273ed159eda2cf6334f8cda3726e2ce603de466817a34d907392d3ee787a60608624a44b9ea60f910cca3ea20eff0a890596faa7b7f75086def476c75306528b976c2d25431659670de86bf4a1ab50c4468d4019a0275e34f9540ef4fcbbd3c04c2345c41af3ac6853d3f0567fe493da79731be4b5d0283d281d46295dad55601440c87857f20164d569dd580390493db3bf5827f565ce201482879e21711ec76c164e9e1b035c529e314faa9c700b1efd98026d79844b0a1655a0f138217770a7ccae33f002b669eed381ffbdf30c5d9334e600cc5a233ac97cfda26fc26515a76b87c4515d195e8efacc9178dceb3ce47641d4a6b90f2865d0e932b36491b89f6c268b1ac4fe0a4ccf3126cc1199489a2010c03cd4fbff1830efe690161c1d1aa50fd8bd7c91d9d04205c9259acda6d38e82d6a48d70bd70f3a9525350092a4d805506de42054b94171d3e0cd0ba3c8057dfd4c3f72737bc60d25ef32966eaba603dd2af4413ae1997eaa3f4759c164d50f0e847327910fc1bcc6a27b5923404292bbab87d273ed1bbdbf75699f00da11fe048f06594abac1b7e161edd723a7e95407151fa87ff0954b2b577d29b4c1909a08e152e27fee3a398ff115ab62a677e5bd2a7ce2809977180ab445c06f2fb122a6aba35d70694d3eaf5075a0af728e733de8caa0f5425dfe50be4fdd704f752d3ab576c9015cb5db8d64652bfe1c6ba364ccac606834192d546d37a78887eb9cefcb4d4a73631945734ac9998ad837f4dc514abc29bb61f338de75321127133b34dad2203e50b922c690384210a2dcc9e026d03214b33e1c8dc09171844e29d92e15c446ab8fe572d13765f3ad16b61a1bd87936a5c308a1454bd100f6ab900d84575fce49740ed76531e64d6223ae1ac9f9e56c375eb2abddb59323e97cafec0d3a20904062358733f0db9158779de45236f59cca29418001fb17f91b8b7beaef098a03f81431859af614b92e76f5ecdbb81c1967bc2d3fa18d3a5253fad736311b2cffb4016dd9ade4899cc2b43c39a725cbb9aac60723bfe855087bea6811f39444ada23e6ad6e167cf3c5431b35e0feaeb3cf2e570b0845464171ad89d927bfc105c02cd8e2841d784afb20451cfdceff6b3e9609c3840537a8f73be279800a1f37e69c08a3c1a3505c68c88df8f814aab67092dfc823a535fec115806fa134bb6c2b871c1d147c40aadfb7b10928bdb64a4eb7882f8de9251fa7d5018c21de927382729d1070b47ad93d1a0fc8d995c217d6b4d956b6abfdec0ba9a0cdc8412d1f143469948d012b525c8c282005af25b754981d4086700fc7e5a5ef49b3092a969189136666f339186a5c28e5815e44bc5e49193dbc4e250d51d038604714fdfae282879f4e21ce75d92968c93e2b9ee9fedcfbf2d4f17838a77d3b241c9ae7f16746c7de885acc078af643f6f26133dc39d388a962d5e9183fde4ccbb4062cd6a2a2c1effa199ffc6bd92be5bbcf7df91f579e598dd8698f4df6326f87b804c671d379f4b89b6f3290102316580ca42e9c1c6bfdbfb6913751601b61945f713adc4be0889e69f7e5d097dfb6bc6bfac1ff7d19f163e7f6b9234e617ff5dd825d80805bdf643a82cdcd2b445f41468a650f4891c0ae68079bfbae4dc31686c7d5fcd24705bfba201ee639763ec025544e5a48262270862843a74f19cb1161f3807042ff4a63fcdf4aa9511781073a9c84e2c21327cb24134883236d013b074b2943af369f80daa30b2f8cc1e4ffe57bb170ddad456aa763fd1da42829ace02492e022257f31d2aa8dc0215b80478be4b4a40b6ec7fe49ca6db042a4f2f79b11635d8cebd248c4118bffaf2d0a7735d7b3426586cbf8ddbec52c195c8f077e9f794926353937d67235aa81c9cce1e473af72d245a5e34dfbe6e14691325f9c577e4272c9da042cba567a7c960c50430330692346f8ddd4bb69836a70f7667d71cafec86fae0edc32f1d9786b6f4ee538b0e39a43dfe49bd38a09af94c459607e60f117fc6373fec4706479a745d7b14d4868dc9a7abaf5b8f13466a917738b918fc576654aaeb120f7fb58583288c7bc4247f8728d23891c771faadd396f99be2f077fd293dc35fd406292ec46970d2f11ee2cf5ed3b7eb6beb4d05a8a362cf48ff5da622a5685f9c07945c43dd8c2a7793b0d62bbef419a9033af6b1e896212764db761c5cb276234c9e92836413c576fbc76ba98107dd1736c380f742f6530ba45d9f4c4fdc74397ee84d28aaa96588e5645291a2aa01f19b2e5a5e667d9e5eae63ab0ddf0bf4586ed354d93a383788151cb2c2caffd44ea24c7385a128d19a5e32b1341127dd12742af402cb6e47681228d21fd86785b80e81be7e31743bbaa845d9f0c7b53de739a2cc5ecc10d8f1a7d6d05ac1a153625d07fdb3b9548ec1984596528e4b2db9989041d55837e4d80fcef77c932957a54466cd84e100b253cd293d7d6b7b656d9a2540a2e7fe9febd67994070fbe3c1f8eeb055f2cd5ed31be43532b5a76b9dacf82b1f2abf8a6b5ed82c0ce2b08ed9a10f9300e59fcc5317cc3a47c6b8be8c43e14b30625925f6f53850df2cf9de6fe55826ea634d9c659b1ef3064b62c378f1002e2d0f599b26a187f31f5f6c51b4514c06be8f7adf3948b07bb46aecc53ddf4b0e65fd624c8e89e64502af17cb1d05c99238353eb4f6d60e3d9d74f0c179449951d1bf8fea306c0b69f71c1ec1330d309f3e479b565dbfb757b669c3f8be0602b1e8c9c78ae32e8cda03725a674abfba3b6f1589188bd19d473709d8c47bb092768c3b8e9889454ccb42330d902c6ef40a0b83d305493c595c9d7695658753cca1cc173358cc18d71673cc729b3050893728538efe4aefc5540cc47fb054266295f62db41a973be88eafedab506cd203914282a6511a30d53d66bb93e176c50957d589ad4c1e9b103ec77b5fc5359beebe84900c0744fe750ae4bb62f71ed288446d71606cae53c804e031ca29822dd15ab8532c4e1b2c8bfa1d65e566123d9710349752125864461337a3ac8755718eb61cff6f74b2cc31581acdd679ffd6fef1d879719624b34cc8c5bde2c234d58ca8c5f124b0a47636003ee4d3526921921329e8edf3d4b3f4e061d119d31260ebb89840a3ad65d9694da80431affe27f507df029901a9dd9cb963d7071dbea077dac0aeb8a83e7c70601c54b0eeb76f1e4426c26849866bc98b5a13fef0e67f6fa484e36aef0350766622ef10410eda8d4f23f9611e08c85cdaf016d9a5d634a64dd18b7690241b854db794a086f9e5e620e6d600f3e217204cf699411e35cd21e1a5e594c288e13ee8158f21a6aed7fff8dcf479fac4ac97c58be09f34e00d82de373ad033789288faca97ad57c67a58e07577dd979cf34898dcdde4bf1721d0a7f5d463a52a14ae8de9e05238cb36bcbf1876155679fb2d108514ac466f47fdd9551605e73133a6430438816bc33503a9a81f9c4b623c69555f9b4697b3a5384092a4b8173c853fa94b5ea657b25d6f41a60a8d22275c2e6becbfcf4eb5b7ca2d3d1dc79fd7b80b3a2e54a870624802598a5088f90449d6677c2b25f3ebf80e4c9bc218c5f94dc38ff51e1cacf6f921587e5c7e4e1d802a79e88d565b00c915ec54bd01ecefa60f83d4d8eb556678ab328950240fe570e6d780c524cce5edffe1a4c9db4a303b73cdc39c0ed862026efe08d94e50eb6007a2b4881a6207281f184c6bf2c4ea9a009489fba0e35b52a3790beb45677f612138e875e80a39ca0b9b732bc8f7d86220bf4470bf6b842079a621931072404a4365f949a597c4b9f5314f247d6a54ff0611dbe80bcb18e78c6b5ab582b43af9488684ce520389949fcbfcd46da767ee2686cb450158d55ab57ce7e4b7008b72a8674cf7e60bc931038c41157f4ffe68a43929c339cf25a4a992a6bea3ec432470d0e81126dd45eee0c84abf112d7f4a4a055c5f8d9f157e0b383579b5fd79fe2e35610ef12f0de2a1c99911f9e42776ddd27e1a3d448305c0e4eefdcebbba8c5f736aebe699f5ee436bd14208627c65d0f32c41a3ec3bf42216a40d0361a5f9c6cde1b29cf557d1b6f3d163c841b151c63a91c4d9193c84774301ad8a0b9d3764f0bb63a1871801907504828b7982f4bed8cd88fce1f01ffaf261741fbb0f08af1748959ee528b6021f9bc665a9538f3258e51af0546fc4a2d235c91f4216fcb482026b1cfbc89bc5c3962af90b56b3f4132e2226288de2851543da7bfaaab0770364a004287aa5f2bb414b99e12539f09247af20b14285e02bf2567bf94b1b89294dc6099917238e0ea8bc95e52fe9778519697cea12598898e7d6fa7369e89fa9a092e731344dceaddced90e272a99779940756a37c7d2457c42644213045d2ca924d68e30c4d230e02a68da673b5b68dd8035c48e1f837d", 0x1000}], 0x5, &(0x7f0000003340)=[@rights={0x28, 0x1, 0x1, [r29, r30, r31, r32, r33]}, @cred={0x20, 0x1, 0x2, r34, r35, r36}, @cred={0x20, 0x1, 0x2, r37, r38, r39}, @cred={0x20, 0x1, 0x2, r40, r41, r42}, @cred={0x20, 0x1, 0x2, r43, r44, r45}, @cred={0x20, 0x1, 0x2, r46, r47, r48}, @rights={0x28, 0x1, 0x1, [r49, r50, r51, r52, r53, r54]}, @cred={0x20, 0x1, 0x2, r55, r56, r57}], 0x110, 0x10}, {&(0x7f0000003480)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004500)=[{&(0x7f0000003500)="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", 0x1000}], 0x1, &(0x7f00000047c0)=[@rights={0x28, 0x1, 0x1, [r58, r59, r60, r61, r62]}, @cred={0x20, 0x1, 0x2, r63, r64, r65}], 0x48, 0x40000}], 0x4, 0x4000000) r66 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r66, 0x40086602, &(0x7f0000000000)=0x30) ioctl$SG_SET_FORCE_PACK_ID(r66, 0x227b, &(0x7f0000000040)=0x1) ioctl$KVM_SET_GUEST_DEBUG(r66, 0x4048ae9b, &(0x7f00000000c0)={0x10000, 0x0, [0x5, 0x2, 0x4, 0x3, 0x2, 0x7f, 0x1, 0xfffffffffffff001]}) r67 = open(&(0x7f0000000080)='./bus/file0\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r67, 0x0) [ 285.177617][ T9887] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 05:07:44 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffd76}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100030e00000003000000000000000500061f000000000a0000000000000400000000000000000000002100004000000100000000000002000100010000000800000200fd00000000000a004872bbb6896209000000000000009aec3f3f7710aa000000ff1700400000"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x0, 0x3) 05:07:44 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200), 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) [ 285.332854][ T26] audit: type=1804 audit(1548911264.392:42): pid=9890 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir977190095/syzkaller.i0K889/67/bus" dev="sda1" ino=16663 res=1 05:07:44 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:44 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000080)) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000040)=0x100) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x80, 0x0) 05:07:44 executing program 4: recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, &(0x7f0000000280)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) socketpair(0x5, 0x0, 0x1000, &(0x7f0000000000)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0x10, &(0x7f0000000980)={&(0x7f0000000940)=""/24, 0x18}}, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x20032600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)={[{0x2b, 'rdma'}]}, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x80, 0x0}, 0x0) 05:07:44 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket(0x100840000000002, 0x3, 0x1f) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x5a) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$inet(0x2, 0x8080f, 0x5) fchmod(r2, 0x40) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @local}, 0xc) write$P9_RFSYNC(r1, 0x0, 0x0) 05:07:44 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x6}}, 0x30) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000002c0)={0xfffffffffffffffd, 0x0, 0xffff, 0x7e43, 0x0, 0x2, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f19c70f6451984190d548f4183d8064653d30303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000400)={0x800}, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x1, &(0x7f0000000240)=0x4) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r2 = gettid() get_robust_list(r2, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000580)={&(0x7f0000000540)}, 0x0, &(0x7f00000005c0)}, &(0x7f0000000680)=0x18) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = syz_open_dev$amidi(&(0x7f00000004c0)='/dev/amidi#\x00', 0x3, 0x418101) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000280)={0x100000000}, 0x4) setsockopt$llc_int(r4, 0x10c, 0x3, &(0x7f0000000000), 0x4) connect$llc(r4, &(0x7f0000000080)={0x1a, 0x304, 0x7, 0x4, 0x2, 0x82, @local}, 0x10) 05:07:44 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x20102, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_LK(r0, 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) 05:07:45 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x20102, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_LK(r0, 0x0, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000000)) 05:07:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x18) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000140)={r3, 0xffffffff, 0xbb, "2c99d23e70a4ea1433ba98634debc68baa46fd25c36cc317f71f23f121d1b8973efc66d2a76eee170d0881615cd9e887961c2fa96c9790bbb8fbe6e64792b546148ff037568982ae2e26ec0868010abb4f51b454a9ddc2f786e36cf1fc2953a6168b18a59c4ada088ced7cc30198c6a5efbb3bb6fdcc2a0b20083abfeca0d66d7c295ded07e68ca6c10d7d710c58163c0330c058c3be3e457942add76b29b1dfa8bf134c359a777d281ba61916076fcd21e0bf4d8cdbf05121b6bc"}, 0xc3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(r0) [ 286.048514][ T26] audit: type=1804 audit(1548911265.102:43): pid=9936 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir006806395/syzkaller.NJZYro/50/memory.events" dev="sda1" ino=16666 res=1 [ 286.148844][ T26] audit: type=1800 audit(1548911265.132:44): pid=9936 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor4" name="memory.events" dev="sda1" ino=16666 res=0 05:07:45 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:45 executing program 4: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:45 executing program 3: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8003, &(0x7f0000000380)=0x5, 0x5) close(r0) ioctl$TIOCEXCL(r0, 0x540c) 05:07:45 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_mtu(r1, 0x0, 0x19, &(0x7f0000000200)=0x88, 0x4) getpeername(r0, &(0x7f00000000c0)=@caif=@util, &(0x7f0000000140)=0x80) 05:07:45 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) timer_create(0x0, &(0x7f0000000580)={0x0, 0x3e, 0x0, @thr={&(0x7f0000000400)="b2cfa4d8e66cfa702c02dae5d0923eeb20691b6f77217a4b6f7fcefdc49327b5ebe23d7dcb8401987be0834db0ae9f4a236338dfced77bf972edaca30701c95f37c5cc3d93212ca52b805b6a01e5eb15d5d21fa54529b2a1550b4510dae26a3e73451a539a491c32d848b52a805f3344f95260916ba5cd0e31d65d4c2e33c9ef74e6dfe230ef5df8b35f46060e7de99ad9ff82240a2b359fccb5b77d40933863ab08243a3d5ecf32cd7726034d3714b505c1", &(0x7f00000004c0)="6f2d0fc3cc7e63b24e5c895d9bf3791886d75d59ac559469a9ae16d73eb0953b8b4e14b55e916403cff73e767212a04a31af84d6e17d59d84c2ab1e605b50ed4b0b2f4402cee194ac89a79e66da50fb79198aeb3065c82b4027b93d1ef9abe9607223bd16efd5198d832f0abc6f5fc14e6a78591f9465e29acbaf503ac9dbe90ca3b8eadeb423f86dd9e49f68718c06612012c11d2705b6015d58576c7daa3f15aa044fdb338cf91540e0cca8ef860af75fb68b17ed267e467c2c38f"}}, &(0x7f00000005c0)=0x0) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f0000000640)={{}, {r3, r4+30000000}}, &(0x7f0000000680)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000040)=0xe8) sendmsg$can_bcm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x1d, r5}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)={0x2, 0xe80, 0x5, {0x77359400}, {}, {0x2, 0x5, 0x400, 0x74b9}, 0x1, @can={{0x2, 0x6, 0x5, 0x9}, 0x1, 0x1, 0x0, 0x0, "0b2bef7892fc90d3"}}, 0x48}, 0x1, 0x0, 0x0, 0x400c000}, 0x4000) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_S_FBUF(r6, 0x4030560b, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000380)="3553fe823ba1", {0x8000, 0x0, 0x3447504d, 0x6, 0x100, 0x6d77403a, 0x9, 0x9}}) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000018008151e00f80ecdb4cb904014865160b00010020000000000009000e00060015000500003e00000000", 0x2e}], 0x1}, 0x0) [ 286.658753][ T9980] netlink: 'syz-executor0': attribute type 1 has an invalid length. [ 286.703696][ T9980] netlink: 'syz-executor0': attribute type 6 has an invalid length. 05:07:45 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x103000, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mime_type)vboxnet1,$trusted\xee,vmnet1keyring.posix_acl_access\x00', 0xffffffffffffff9c}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000003c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x0, 0x6}}, 0x30) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000002c0)={0xfffffffffffffffd, 0x0, 0xffff, 0x7e43, 0x0, 0x2, 0x0, 0x0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746d6f19c70f6451984190d548f4183d8064653d30303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000400)={0x800}, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r1, 0x10f, 0x86) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000040)=0x1, &(0x7f0000000240)=0x4) futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000100)={0x77359400}, &(0x7f0000048000), 0x0) r2 = gettid() get_robust_list(r2, &(0x7f0000000640)=&(0x7f0000000600)={&(0x7f0000000580)={&(0x7f0000000540)}, 0x0, &(0x7f00000005c0)}, &(0x7f0000000680)=0x18) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = syz_open_dev$amidi(&(0x7f00000004c0)='/dev/amidi#\x00', 0x3, 0x418101) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000280)={0x100000000}, 0x4) setsockopt$llc_int(r4, 0x10c, 0x3, &(0x7f0000000000), 0x4) connect$llc(r4, &(0x7f0000000080)={0x1a, 0x304, 0x7, 0x4, 0x2, 0x82, @local}, 0x10) 05:07:45 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20000, 0x0) read$alg(r0, &(0x7f0000000040)=""/120, 0x78) kexec_load(0x0, 0x0, 0x0, 0x1) 05:07:45 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0x0, 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x4000c0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f00000000c0)=0x7fffffff) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0xe1}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x107fffe, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) splice(r1, &(0x7f0000000100), r1, &(0x7f0000000180), 0x1, 0x2) 05:07:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) dup3(r0, r1, 0x0) 05:07:46 executing program 0: syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='fdinfo/3\x00') getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) eventfd(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000001c0), &(0x7f0000000100), &(0x7f0000000140)={0x1b7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:07:46 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x80, 0xa513, 0x6, 0x800000000001, 0x1}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000040)={0x0, 0x0, 0x77fff8, 0x0, 0x2, 0x0, 0x3f}, 0xffffffffffffff0f) arch_prctl$ARCH_SET_GS(0x1001, 0x1) 05:07:46 executing program 4: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:46 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:46 executing program 3: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x110) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x0, 0x1f5d, 0x8000000}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="27c665d267219574c44d186c28efaae8ed4b30ae1e67941bb4bf90f66fb23c0006d6971af402296e4cd4f1a1d6295c0d9133624a3966ff1095de2e45a4b3027160b70fa2ca", 0x1}], 0x1d0, 0x81806) finit_module(r1, &(0x7f00000027c0)='/dev/loop#\x00', 0x0) 05:07:46 executing program 3: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="240000001e0007041dfffd946f610500660000001f00000000000800080006000400ff7e", 0x24}], 0x1}, 0x0) syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x33015f07, 0x80) 05:07:46 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r3, 0x408c563e, &(0x7f0000000240)={0x81, 0x5, 0x2a, "a440d9a471e5c231c3d9cccf3347e9a3e5a28053554aaa603c1e31aa908c24c78f000b01212d4ee73e32e00182b3857b891069b17856ee8d495e377f", 0x1b, "c1f7059783e47ecdb9061d7da56d1195dc920b9f714b54787982091fdb355fbace59b3400ede1d7a1e1ab03fceca58332c7a07689afd7ef3c54bcd23", 0x20}) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) [ 287.675838][T10039] netlink: 'syz-executor3': attribute type 6 has an invalid length. 05:07:46 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x7) r1 = socket(0x11, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000021002551075c0165ff0ffc020300000000100f0307e1000c0800180000000000bc0000008f3943793a5ea67658cb22d90000000000000059b97dc8f8b550e66a2bff77c4931da84157f7a733686a22fd8169f6b6b4f464e0c05df670d851f785ea2b85d32b3583d87124da3bb0b9e2cc000000dcce1fb4ac2cbd48c8378a3ad82a5b83c01295723da595c4831f65123819e204853d48a5a6bd525801d5cae983cf4544a9c4c396f36e85787a8efc32e0015c85ead2b748bc6a5fefc4e53543f9f65e3da31a110af1acb78ce510c7a70723741b34981d1b182deb7904", 0xe0) [ 287.718748][T10039] netlink: 'syz-executor3': attribute type 6 has an invalid length. 05:07:46 executing program 3: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x1400000003, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000080)={0x9, {0x0, 0x0, 0x6d}, {}, {0x0, 0xfffffffffffffffd}}) 05:07:47 executing program 5: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x4, 0x80) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x8000000001000, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) ioctl(r0, 0xffffffffffffffc6, &(0x7f0000000040)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x10800, 0x0) 05:07:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270ff", 0x15}], 0x0, 0x0) r0 = open(&(0x7f0000000280)='./bus\x00', 0x141042, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000180)='bpf\x00', 0x1, 0x0) pipe(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0xfe22) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x200001, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000280)=0xff, 0x4) sendmmsg(r2, &(0x7f00000002c0), 0x4000000000000ce, 0x0) prctl$PR_GET_SECCOMP(0x15) pipe2(0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000500)=0x7) shmget(0xffffffffffffffff, 0x1000, 0x22, &(0x7f0000ffb000/0x1000)=nil) write$sndseq(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000000)={0x8001, 0x9a58, 0x18a, 0xfffffffffffffff9}) r4 = syz_genetlink_get_family_id$team(&(0x7f00000001c0)='team\x00') accept$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000300)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000400)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8080400}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="af2c8e15", @ANYRES16=r4, @ANYBLOB="0c0426bd7000ffdb6442df25020000000800", @ANYRES32=r5, @ANYBLOB="2c01020040000100240001006c625f743971ffa44e481d24a5a6309c1cc66b785f686173685f746f5f706f72745f6d617070696e67000000", @ANYRES32=r6, @ANYBLOB="080007000000000040000100240001006d6f646500000000000000000000000000000000000000000000000000000000080003000500000010000400726f756e64726f62696e000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000400000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000100000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000008000300030000000800040000000000"], 0x148}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 05:07:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0xe, 0x400) getsockname$netlink(r2, &(0x7f00000007c0), &(0x7f0000000800)=0xc) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x10, &(0x7f00000002c0)={0x0, {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000340)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, 0x0, 0x8000) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) getpeername(r0, &(0x7f0000000380)=@hci={0x1f, 0x0}, &(0x7f0000000400)=0x21) syz_open_dev$sndseq(&(0x7f00000006c0)='/dev/snd/seq\x00', 0x0, 0x4e400) nanosleep(&(0x7f0000000500)={0x0, 0x1c9c380}, &(0x7f0000000580)) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000480)) listxattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000700)=""/149, 0x95) connect$can_bcm(r3, &(0x7f00000005c0)={0x1d, r5}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@remote, @multicast2}, &(0x7f00000004c0)=0xc) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f00000001c0)={0x8a, 0x7, 0x3, 0x3, 0x2}) getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000280), &(0x7f0000000300)=0x4) mknodat(r4, &(0x7f0000000440)='./file0\x00', 0x1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000680)=0x102, 0xfffffe79) faccessat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = getpid() syz_open_procfs(r6, &(0x7f0000000840)='status\x00') setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000100)=[{0x50}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x0, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000002700)}}], 0x2, 0x1) ioctl$NBD_DISCONNECT(r4, 0xab08) 05:07:47 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x1400000000, 0x103000) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x7) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000140)=0x2) [ 288.200692][T10064] FAT-fs (loop3): invalid media value (0x00) [ 288.278931][T10064] FAT-fs (loop3): Can't find a valid FAT filesystem 05:07:47 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1}}, 0x28) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="f14b0faeaa77131d776c61e955b520ea236b0bd5f6b797a50d3bf5dca4da16ca61f6f0abeec4d703a361e43e4afe6947817fc548b852be0c502944b3", 0x3c}, {&(0x7f0000000180)="b0adb573efbb5c8ed5ead7", 0xb}], 0x2, &(0x7f00000003c0)=[{0x48, 0x109, 0x1000, "4fa2b8f427d69512a20a8a57fca7a8d7e870da6317ee824da25cf7036233f8d8e61108fa56bc98740ec9235d63092331031bb69935"}, {0x10, 0x100, 0x40}, {0x20, 0x10e, 0x5, "ec78b7a7045579d883"}, {0xb0, 0x0, 0x8f, "fcedefe6e6ec121981c3a7b2e56718ddf17a10bedf770f729e52bb4bd35623c47bb99364fc429af61d59c1c26c1f8b5b57529e018fa83733a7c8df518d4d93ea41d294953e2a7c58c9dbb3be3922f0db7ca7ce728c1052acbb37b422a09410e13e7b2a665be4f57d60306f6c56b635447db5456d608860c4ab0cb97ec7eb716dc0b6ca464580665127b10cf42d702d4ca2a956bf04c724191030c13f"}], 0x128}, 0x14) 05:07:47 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x101, 0x0) r1 = creat(&(0x7f0000000500)='./file0\x00', 0x800000) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f00000012c0)='y\x00', 0x2, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) futex(&(0x7f00000002c0), 0x8d, 0x0, 0x0, 0x0, 0x2) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)={0x8a, 0x7d, 0x2, {0x0, 0x296, 0x0, 0x3, {0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffe56, '/mime_typenodev(security^', 0xf, 'nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x1d, 'eth0ppp0GPL!#!selinuxsystem-}', 0xb, 'GPLnodev*lo'}}, 0x1e) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) removexattr(&(0x7f00000003c0)='\x00', &(0x7f0000000400)=@known='system.advise\x00') openat$cgroup_type(r2, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_yield() 05:07:47 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:47 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:47 executing program 5: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1}}, 0x28) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x2) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="f14b0faeaa77131d776c61e955b520ea236b0bd5f6b797a50d3bf5dca4da16ca61f6f0abeec4d703a361e43e4afe6947817fc548b852be0c502944b3", 0x3c}, {&(0x7f0000000180)="b0adb573efbb5c8ed5ead7", 0xb}], 0x2, &(0x7f00000003c0)=[{0x48, 0x109, 0x1000, "4fa2b8f427d69512a20a8a57fca7a8d7e870da6317ee824da25cf7036233f8d8e61108fa56bc98740ec9235d63092331031bb69935"}, {0x10, 0x100, 0x40}, {0x20, 0x10e, 0x5, "ec78b7a7045579d883"}, {0xb0, 0x0, 0x8f, "fcedefe6e6ec121981c3a7b2e56718ddf17a10bedf770f729e52bb4bd35623c47bb99364fc429af61d59c1c26c1f8b5b57529e018fa83733a7c8df518d4d93ea41d294953e2a7c58c9dbb3be3922f0db7ca7ce728c1052acbb37b422a09410e13e7b2a665be4f57d60306f6c56b635447db5456d608860c4ab0cb97ec7eb716dc0b6ca464580665127b10cf42d702d4ca2a956bf04c724191030c13f"}], 0x128}, 0x14) [ 288.940676][T10064] FAT-fs (loop3): invalid media value (0x00) [ 288.947223][T10064] FAT-fs (loop3): Can't find a valid FAT filesystem 05:07:48 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x101, 0x0) r1 = creat(&(0x7f0000000500)='./file0\x00', 0x800000) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f00000012c0)='y\x00', 0x2, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) futex(&(0x7f00000002c0), 0x8d, 0x0, 0x0, 0x0, 0x2) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)={0x8a, 0x7d, 0x2, {0x0, 0x296, 0x0, 0x3, {0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffe56, '/mime_typenodev(security^', 0xf, 'nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x1d, 'eth0ppp0GPL!#!selinuxsystem-}', 0xb, 'GPLnodev*lo'}}, 0x1e) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) removexattr(&(0x7f00000003c0)='\x00', &(0x7f0000000400)=@known='system.advise\x00') openat$cgroup_type(r2, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_yield() 05:07:48 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x101, 0x0) r1 = creat(&(0x7f0000000500)='./file0\x00', 0x800000) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f00000012c0)='y\x00', 0x2, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) futex(&(0x7f00000002c0), 0x8d, 0x0, 0x0, 0x0, 0x2) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)={0x8a, 0x7d, 0x2, {0x0, 0x296, 0x0, 0x3, {0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffe56, '/mime_typenodev(security^', 0xf, 'nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x1d, 'eth0ppp0GPL!#!selinuxsystem-}', 0xb, 'GPLnodev*lo'}}, 0x1e) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) removexattr(&(0x7f00000003c0)='\x00', &(0x7f0000000400)=@known='system.advise\x00') openat$cgroup_type(r2, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_yield() 05:07:48 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0xe, 0x400) getsockname$netlink(r2, &(0x7f00000007c0), &(0x7f0000000800)=0xc) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigaction(0x10, &(0x7f00000002c0)={0x0, {}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000340)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, 0x0, 0x8000) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) getpeername(r0, &(0x7f0000000380)=@hci={0x1f, 0x0}, &(0x7f0000000400)=0x21) syz_open_dev$sndseq(&(0x7f00000006c0)='/dev/snd/seq\x00', 0x0, 0x4e400) nanosleep(&(0x7f0000000500)={0x0, 0x1c9c380}, &(0x7f0000000580)) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000480)) listxattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000700)=""/149, 0x95) connect$can_bcm(r3, &(0x7f00000005c0)={0x1d, r5}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000000c0)={@remote, @multicast2}, &(0x7f00000004c0)=0xc) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f00000001c0)={0x8a, 0x7, 0x3, 0x3, 0x2}) getsockopt$netrom_NETROM_T1(r4, 0x103, 0x1, &(0x7f0000000280), &(0x7f0000000300)=0x4) mknodat(r4, &(0x7f0000000440)='./file0\x00', 0x1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000680)=0x102, 0xfffffe79) faccessat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r6 = getpid() syz_open_procfs(r6, &(0x7f0000000840)='status\x00') setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000100)=[{0x50}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002240), 0x0, &(0x7f00000022c0)}}, {{0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000002700)}}], 0x2, 0x1) ioctl$NBD_DISCONNECT(r4, 0xab08) 05:07:48 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x2ef) 05:07:48 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:48 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:48 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x100) mount$bpf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="243030dd30ff66007ca200000000842bc64fe2b6080000ff00000000000000"]) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000002c0)='debugfs\x00', 0x0, &(0x7f00000001c0)) 05:07:48 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x100000001, 0x100) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000140)={0x57, 0x4, 0xffff, {0x1db, 0x3f}, {0x7f, 0x3923}, @ramp={0x7, 0x7, {0x135e0000000, 0xfffffffeffffffff, 0x3, 0x100000001}}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000280)={0xaa2, 0x8, 0x7fffffff, 0x1}, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0x8) sendmsg$nl_netfilter(r0, &(0x7f0000000880)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000340)={0x4f0, 0x14, 0xf, 0x2, 0x70bd28, 0x25dfdbfc, {0x2}, [@generic="2bd332f89fd7a932a1e106f972e68765b30998b5695e1965060f5aa06d52db831a75bfa3", @typed={0x14, 0x8, @ipv6=@dev={0xfe, 0x80, [], 0x20}}, @typed={0x8, 0x85, @ipv4=@local}, @typed={0x40, 0x3e, @binary="e522d4d8ff4e466169b58ed6eb5c929738a6b3bd2121860a53b1599ee848457108a56bdb25e112b405589e4af570573f8cb0f13b320e63f3c3"}, @nested={0x214, 0x94, [@generic="927715f4a8c8b01d7e9989fbda8bb1fc80054f4cb057ded5f83bfe99929cc10a71ef5d74a901e20f92960c855e5eca965045051ab52e8d9663477f15a693082278e9c56e4629030b8c6bca0030b5075a4de5a39ded100e82971e537b531ac002adc21bdf4a1a2dc0782757ba49a96da7420117e5e6129ab9d2483a310ad29345aac440e997697705c793ead5609b7b3bc150a4a34397e7a31b8c63bdbe95719f6ff686044964cde74563ed", @generic="193f05d0a7e30b03ebab8086d6889aef45e3a29ceca6f4a8b46a4276a35933910c71ef401b440ff316cdb3e1e13d8bcd886aac0b627a418ad63ed60013d3f6de3bd77a248c700053b79e3f5af6ee1b17e053b71263cb5d67532f6327236d19aba8452c15eabd52ae8915fd82ecc3f212741161bc064283dbb8a4a2a03c3b44efa614640bfb2497d793eed12210c17e8ce259a7eea7c852ce17d8dca58e4ddc16269b9a5970e2da6417898323e203bfdf844d9ba274e3c42a11fc11fab7cfa0725572a91c25aa20dc6cc8a95997d2434b52653708d0c861e65217577a5c42d9f3370f8a730371", @typed={0x7c, 0x27, @binary="5b6348659ddc2b5db0dc453a59b312517818d98b839b8feb491085202f38cf7230f0146e6ea73752e50bfab46e213d8379461f47d5afaddd28fd080c3c2ac1da4e59814a1f4db73b05bc6458018c2c8d82751f0572ce19d1b3e4a341bb85976a1a8aa0272d962f4672fa7d53fa983e9290ce324ddc185c"}]}, @nested={0x244, 0x51, [@typed={0xc, 0x63, @str='bdev\x00'}, @generic="5af4dc79a1ede81245e0b0cacbf676bf007c3521885f29629d726fc715680be26b08a3e35ad0b8e63439ebc2b913b04e19ab8b8195230c1fbc8e71db0552ebee243aa2ff0a3810934a6c617cc6620790cfab03ebff5eb6dff5310ee1a2aa3c2386f7ef7db55ed68f03d6e215b0f84fe2499ba247cc18a7d05e98932e205d1bf951597320744ab12c2f60fb5c60d56c5862f3b94413b74204592f8dd77bd18a16d7270828797f8c1716cd47b4cc02c463dd89beda7640c7fe5ea48778eb127ff19d1831c269439e", @typed={0x8, 0x69, @ipv4=@remote}, @generic="d454895afa8a6711fe96a312d917b51cfb956d98de3ada7e36c2db01465ad2b022949a9c5f74e8afb6874789af385653cea5f3f2107ba0946308e5ca1a50a100bb09231b8744f082e7c05434d461e355177db552c37e27cbd63fd25bd34681f42500e0e231eecffd6da0c834a07f1710d011ce02823dc1592e71fff247a2ab754bd8391276e1d15d2b27a63ff2bd216f775d8213678891520575540ec75a5bec236b19fd7db00a6932bdadb22ccaf0faab8f3d1ce1c9c2d1febe7b6b7031", @generic="cca1b56d067dfa16793f6081ee6d4e1547a481f20f84a15277bd7a1f7ff4dccff00905573e3f0635031ac96bb8466eaa8a3277ffef4776c8573af55d201a20e4fed3addcf1743bec12421f62445d8d44f484c1296cbb58266c054b4a2bfcc117b0048fd561b3219d7d988aaf2383d0b92fd0c45e39c2423000a69540ea3d12b726", @generic="9dfe16b4687ab3e4eb0386a3fcc4a9b3f15f7b230eedea631ad4ded36a78", @typed={0x8, 0x3c, @ipv4=@empty}]}, @typed={0x4, 0x42}]}, 0x4f0}, 0x1, 0x0, 0x0, 0x40000}, 0x4040000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={r3, 0x8, 0x9, 0xfffffffffffffffd, 0x7fffffff, 0x300000}, &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xf, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000012000000000000090000000000000000e8e06f7a8802a9f78fc6ceb07c003f7c9d"], &(0x7f0000f6bffb)='GPL\x00', 0xffffffffffffffff, 0x173, &(0x7f0000000000)=""/251}, 0x46) 05:07:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x334) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$addseals(r3, 0x409, 0x0) 05:07:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) umount2(&(0x7f0000000140)='./file0\x00', 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f023c123f3188a070") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=@random={'osx.', 'fd'}, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f00000040c0), 0x1000) umount2(&(0x7f00000000c0)='./file0\x00', 0x2) read$FUSE(r1, 0x0, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) 05:07:48 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:48 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r1, 0xc0106403, &(0x7f0000000040)={0x401, 0x1f, 0xffff, 0x200}) 05:07:49 executing program 3: fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) clone(0x8889cd00, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000007c0)=ANY=[]) r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$midi(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$P9_RRENAME(0xffffffffffffffff, 0x0, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f00000004c0)={0x7ff, 0x0, 0x0, 0x0, 0xffffffffffffc8ad}) io_setup(0x9, &(0x7f0000000000)=0x0) io_cancel(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x1, r1, &(0x7f0000000080)="12963691cd95da840a119b40cab0de06f01cc5803bb8bcdc", 0x18, 0x4, 0x0, 0x1, r1}, &(0x7f0000000100)) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000340)='system_u:object_r:policy_src_t:s0\x00', 0x22, 0x0) rmdir(&(0x7f0000001540)='./file0/file0\x00') perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000580)={0x0, 0x0, 0xc89a, 0x6, 0x4}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) ppoll(&(0x7f00000001c0)=[{r3}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 05:07:49 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x101, 0x0) r1 = creat(&(0x7f0000000500)='./file0\x00', 0x800000) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f00000012c0)='y\x00', 0x2, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) futex(&(0x7f00000002c0), 0x8d, 0x0, 0x0, 0x0, 0x2) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)={0x8a, 0x7d, 0x2, {0x0, 0x296, 0x0, 0x3, {0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffe56, '/mime_typenodev(security^', 0xf, 'nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x1d, 'eth0ppp0GPL!#!selinuxsystem-}', 0xb, 'GPLnodev*lo'}}, 0x1e) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) removexattr(&(0x7f00000003c0)='\x00', &(0x7f0000000400)=@known='system.advise\x00') openat$cgroup_type(r2, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_yield() 05:07:49 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8040, 0x0) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f0000000080)={0x8, 0x1d, &(0x7f0000000040)="1e7cd00d0ecac27c2b5fdfa44c44465686249d4ba72749663b2f7d5583dfa5d21fb54f8e224fd0a66296835f16cc", {0x1000, 0xffffffff, 0x34343452, 0x6, 0xfffffffffffff001, 0xdb, 0x7, 0x6}}) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r1) accept(r0, 0x0, 0x0) 05:07:49 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:49 executing program 5: r0 = syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x3, 0x0) syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x101, 0x0) r1 = creat(&(0x7f0000000500)='./file0\x00', 0x800000) setxattr$trusted_overlay_opaque(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x0) ioctl$SG_GET_SG_TABLESIZE(0xffffffffffffffff, 0x227f, &(0x7f0000000240)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgid(0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f00000012c0)='y\x00', 0x2, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) futex(&(0x7f00000002c0), 0x8d, 0x0, 0x0, 0x0, 0x2) ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) write$eventfd(r1, &(0x7f0000000340)=0x80000000, 0x8) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$P9_RSTAT(r1, &(0x7f0000000540)={0x8a, 0x7d, 0x2, {0x0, 0x296, 0x0, 0x3, {0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffe56, '/mime_typenodev(security^', 0xf, 'nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x1d, 'eth0ppp0GPL!#!selinuxsystem-}', 0xb, 'GPLnodev*lo'}}, 0x1e) write$cgroup_subtree(r1, &(0x7f00000000c0), 0x0) r2 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x5, 0x800) removexattr(&(0x7f00000003c0)='\x00', &(0x7f0000000400)=@known='system.advise\x00') openat$cgroup_type(r2, &(0x7f0000000200)='cgroup.type\x00', 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$RTC_SET_TIME(r3, 0x4024700a, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000280)={'bond_slave_1\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_yield() 05:07:49 executing program 0: readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=""/1, 0x1) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x1, @dev={[], 0xc}, 'bridge0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000162, 0x0) 05:07:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x334) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$addseals(r3, 0x409, 0x0) 05:07:49 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000073797a310000000000000000feffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000418d985226f4763c61e18d43000000000000000000000000000000000000000000000000"], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000240), 0x0) sysinfo(&(0x7f00000007c0)=""/154) ioctl$BLKPG(r1, 0x1269, &(0x7f00000006c0)={0x1, 0x0, 0x0, &(0x7f0000000800)}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x100d}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000240)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x4, 0x2, {"58a9071be41bb9028caf468bf947e0a5"}, 0x0, 0x9, 0x6}}}, 0x90) ioctl$VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x1, 0x5, 0x26, 0x7, 0x3, 0x60, 0x7, 0x2, 0xffff, 0x7, 0x0, 0x4}, {0xfffffffffffffb05, 0x9, 0x8, 0x10001, 0xc6a24b2, 0x1, 0x5, 0xc000000, 0x33, 0x4, 0x8000, 0x2, 0x2d1}, {0x9c, 0x7ff, 0x400, 0xc00000000, 0x200, 0x6, 0x7, 0xb5, 0x5, 0x800, 0x401, 0x9, 0xffffffffffff8fcf}]}) 05:07:49 executing program 0: memfd_create(0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x6, 0x20000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000380)="49899099ed68c9353545c6de461048ce", 0x10) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000800)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000780)=0xe8) r3 = geteuid() stat(&(0x7f0000000900)='.//ile0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='.//ile0\x00', 0x0, 0x3, &(0x7f0000000700)=[{&(0x7f0000000440)="7de98c3742024089ca858ecef94b12e9ae6060a721853c8357e38de222f52ca81d211f8ddb8600a4004e2d393570026fe8804f1ba9c65abd0eb6f0501d7c572e958b6a79eff9a34fcfbfb9c0dffd83d22d867e0aa60a5fff29592e0a00428d3c8cd7a95312f1fa67368bac7546dd404d75a0699caa8bf5756ac19c4949edc894adb8a68804e1ea4ff79bde5b1a19f0a72b475e950b61d4b538f7e7810b1a3e908918a46d00615fcc38f17c9d9817579e1825eeeecc5eee7f2aef732aca16116cf2ffda4f8078d0d8b93b8c72c35063d485c85a4b61465cb0879cb5a617742eaa1cc3121d057da94a66184ffef1", 0xed, 0xf27}, {&(0x7f0000000540)="fa01a74a124f3f9c3f4cff897b67790fcde6d7469a8dcf7b20cf8dcb8aed3067ca4f2accdfaf7b99bbfbbe9196e1d824d5387d6c4104706ec0dda8ded9b86489df1059df8ae19339c9c1ce045c047610838da22aad5e37b3c0c6a7cd8cd747d559e030173c9d272ccc2205963544a7238232de0a234361be03e5cedaf5404010763743997638c3", 0x87}, {&(0x7f0000000600)="00111a13b668c393b028f812023c852ed600a09f85bd2e2cc07c872b8a5e2bd829c16c124339aea3d774a7375b5ff3b2f9916d7e97be1a7d649e8ab9a087d5614eba2c7921c1a3793f44d635ab13b23479312cb1df528b9900c464c4704a88a8188f0d21405094ef4add2c2ea5c5a0cff5c4268b179d24372ddf1532fea596069848bc1505045bd971079f5884cffcbd6ad09639ba1dff73b331c1aa60c042223f7e413dc5419a7819ac1ebb619d68bf0da03e0d8106fcdaf1d938f613eea5b8ff74d2ae0099313cbec5637468cb051e4107d9d4290bdd3dc72531aa53df0f8f17d09f", 0xe3, 0x30}], 0x20000, &(0x7f00000009c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@barrier_val={'barrier', 0x3d, 0x7579}}, {@nomblk_io_submit='nomblk_io_submit'}, {@init_itable='init_itable'}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x31, 0x37, 0x74, 0x36, 0x65, 0x64, 0x73], 0x2d, [0x7b, 0x34, 0x7a, 0x77], 0x2d, [0x35, 0x77, 0x39, 0x32], 0x2d, [0x37, 0x7f, 0x7f, 0x62], 0x2d, [0x75, 0x63, 0x77, 0x7d, 0x63, 0x35, 0x63]}}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@uid_gt={'uid>', r2}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@euid_lt={'euid<', r3}}, {@hash='hash'}, {@uid_eq={'uid', 0x3d, r4}}]}) getuid() renameat(r1, &(0x7f0000000240)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={r5, 0xfffffffffffffff7}, &(0x7f00000001c0)=0x8) 05:07:49 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:50 executing program 5: r0 = socket(0x1e, 0x5, 0x0) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x208c0, 0x0) r2 = dup(r1) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000000)={0xf, {0x3, 0xcb, 0xfffffffffffffffe, 0x67}}) connect$llc(r0, &(0x7f00000000c0)={0x1e, 0x302}, 0x10) recvmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000180)=""/119, 0x77}], 0x1, &(0x7f0000000240)=""/240, 0xf0}, 0x0) 05:07:50 executing program 3: recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x80, &(0x7f0000000000), 0x0, &(0x7f00000001c0)=""/17, 0x11}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x47, &(0x7f0000000000)}, 0x0) r0 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000140)={'syz'}, &(0x7f0000000180), 0x21b, 0xfffffffffffffffd) keyctl$read(0xb, r0, &(0x7f0000000240)=""/171, 0xac20058721f4452b) [ 291.259650][T10234] overlayfs: filesystem on './file0' not supported as upperdir 05:07:50 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) lstat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:50 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioprio_set$pid(0x1, r1, 0x6) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000240), 0xffffffffffffffff) r2 = getpid() getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0), &(0x7f0000000380)=0x8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@broadcast, @loopback}, &(0x7f0000000340)=0xc) sched_yield() ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1d}}, 0x60}) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e23, 0x0, @mcast1, 0x7}, 0x1c) getpgrp(0x0) ioprio_set$pid(0x0, r1, 0x8bd) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, 0x0, &(0x7f0000000480)) sched_setscheduler(r2, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) wait4(r2, &(0x7f0000000400), 0x40000000, &(0x7f0000001700)) r3 = socket$packet(0x11, 0x3, 0x300) connect(0xffffffffffffffff, &(0x7f0000000680)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x80) getpeername$packet(r3, 0x0, &(0x7f0000000500)) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f0000000100)=@sha1={0x1, "d11cf41cf896f80e46ea3dea30d8a31bbcc45e37"}, 0x15, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x80000000000005, &(0x7f0000000200), 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000540)={{{@in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@ipv4}}, &(0x7f0000000640)=0xe8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000700)="a8cb85d7b630354af1f504ffb58d809d177042d1ba5058650372a2cf14a67e04e1a6dc58a25cf2fdb42ef70b40bb47afa96ebbe2e183580a1317dc72c82db26fc7b61cc230eddb5dc60eb544f3d20d576194cffe7879f71ca8f9b163943ce966ac8b5433d119fd79f64e5a81885d8ad09c623a1318458bf4f898725bc285544177f628b98a7ac7c0e76d9fe05d16c2ecaaab43449629ee9c42806acd2bdee468130a60e713718683299253c4f40d678b3635c50d214b4421b3d6eeff3af0c3798b31e3062fcff23c4e9da86647d34029a4028fc57c06ec30166070edcd046bf1fc58e15ae774cdfc1063246182e523efee30da2a5374bc93642c2e96d31cf05f412626a2859c60dae19eb3404a249a99dc4e20ae5beb92267dedac84069d2af3a739f572a7686cbc340fb82bff2b47656eedb32864e98680c19cbbcc42e3d62ae7f9d424e38447ac989c81b99c3c1a166f6349e6e5f1586c2e0063df48366cac195ae7af8fe5186957401fd71f2e384f8609f91b933d3b5c97b3fe428bf8dbb5e24119841f2635ce59b5269699f1e3418a0115842decff5cda86eaaceb2fd407b1c2c70d40d068de8a6f522026a0076d8143f50117d6f48be9cb9d67f43329b236e2c0c5f7e84ef82c66710ec8ac9034d686feccfc41c097e115c8866fb7e1eca1ee3b176c01bef020e746f3ece5faf17819a197a22c7b119b8a0bf24900ed914ee2a0c82dce02ce85c3be92504d725b7d9c784e91a35b8f701cec29392f3e6ab6884918d74d57262c1ab6be5ee904d6aabbe9d6a9e4b42540f2c70d7a984d0474cddae62cdba6e587fe1c213d1c6e02e823fd1e41cfe466800852896fdb42c3e2f53aff171b3c4a6133ff196cc9d4831c5c2ca2ffe74a1bdbf90f347e9e3319f662619c77853bf08a8ebf3ffed2a784239d23fb07783048e63628efc34c60abf8a7c34572094ac66a8fcbdd7ff986369c81c13f8738ed10d73cd3e65c1007b4f9d676c61a154feada434c26c47f04c51571f5d90a82dc47909fc134941cee072bff408947c401a70580f5259c31a48b97e433d1415b9e01708bb472d1d04d0dfbd800b40829b0a5a3ee4e00ffb08c23c713efc11371efb5a573c2f88213c6fd8c60a2a71e83dfaa2c188333fc7958e36d454dc51fc37e6d869d0883c3c9db012e8c16d14a77e1c588655449f29d883b344ef82d5be96f0a12b594ef3e2e7caf290fc682baa1aac60433499dae0a751f1202a496eaaa42b9370eb706b796bd7bbc11cfd40b6ba37f2b94250f5fc603a107aa8bc585fe06fd8c465a0122d4fd8f7ef8c2077f4f24c8e467efc52bde62d00f418da936cb7578c6ce6e1414eba5a090843050249fa24451f713f215955f8dbdf2f10a045671e69ed986d81fa034e6062ff51500405135fcb7365a25785e780840846e754620dc2eef2de1547039554d5ff274a2a9392971c2abda12d93ecf51f0da188afcb59a70415643332963c20587d9e7a9626a1c1b16828aa512489d848b2d9fe9de1bc0bff49ef2ebdd66fad2a85db9c7deb39f54cd90f469bdba531bcf23b9fec6887c5094589d4adf2ed61dd51725fb5db7f4cdd047e43db089f94ba25e572516301ae3f05c82ccec742ba75b1b7be442d06ed4edcc15f0bb6c6737a6e878b8bf90e471f3a19fa8adca786fe190b8a12be48dfba867981e91d7e5b37b1603d764b5a4d137f15fa06ea244c64940a4c47315d6abc6e8dbdde86fc1fdbd262f386fbb7d3e612b929048ae56f01e8e69903f46fb755d1884abc72557842a2afd8d3088386b24a6f9a786235620cc85f677bf0d8b6bf9cdacdadba7d5d60f9e7aad8fba116544a908eb1a8d37a5c7b7f42ddae68fdebd671ac237ee7834fb60e46a86a9fabbdc4b16a7931a739dc4147463ea862041b5193b248f69fedf057a9e1466df242a093f62c4b6cbb62c1c832be2af6c2c6b9f94584ed603f5e90d972b97eb125c6890c9caf803ae165aee497cdb05c15c33662459fc25cfe271f5213a3f62b0570bdc718fdfcbbd9bf34d7733f099851849c53d933c30e8ffc6680feca11036f6439098a5c69a4001f479fdd1a5812ab9d81ad4a069168eb4476ae02b4f072d4ce463cd9f719a642cd3cc91319bdbefe71163708b5894eab6007be41468963dd341cf5f3b59a856a3504632aa4cb2f96da05be9d1d809573397ad75bcc1ec38d459da0de198807b385a065fc3194fd30b087937bf9d4ba74a2997d2bb4b9ec08568649687baf61df5a82a106124bbbba6b1f137708e050c23b421328abb84c7b4106e966eab5de4b75dd17a1c484d8f51e7d6e4523b02851ca706340e279849dc6ec1e2c781b199097dc3f4408d01072d73eb1b6edc40a132a1878e325af6c58151d1580f37621fa18aceaee818f30204249cd1da4d991fd86b170676f97916d5aca16387736b0606d4de8d0b49590503c68b75d55650948ca452d123e7d69c0daa359da18cde42361062e6c46e1f760139b179bd5bde029bd2bb454af12bc060dab3021838230c59989134853f4c23397ca9687dcc318e091e664a0a0e0157cba592ba8a407a4e1d7cd8523a30d6c3e49a42b5ebca074179f580369733d5cd126c340bc8074ca19769b80162fa929a36e281e8414ee04ea220d2279e92adf327cb58ebdef7b25b2cef3918a94ac80f32aedd1b71495333bbc6fb4c27ac025ef59691decf6cc83a2be45efb62e80e27279ad5dca4ff6f2ace04dea75fc736fcc30abf01c202f6b43ef7b6fbf21de01707366a0d7c9ea060fea7056dc34ff8182d0e63fe959019504cf4ee42e92565a6827441f9b15e7661f0146b0925f65bb66e9390556ed90567ee7bedcfad28a833cf73ce8f99c75cc0b32b319d25271e7682deaa4158881879f6e84aef35e477440a2618473f492122d3c1a87dd596764267c9144f2e180d3383831c37ef8b38bb2fe67a3223a1ce2e95885d03a1415d23a84867e127852e33154587b2d17322bcdf75ddc0645cf103a1134dcc69f83865dc0542bc42eaa4839ee8527d73508b1b9483b429c3e84ee5f2da65f6d996839c690dbbbfb3f1c58b8dc225bf6576800e676ece507b1a141364c2b6194701a993908b305c979b1d64d2f8143fcb1a82dcaeb4422f90c80f1968602941b676e4952776cdd9b9da8357bdd02121b610de4aff03f2b63a981636f75229fd6a816e42144456087a62f87fdeb309ac9627fe892a59afff32af7b380876092029a3ee2984a1ccdec6fbe6fe4a82d91ab6192a239b1eaf848ef2a8f0e40deec0e8affa4cf1ac89a0baaa4f28f6b14fb3c62f9c7909f33feaa67fac99d7d655401fc627466665831cbf02e3043ff86f2172c1b75f5c59c1253d0588c905d18bd1a3fd3483979278f6f887694b9b3347d20cb51c71e1866dbf887479aea205325c8b75a757c0263e3f6a3e366c62ca2d9f26b0596837abc2a689ba333e800df8bdf23a43927b9c7a9658c8bcab7c1dc31914d99cdf76117472ab77e9bf84a51fb3d1790eaaa706a0212743243c09a278d38b7f86174305913e220c0d3e1db91c48ceb96fd4e091e2c22203d3411b554e8be578a896dcea20fb07ea8cc684bd5a6873cd23c193e95b71012863ba2fbe72fc3e0abaf560efae497d675be5a650ef9c69af315731fe1d4515a842f4e5d350d8e54e557cc132a53bfe310b3f3c62ba74aa22e50a0d9948adc4abe69b15c5a50268c7f9f7ba34f41ce31cc29630709695499037393e079a19ae557f7eb14fc0c1b51b413ea9afd9b83f1aa93c0d43b01d6982f8843bf6d59cd795a7fd31bf3c22e8c430d73d3a5861e0386dccf5bfcecee184d301b09f8dea2cb7ed488408c0ca3114f72307595cdef349cb5dbfc9e92d114c3e78e5b8ceb75c4ffb88a7d72292035d94a22e5c306309762916166e9952690f1bef24ffc5442fe7979a00437882bf4ec7d742aee25edd36163704d16f958c8f0c39220d47b796244f5ebe99fc2683f6a9d175d618ec3a1142cc1a59002973229fe26c2dc8672300bf19b6c772a5ad48f9315b24b557de2bde39470ed0ba59549069c0183b209df6b1eaf3460e509ca8ac0f64bc987b5c3fe4ef111fe6cfa557f17e988612bb17c91a0d180a8a4dae73b3d258ee8c290b5646638ca010a970b06833ea334f94628f42a0ed5cf7774c05fc01777ae17c1c842f7ed386ff5be8100b963cc0561763c33dacc564e1408f99e4305b71c4caefb481f31a0fd964c765978eb5804f55665c956691079cf6e22ebe20ff5378562bd5fe9d8dda34ad07aab454c96c9c9aa240e28ce1430ec003c377529ae7a64eff632618a8f9016abd03e04373bd453a2699e29354c8eb846f286e834b977ff22e80e3d404dd4cce9f91a151d816f7402f5e4d4b6f932c8ba8f93ae3e8fd6ceb73303fddd2d310405e1d1cdac23de7d75ab16df98f9599b63302ea6d53e114420b2abd36a74dae821dbf6a40f8bf2e9aa3c0fa13ae831b24da604d526d46cf902273afc15d08a7f3fcdfcae5d17533a2d14d4a2c37dc79f5f7c52d2965906e4ec66ece7f03a8d1a19a320f0a9bc027a628031f454479896823e207c5cb30dd3a33265a6d1c5bfa2ad1c7d32238f68a72206e333243dbd18f7f09a3413e8f388f6f1099a2aa41250579dab2f917d5f050ecd2d22f5dcafc1d723882f28f21ce7dd30f0dd84bb012ef44d6c527f127d1d206ecacaa2068c3327fb426e89ccf9c3884f1f7a25d3ef5fcd1aea1543c194edc412a098bab26704f2c3334cfae087901b6597564b908e6959ac3e85fe2ad429cd20acb40204b55d08e26f45e89a49bc40e71e872cbfe2b26453f3b0d7b9a99ab675a897bcfa4743179c791df1611ac68abe68c146caeac8e477a43b97f36adf390e18d6589cfae543bf511260986cd11ceb087913a0896d24a882fee42a0b10c457859c1c511f96d4a464174c7343b84e50cf230642a492ebf1560a04bdeecf5044e337277a7a8a89d849a2b10c41f95c867d2bfd35384413fe73d8e748d249b1eb2b087ffa1b9720b75dc2a73f9510cd41c51a6b65d26e52e7dcfbeb3e639324010bbd23c2df1a28828072098b6f1c18787e0c6baf9cc8b981742db68ec240295195888a9f934d82b8fcea1a7b4707ab240c79665e0d478fae188fd3b4ba21c4199e556a7c7c8e9581216824688fc41fff822733922b612d36e6a671ccedfc25df1043c3ab6839a4fb4c387a4fa8cc72c4b2e8d591c7313c31a1969f50d51dbc7f931fba8983a5588815d2cb7ec212123d0be6038990f0d7257d0d363f15e27c23ba91627d4bec9d435f682cf57e3bc3602ae000f7394162db4863a34f5cedf44df20a0b4804e238f0c67cee61b6e0e69b30f907b1e9ba58868696ca14466f1e313930a9c4c497c076c11a21ee3dcea09ed31b32fd04354a41b8077ea9b9f7910f36196203fc54ac736439aef90206d589b7ed82e3657c26a5c4b3f1722281230baba23a18b894b953b58806ba07c94122ebb03cacfffaeb2dd88e67697055d4d8570256162fd46b07dd3181f09c8752b4e713107bab70dc01e3908aa185b032eaba343dbfd5435c6f9560737b80763b35593617b2fb35448f108ffa0f3d7cef135d6dab3c96b9f47f8eac8726f0e07353c5deb048e2ed51870e040d9f988f42bee10dfab8e699d3466b65978ffb56d98abad751553fa03091042711d68024b16c07d7ea583a50ddebf949c4be05e7ac5d1f48d4f610f959dd3c6e705930efff0f619985f2973d69b998e73f36e5535a26aa4cd12321f9404375a5343cfef216263aff6c5", 0x1000) setfsuid(0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 05:07:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="2ec3"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x334) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1}}], 0x1, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$addseals(r3, 0x409, 0x0) 05:07:50 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = fcntl$dupfd(r2, 0x8, r2) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x20) 05:07:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x4000) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) shmctl$IPC_RMID(r1, 0x0) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 05:07:51 executing program 5: r0 = socket$unix(0x1, 0x200000000000001, 0x0) bind$unix(r0, &(0x7f0000366000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/223, 0xdf}], 0x1}, 0x61) listen(r0, 0x0) mount$9p_unix(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d756e69782c00981d8896e0"]) 05:07:51 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:51 executing program 3: bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x40000000000009) perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) read$alg(r0, &(0x7f00000005c0)=""/4096, 0x1000) r1 = syz_open_dev$sndseq(&(0x7f0000000580)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000080002, 0x0) dup2(r1, r2) add_key(&(0x7f0000000140)='user\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)="cb3ce264024febba8c5924be9bfe4e48aedd59f083d5b0cc7be4d3", 0x1b, 0xfffffffffffffffd) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x400000000000025, 0x0) 05:07:51 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x200, 0x8100) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x7) add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f00000001c0)=0xb9) keyctl$get_persistent(0x1d, r2, 0x0) r3 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x0, @mcast1, 0x1ff}], 0x2c) 05:07:51 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}, 0xffffffffffffffb3) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x5, 0x400) recvfrom$inet(r2, &(0x7f0000000080)=""/16, 0x10, 0x40002100, &(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000100)={0x0, 0x2710}, 0x10) listen(r0, 0x0) accept(r0, 0x0, 0x0) 05:07:51 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x81, 0x400) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'nlmon0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="24000900000000000000000000000000008f0fba00000000"]}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x101000, 0x0) 05:07:51 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) open$dir(&(0x7f0000000100)='./file0\x00', 0x400, 0x63) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x301000, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x4, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000140)=0x7) 05:07:51 executing program 3: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000004c0)={0x0, 0x1c000}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000540)={r1, 0xd8, 0x1}, &(0x7f0000000580)=0x8) r2 = dup(0xffffffffffffffff) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400), &(0x7f0000000440)=0x14) socket$inet(0x2, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mount(&(0x7f0000000080)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f0000000280)='devtmpfs\x00', 0x4000, &(0x7f00000003c0)='system.posix_acl_access\x00') r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000340)) fsetxattr$system_posix_acl(r3, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="04000700", @ANYRES32=0x0, @ANYRES32=0x0], 0x3, 0x2) renameat(r3, &(0x7f0000000240)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') 05:07:51 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000340)={0x0, "5541ad93b0b458f06d88da05c5726167de86ed5c5162302aa1118f486ac69ee7", 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, {0x3, 0x1, 0x20000, 0xd3a7, 0xa4e, 0x7fff}, 0xe}, 0xa) [ 292.742620][T10313] tmpfs: No value for mount option 'system.posix_acl_access' [ 292.930550][T10319] 9pnet: p9_fd_create_unix (10319): problem connecting socket: éq‰Y’3aK: -512 [ 292.987317][T10313] overlayfs: filesystem on './file0' not supported as upperdir [ 293.025892][T10305] tmpfs: No value for mount option 'system.posix_acl_access' 05:07:52 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:52 executing program 5: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:52 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats\x00') readahead(r0, 0x7f1b1902, 0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes128, 0x0, "fc8c0e40cd615225"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) preadv(r0, &(0x7f00000017c0), 0x3da, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000100)=0x408000) 05:07:52 executing program 3: pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000004c0)={0x0, 0x1c000}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000540)={r1, 0xd8, 0x1}, &(0x7f0000000580)=0x8) r2 = dup(0xffffffffffffffff) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000400), &(0x7f0000000440)=0x14) socket$inet(0x2, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(&(0x7f0000000040)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mount(&(0x7f0000000080)=@md0='/dev/md0\x00', &(0x7f0000000180)='./file1\x00', &(0x7f0000000280)='devtmpfs\x00', 0x4000, &(0x7f00000003c0)='system.posix_acl_access\x00') r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x421, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f0000000340)) fsetxattr$system_posix_acl(r3, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[@ANYBLOB="04000700", @ANYRES32=0x0, @ANYRES32=0x0], 0x3, 0x2) renameat(r3, &(0x7f0000000240)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') 05:07:52 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x100000002) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000280)={0x3, @null, r1}) ioctl$TCXONC(r0, 0x40087101, 0x400000) r2 = accept4$ax25(0xffffffffffffff9c, &(0x7f0000000080)={{0x3, @bcast}, [@bcast, @remote, @null, @netrom, @remote, @null, @null, @netrom]}, &(0x7f0000000000)=0x48, 0x80000) bind$ax25(r2, &(0x7f0000000180)={{0x3, @default, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) 05:07:52 executing program 0: r0 = socket$inet6(0xa, 0x5, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x1e, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) [ 293.368297][T10337] tmpfs: No value for mount option 'system.posix_acl_access' 05:07:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000001c0)={0x7f, 0x2}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000200)={@dev, 0x0}, &(0x7f0000000240)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000680)={0x0, @remote, @local}, &(0x7f00000006c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000000800)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'bcsh0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000900)={0x0, @loopback, @multicast2}, &(0x7f0000000940)=0xc) accept$packet(0xffffffffffffff9c, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000009c0)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a40)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000000a80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000ac0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000b80)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000c80)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000cc0)={0x0, @multicast2, @remote}, &(0x7f0000000d00)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000e00)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000f00)=0xe8) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000001440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000001400)={&(0x7f0000000f40)={0x4a0, r4, 0x302, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x248, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff8000}}, {0x8, 0x6, r6}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x3, 0x2, 0x20, 0xfffffffffffffff9}, {0xa5, 0x100000000, 0x9, 0xffffffffffffffff}, {0x2, 0x2, 0x9, 0x8000}, {0x58, 0x2, 0xffffffffffffffff, 0x1}, {0x2, 0x1, 0x4a80000, 0x5963}, {0x4, 0x80000001, 0x1f, 0x6}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xefd8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xb0, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x17c, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffda87}}, {0x8, 0x6, r14}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r15}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x88e}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}]}}]}, 0x4a0}, 0x1, 0x0, 0x0, 0x40800}, 0x80) 05:07:52 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:52 executing program 5: r0 = socket$inet(0x2, 0x8000a, 0xfffffffffffffe01) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000100)=0x81, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syncfs(r2) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000300)=0x73, 0xff55) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000040), 0x4) clone(0x20003ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000500)='./bus\x00', 0x141042, 0x0) close(r3) r4 = syz_open_dev$loop(&(0x7f0000000540)='/dev/loop#\x00', 0x0, 0x105082) close(r3) r5 = memfd_create(&(0x7f0000000180)='}#*nodevem2N,\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f0000000480)="a8", 0x1}], 0x1, 0x81000) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x3f, &(0x7f0000000000)=""/24, &(0x7f0000000080)=0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x40200) ppoll(0x0, 0x0, 0x0, 0x0, 0x360) ioctl$RTC_VL_CLR(r3, 0x7014) fcntl$setstatus(r1, 0x4, 0x4000042800) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0x526987c9) sendfile(r4, r5, 0x0, 0x80005) syz_open_procfs(0x0, &(0x7f0000000380)='envh&on\x00') 05:07:52 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000040)=0xa9, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='sd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f00000040c0), 0x1000) [ 293.788124][T10360] syz-executor5 uses obsolete (PF_INET,SOCK_PACKET) 05:07:53 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000013000/0x1000)=nil, 0x1000}, 0x1}) r3 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000013000)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0x40045402, &(0x7f00000000c0)={0x3}) r4 = dup3(r2, r3, 0x0) r5 = dup3(r4, r1, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000100)) 05:07:53 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:53 executing program 5: r0 = syz_open_dev$media(&(0x7f0000002600)='/dev/media#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000740)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3\\\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff\xd3AtM6\x95\nn\xa5\xd1\xf0\xc1\x98\xff\xaa\xae\xd8\xe0e\xa4\xd4+\xc1X\xab\r\xf8!\xd3\xcc\xd7\x94\x8a-?.\t\xb9\xce\'\xd7\x15\'\x13z\xe2\xd7\xd3c\x14\x9bZ\xd7\x8b4.\xe5\x9f\b\xa4NZjS\xf2\x00\xed\xb5|A\n\xee\xf2\x84\xb0\xcbD\xfb\xff\xff\xff+=\x82Id\xff\xea\xe0\x84]\xc3*3{D?\xb1\x8c\b\xf2g\x00\xb3\xbe{k\xd8\x0e{b\xd5\xbe`YM9\xda\xf6J\xb0ty\xb2\x9a9\xb8\xb5\xe0\xb3\x90\x94?\xf7\xa5\xc3~\xbe\xde\x8b]\xd8\aV\x9c)\aS\x11Ts\x96i\x04\xee\x8f\xf2\xee\x19\xf4\xe3\xf3En\x8a\xd5\x1f\x95\x029u\x06\x1d\xc1\xdb\xf5\xb3\xf30xffffffffffffffff, 0xffffffffffffffff}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580)='/proc/self/net/pfkey\x00', 0x400, 0x0) fcntl$dupfd(r1, 0x406, r0) r2 = syz_open_dev$cec(&(0x7f00000005c0)='/dev/cec#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7f) r3 = socket$inet(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000880)="24000000240007031dfffd946f61830020200a0009000000fffcffffffffffffff00ff7e280000001100ffffba16a0aa1c00a3d6ebea8653b1cc010000000ac47b6268e3966cf055d90f15a1", 0x4c}], 0x1}, 0x0) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000500), &(0x7f0000000540)=0x10) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000040)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) sendmsg$kcm(r4, &(0x7f00000004c0)={&(0x7f00000001c0)=@ll={0x11, 0x15, r5, 0x1, 0x8001, 0x6, @local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000000240)="80ba869ddbb41ad88615fdd73d41e0283d2644019fefafab147720514e2cf9838ea111ecf0db9c64648ad23bd72873e76b14eb9e8ddd56f753b7057d4442331880d955d20747ef5b97fbc75f15a21d94511c33ce8a6240cf0c7d7d83557d9739a2c5ec31f49775401c205598ad2453", 0x6f}, {&(0x7f00000002c0)="6c7f0e81a98a04dd29aecc132936e6e3ba945c40ef98d842fa6d772653da4b45c367bdfae4f681348efee056ebf74360c6cf7a31", 0x34}, {&(0x7f0000000300)="ead19f695f7df03072440f8feffaa46133", 0x11}, {&(0x7f0000000340)="45affa04d3056c9c7448d263b7d16dc662f35fbacf9950bc9cf05dff6386eed394ba342b1c93c5010c2ca263088f2a049a2fb1884b3099b39e1f115ca1405ed5491db79c2dfbe00b48d2788abd5382406566d7d0420311d403d5", 0x5a}], 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="50000000000000382ba3f1c61b310c48ed0c6f38a4d93e6735cff9fd4d099b7ed1887fec020b5ee5474d269a5b8d7906070f4498832423fa92bacee888e4ee13771b0000000000000000000000f82e4f"], 0x50}, 0x0) 05:07:53 executing program 0: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x6}, 0x0, 0x5, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080)=0xffffffffaeb9b256, 0x4) sendmsg$rds(r2, &(0x7f0000001f00)={&(0x7f00000003c0)={0x10, 0x0, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/73, 0x49}, {&(0x7f0000000580)=""/11, 0xb}, {&(0x7f00000005c0)=""/30, 0x200005de}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/23, 0x17}], 0x5, &(0x7f0000001bc0)}, 0x0) 05:07:53 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$kcm(0x2, 0x2, 0x73) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000140)={r3, r4, 0x4}) r5 = socket$l2tp(0x18, 0x1, 0x1) sendmmsg(r1, &(0x7f0000004040)=[{{&(0x7f0000000280)=@in={0x2, 0x0, @loopback}, 0x80, 0x0}}], 0x2, 0x0) ioctl$KVM_DIRTY_TLB(r5, 0x4010aeaa, &(0x7f0000000000)={0x9, 0x733ba574}) [ 294.438973][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 05:07:53 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) [ 294.533751][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 05:07:53 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:53 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x81000000000002, &(0x7f00000003c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x1]}, 0x6) getpid() fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x10e) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xdb0, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000d40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d3, 0x40, 0x0, 0x7}, [{}], "4dc548a797cff2713c7664cfc028fd63bb7733b1822161d107148affbccbbdc3e9d89b3562708462be961fb19f1745666e9dba098bad253875159e4bda5a7cfca396e617b8ddfd7fb4859784a29b112b8e7d9f7f", [[], [], [], [], []]}, 0x5cc) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) 05:07:53 executing program 5: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x5, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000140)) 05:07:53 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000003c0)) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="10ef1e00000000347f231f0f1ea27e00c5c93567f5669108a7ea8456d0000097f1e84febe4884dd75a5c05556a53423015005ac00ce2dbf559383a410d53df77f4b333a8f8f6da12f2db32e0304d9063b20bb79365d0fca5b21f291ba91a6b6da13585c31205deefd259510e5853ad729eb352fdd0be4e161e13dd4409"], 0x7d) r2 = openat(0xffffffffffffffff, 0x0, 0x0, 0x2) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RLINK(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000400)={0x20, 0x8, 0x0, 0x0, 0x11, 0x40, 0x8, 0xffffffff7fffffff, 0x400, 0xad4a, 0x9, 0x9}) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000005c0), &(0x7f0000000600)=0x4) unlink(&(0x7f0000000080)='./bus\x00') sendfile(r1, r1, &(0x7f0000000380), 0x8080fffffffe) socket$inet6(0xa, 0x1000000000002, 0x0) readv(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/6, 0x10}], 0x286) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) creat(&(0x7f0000000580)='./bus\x00', 0x62) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x5, 0x70bd2a, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) write$P9_RWRITE(r2, &(0x7f0000000000)={0xb, 0x77, 0x1, 0x8}, 0xb) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000440)={0x5, 0x200, 0x4, 0xfffffffffffffffb, r5}, &(0x7f0000000500)=0x10) syncfs(0xffffffffffffffff) 05:07:53 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000140)) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/15, 0xf}], 0x1, &(0x7f0000000180)=""/4096, 0x10c3}, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000001180)=ANY=[@ANYRES32=r0, @ANYBLOB="ff7f000002007efca477f8b2615da673b81fe7a66b19630d3d88b5dba43ae47f8f2dc9a5ed8acfe8c9f991e6bcfd71e3adb4b12bf551fcb8ebc0c2b0dbb8ad3adf953dbf9ff19b4627fd24cea0355ea5589a9a560d5ed0591586aa173e4fdf6d33322d1447e132989bd57db0c0447bbb7812a78653c41167e594069b1345de6ca9ac52c35b69cd"]) 05:07:53 executing program 5: syz_mount_image$reiserfs(0x0, &(0x7f0000001700)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="07232416c87eb972945237"], &(0x7f0000000140)='.', 0x0, 0x3002480, 0x0) 05:07:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getdents64(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x24000, 0x10) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) recvmmsg(r0, &(0x7f0000002bc0)=[{{&(0x7f00000000c0)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000140)=""/243, 0xf3}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/75, 0x4b}], 0x3, &(0x7f0000001300)=""/130, 0x82}, 0x7}, {{&(0x7f00000013c0)=@nl=@unspec, 0x80, &(0x7f0000002940)=[{&(0x7f0000001440)=""/61, 0x3d}, {&(0x7f0000001480)=""/34, 0x22}, {&(0x7f00000014c0)=""/223, 0xdf}, {&(0x7f00000015c0)=""/7, 0x7}, {&(0x7f0000001600)=""/92, 0x5c}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/226, 0xe2}, {&(0x7f0000002780)=""/214, 0xd6}, {&(0x7f0000002880)=""/141, 0x8d}], 0x9}, 0x4e63}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000002a00)=""/217, 0xd9}], 0x1, &(0x7f0000002b40)=""/122, 0x7a}, 0x8}], 0x3, 0x100, &(0x7f0000002c80)) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000002cc0)={@ipv4={[], [], @loopback}, 0x1b, r3}) close(0xffffffffffffffff) 05:07:54 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:54 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x40000000014, &(0x7f0000000300)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x2000000000000000, @loopback}, 0xffffffffffffffbc) sendto$inet(r0, &(0x7f00000000c0)='_', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), 0x14) recvfrom$inet(r0, &(0x7f0000003b40)=""/4096, 0x5ac, 0x10122, 0x0, 0xffffffffffffff9b) recvmmsg(r0, 0x0, 0xfffffffffffffd75, 0x0, 0x0) recvmmsg(r0, &(0x7f000000cc00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000007c00)=""/231, 0xe7}], 0x1}}], 0x1, 0x142, 0x0) 05:07:54 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x81000000000002, &(0x7f00000003c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000680)={0x2, 0x4e23, @local}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x1]}, 0x6) getpid() fcntl$getown(0xffffffffffffffff, 0x9) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x10e) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xdb0, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000d40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d3, 0x40, 0x0, 0x7}, [{}], "4dc548a797cff2713c7664cfc028fd63bb7733b1822161d107148affbccbbdc3e9d89b3562708462be961fb19f1745666e9dba098bad253875159e4bda5a7cfca396e617b8ddfd7fb4859784a29b112b8e7d9f7f", [[], [], [], [], []]}, 0x5cc) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000100)) 05:07:54 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0xff) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001700)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000001740)={@loopback, 0x1, r2}) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000100)={0x9, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x28}}, 0x1, 0x8, [{{0xa, 0x0, 0x8, @ipv4={[], [], @loopback}, 0x2}}, {{0xa, 0x4e24, 0x325, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}, {{0xa, 0x4e20, 0x800, @empty, 0x8001}}, {{0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}, {{0xa, 0x4e23, 0x10001, @loopback, 0x100000001}}, {{0xa, 0x4e21, 0x101, @remote, 0xbc}}, {{0xa, 0x4e22, 0x6, @rand_addr="a8eec3631d3b04b776dc3a147d7d1324", 0xf2}}, {{0xa, 0x4e21, 0x50, @mcast2, 0x6}}]}, 0x490) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000)=0xa8e5, 0x4) ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0x80000000) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000040), 0x4) 05:07:54 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/capi/capi20\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000001180)={0x0, @in={{0x2, 0x4e24, @empty}}, [0x10001, 0x7, 0x100, 0x5, 0x20000000000, 0x400, 0x7, 0x0, 0x0, 0x9, 0x8, 0x7, 0xd808, 0x7, 0x2]}, &(0x7f0000001100)=0x100) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001280)={r2, 0xffffffff}, 0x8) r3 = syz_open_dev$mice(&(0x7f0000001140)='/dev/input/mice\x00', 0x0, 0x410000) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f00000000c0)=""/4096) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r3, 0x110, 0x3) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000080)="290000001800190000003fffffffda0602007a00fde80001484000040d0009000005007917060000ff", 0x29}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x1, 0x3000000000000000, 0x7, 0x8, 0xffffffffffffff9c, 0x206db}, 0x2c) [ 295.684781][ T26] audit: type=1804 audit(1548911274.742:45): pid=10430 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir977190095/syzkaller.i0K889/90/file0/file0" dev="sda1" ino=16689 res=1 05:07:54 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) lstat(0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:54 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:54 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x8, 0x9, 0x8, 0x1}) sendmmsg(r1, &(0x7f0000000a40), 0x400000000000224, 0x101d0) setrlimit(0x0, &(0x7f0000000240)={0x6d, 0x3ff}) gettid() fremovexattr(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="13854a523bed83d3351ed9d998dbf3084eede5d6fdebe18a9192b4e7dd184d090d2ac8c6510f580320db1c0ea3f7d54e201cd1846ae646daba77e5af2b71153d9bfd4dc5a682e6c3b9f4ae0310f8d14107c0ef99eb2c3a3765701559f1fa44df1304aeef99c0378391575a894fc8115f53b443610247e16c"]) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) [ 295.826002][ T26] audit: type=1804 audit(1548911274.872:46): pid=10441 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir977190095/syzkaller.i0K889/90/file0/file0" dev="sda1" ino=16689 res=1 05:07:55 executing program 0: mknod(&(0x7f000086c000)='./file0\x00', 0x103d, 0x0) r0 = open$dir(&(0x7f00004be000)='./file0\x00', 0x80000880, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close(r0) creat(&(0x7f00007dc000)='./file0\x00', 0x7fffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {r2, r3/1000+10000}}, 0x0) 05:07:55 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") socket$key(0xf, 0x3, 0x2) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64\x00', &(0x7f00000000c0)='securityem0$.cgroupwlan0trusted]em1.vboxnet1\xc6system$-cpuset-\x00', 0x3d, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x10, &(0x7f0000000000), &(0x7f0000000140)=0x8) 05:07:55 executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) accept(r0, 0x0, &(0x7f0000001640)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@dellink={0x28, 0x11, 0xc03, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}]}, 0x28}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r3 = dup(r0) r4 = fcntl$dupfd(r0, 0x0, r3) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, &(0x7f0000000040)="877fc30f474a5135a6d876cbd2eb69c8784321514b0efc5585d736923e400ef504eef252113e0059bf8b5e15bedfd2269a6f36ba76fa428661011c14e3d81c97c24d7d8070a5cc99", 0x48) bind$bt_rfcomm(r4, &(0x7f0000000000)={0x1f, {0xffffffffffffffff, 0x1ff, 0x4}}, 0xa) recvmsg(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/110, 0x6e}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/132, 0x84}, {&(0x7f0000001240)=""/65, 0x41}, {&(0x7f00000012c0)=""/4, 0x4}, {&(0x7f0000001300)=""/146, 0x92}, {&(0x7f00000013c0)=""/150, 0x96}], 0x7, &(0x7f0000001500)=""/194, 0xc2}, 0x42) [ 296.118697][T10504] sctp: [Deprecated]: syz-executor3 (pid 10504) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.118697][T10504] Use struct sctp_sack_info instead 05:07:55 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:55 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x80800, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000000c0)=""/230) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) flock(r3, 0x4) dup3(r2, r1, 0x0) 05:07:55 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000840)=[{&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000000780)=""/111, 0x6f}, {0x0}], 0x9, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f00000004c0)=""/143, 0x8f}], 0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) r1 = syz_open_dev$dspn(&(0x7f0000000980)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) unshare(0x40000000) 05:07:55 executing program 3: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x10, &(0x7f0000000000)={&(0x7f00000001c0)=""/246, 0xf6, 0x0}}, 0x10) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x349982, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000140)=0x26) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\a\x00', 0x1}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) 05:07:55 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) lstat(0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) [ 296.443171][T10521] sched: DL replenish lagged too much [ 296.549241][T10521] IPVS: ftp: loaded support on port[0] = 21 05:07:55 executing program 0: getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000005e40)={@local, 0x0}, &(0x7f0000005e80)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0xa8}]}, &(0x7f0000000240)='GPL\x00', 0x2, 0x3b8, &(0x7f0000000000)=""/251, 0x0, 0x0, [], r0}, 0x48) 05:07:55 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x8, 0x9, 0x8, 0x1}) sendmmsg(r1, &(0x7f0000000a40), 0x400000000000224, 0x101d0) setrlimit(0x0, &(0x7f0000000240)={0x6d, 0x3ff}) gettid() fremovexattr(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="13854a523bed83d3351ed9d998dbf3084eede5d6fdebe18a9192b4e7dd184d090d2ac8c6510f580320db1c0ea3f7d54e201cd1846ae646daba77e5af2b71153d9bfd4dc5a682e6c3b9f4ae0310f8d14107c0ef99eb2c3a3765701559f1fa44df1304aeef99c0378391575a894fc8115f53b443610247e16c"]) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 05:07:55 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x20000, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000001c0)) r1 = socket$alg(0x26, 0x5, 0x0) fchdir(r1) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="0a0775db7b2803b4f0a12585675d26b0d5e383e5b3b60ced5c54dbb7295df0df8217ad62005127000000000000e60000", 0x30) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000001bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r3 = dup(r2) getgroups(0x0, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x9a}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000002c0)={r4, 0x2}, 0x8) setfsgid(0x0) write$UHID_DESTROY(r3, &(0x7f0000000200), 0xffffff77) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r5, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") recvmmsg(r2, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001340)=""/239, 0xef}, {&(0x7f0000000000)=""/24, 0x18}], 0x2}}], 0x1, 0x0, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) 05:07:56 executing program 3: r0 = socket$inet6(0x10, 0x100000000003, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="5500000018007fafb72d1cb2a4a280930206020000a843096c2623692500080000c90200f0ff66039848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83c43a11000000bf0cec6bab91d4000000000000", 0x55}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @remote}}, 0x3, 0x40, 0x4, 0x5, 0x60}, &(0x7f0000000380)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r1, 0x7}, &(0x7f00000000c0)=0x8) r3 = syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x80) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000400)={r1, 0xffff}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r2, 0x1ff}, &(0x7f0000000140)=0x8) fsetxattr$trusted_overlay_origin(r0, &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000500)='y\x00', 0x2, 0x3) r4 = accept4(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f0000000280)=0xfffffffffffffcf9, 0x800) ioctl(r4, 0x8, &(0x7f0000000440)="14e4a5a170eb32ca164fd0e82693fc36c27dfbbca2bf00fac5e9e52049b61c0dc63cc37b667f09b445a87953dda20d95bf4a22c027810785ba16451e8af84a03d86daf29f3ff") [ 297.002292][T10538] IPVS: ftp: loaded support on port[0] = 21 05:07:56 executing program 0: r0 = open(&(0x7f0000000440)='./file0\x00', 0x10000, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000480)=""/94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") mmap(&(0x7f0000000000/0xc72000)=nil, 0xc72000, 0xfffffffffffffffc, 0x48010, 0xffffffffffffffff, 0x40000000000000) socketpair(0x9, 0x3, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x5, 0x0, 0x0, 0xffffffffffff0001, 0x7c69, 0x2, 0x3, 0x7, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000280)={r4, 0x100000000000000}, 0x8) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x400002, 0x0) ioctl$VIDIOC_QUERYBUF(r5, 0xc0585609, &(0x7f00000003c0)={0xf1a5, 0xf, 0x4, 0x4, {0x77359400}, {0x7, 0x8, 0xd20c, 0x8, 0x6, 0x5, "0c50ac37"}, 0x79, 0x6, @userptr, 0x4}) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f00000000c0), 0x4) socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0xfda, 0x6, &(0x7f0000000100)="f008fe02f75e4335c085b4c8e0f9a535632bc04bd1ec7c79bb1ff85a1eee902f59d4d44574604feb9eda4c04c5d914c2fc454338a40197425a3126bf767e9c81c2f46509be0789294bf783d86601000000010000002550faafc2e5cb276bfa848c2a921bb018d33961d7d36597f4d0305699c28517fa98546b4dccbfc0907580795d64c84a5e6cafe9f9fa131839421a1cb3cbacb9016482de205e2a31201a433c993780c16980794e4e3751ac751d9edd58019f8cfb534c92321d7b3a500483a7689d91fb32e46c5b71397381133059420245337f7c3ce254755ded5ab61ee184843191ea43332548290711e649a7394630cc76cf778b8fb19ba407738c65bdda4071e6d5ff39e5329e", 0xfffffffffffffe94) openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x80400, 0x0) syz_extract_tcp_res(&(0x7f0000000300), 0x9, 0x7) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000002c0)='vmnet1nodevvmnet0,\x00') 05:07:56 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x2) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_mtu(r1, 0x0, 0x21, 0x0, 0x0) 05:07:56 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x8, 0x9, 0x8, 0x1}) sendmmsg(r1, &(0x7f0000000a40), 0x400000000000224, 0x101d0) setrlimit(0x0, &(0x7f0000000240)={0x6d, 0x3ff}) gettid() fremovexattr(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="13854a523bed83d3351ed9d998dbf3084eede5d6fdebe18a9192b4e7dd184d090d2ac8c6510f580320db1c0ea3f7d54e201cd1846ae646daba77e5af2b71153d9bfd4dc5a682e6c3b9f4ae0310f8d14107c0ef99eb2c3a3765701559f1fa44df1304aeef99c0378391575a894fc8115f53b443610247e16c"]) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) 05:07:56 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:56 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000840)=[{&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000000780)=""/111, 0x6f}, {0x0}], 0x9, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f00000004c0)=""/143, 0x8f}], 0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) r1 = syz_open_dev$dspn(&(0x7f0000000980)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) unshare(0x40000000) 05:07:56 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) lstat(0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:56 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = dup(r1) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x6) socket$inet(0x2, 0xa, 0x8) 05:07:56 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = dup(r1) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x6) socket$inet(0x2, 0xa, 0x8) 05:07:56 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:56 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = dup(r1) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x6) socket$inet(0x2, 0xa, 0x8) 05:07:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, 0x0) r2 = fcntl$getown(r1, 0x9) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x1, r2}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x1000000000000049, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000016c0)=""/4096) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001680)={0x2713, 0x0, 0x3000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) tkill(r4, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f00000002c0)={0x0, @reserved}) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x400000000000) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000180)={0x5, "424c5b817c93229fb8883e973b534f9d39f96e1ad90827299dac9cc498e651cd", 0x0, 0x8, 0x1, 0x5c, 0x8, 0x1, 0x873, 0x1000}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) 05:07:57 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = dup(r1) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x6) socket$inet(0x2, 0xa, 0x8) 05:07:58 executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000240)={{0x4000, 0xf000, 0x8, 0x3fffffff800000, 0x7fff, 0xbd7, 0x6, 0x19, 0x4a52, 0xffff, 0x6, 0x1}, {0xf000, 0xf004, 0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0xff, 0x2, 0x3, 0x7f, 0xfbb, 0x100000001}, {0x10000, 0x1000, 0x8, 0x8, 0xedcf, 0x8, 0x1ff, 0x1260, 0x5, 0x3ff, 0x2, 0x887}, {0xf000, 0x0, 0x14, 0x8, 0x2800000, 0x3ff, 0x4, 0xfaa, 0x3, 0x40, 0x2, 0x2}, {0x6000, 0x1f000, 0xe, 0x2, 0x100000001, 0x1, 0x966, 0x100000001, 0x9e9b, 0x3ff, 0xffffffff8b48222a, 0x9}, {0x5000, 0x100000, 0x9, 0x8000, 0xffffffff, 0x5, 0x5, 0x7, 0xd3a, 0x0, 0x200, 0x7}, {0x6001, 0x0, 0xc, 0x8, 0x0, 0xcb, 0x1, 0x3, 0xfffffffffffff001, 0x9, 0x7, 0x80}, {0x5000, 0x2000, 0xe, 0x0, 0x4105, 0x0, 0x5, 0xfffffffffffffffa, 0x5, 0xe4e0, 0x470, 0x2}, {0x1, 0x4000}, {0x0, 0x1f000}, 0x20000011, 0x0, 0x3000, 0x20002, 0x2, 0x400, 0x0, [0x4, 0x1, 0x5]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000ffd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000000c0)={&(0x7f0000007ff0)={0x1d, r2}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)=ANY=[@ANYBLOB="00000000adecfc04abb10000000000000000000000000000"], 0x1}}, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000100)={0x0, 0xe8, "987abf7752fc8d2f9ef78d9075f48494767a8b65bb3ecc58216f47f6f9bb46aa4da3162d73613475ef956f9d356fb6cd7a68b04e63d3c83e98a2cbfb9979f590ba67af26240a2fa49e856a6227321c65f95ff9fb16b45c7177882cc91ec6f544f9c157e395a2749dd0b791837aec2ad76f12cc28e972b1ca2c8305dca8adf9b81d025b5bb1c15ba38c6a066db0c32d5fe394795cea788f3cfabf0b839426af2e72c96ef90a7346f955b759332170cc0c1a611cfdc74922c2ba42e263f017c2570cbd4d821b96a8e0af6389ebb4f0dc2fc5d92b1572281631c211c279734999a7a0c402ee20814e31"}, &(0x7f0000000040)=0xf0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r4, 0x1f}, 0x8) 05:07:58 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:58 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = dup(r1) ioctl$PPPIOCSMRU1(r2, 0x40047452, &(0x7f0000000000)=0x6) 05:07:58 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000840)=[{&(0x7f00000000c0)=""/12, 0xc}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f00000002c0)=""/48, 0x30}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000340)=""/90, 0x5a}, {&(0x7f0000000680)=""/229, 0xe5}, {&(0x7f0000000780)=""/111, 0x6f}, {0x0}], 0x9, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f00000004c0)=""/143, 0x8f}], 0x3) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x0, 0x4) r1 = syz_open_dev$dspn(&(0x7f0000000980)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000180)) unshare(0x40000000) 05:07:58 executing program 5: perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00?\x00', 0x19, 0x2, 0x278, [0x20000600, 0x0, 0x0, 0x20000630, 0x20000660], 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000500000000000000000076657468305f746f5f7465616d00000064756d6d79300000000000000000000064756d6d79300000000000000000000073f97a6b616c6c657231000000000000ffffffffffff000000000000ffffffffffff00000000000000007000000070000000a000000072656469726563740000000000000000000000000000000000000000000000000800000000000000ffffffff000000000b00000000000000000073797a6b616c6c65723100000000000067726574617030000000000000000000766c616e30000000000000000000000064756d6d7930000000000000000000000180c2000000000000000000aaaaaaaaaabb0000000000000000e0000000e000000018010000726174656573740000000000000000000000000000000000000000000000000048000000000000000000000000000000000000000000000065727370616e300000000000000000002a0003000000000000000000000000000000000000000000000000000000000000000000000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000180c200000000000000000000000000"]}, 0x2f0) 05:07:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) dup(r1) [ 299.624399][T10614] IPVS: ftp: loaded support on port[0] = 21 05:07:58 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:07:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], 0x0}, 0x48) timerfd_create(0x5, 0x800) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x2c}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="ba58d6fcaccb7ffce16e1bcfe23b", 0x0, 0x1eed}, 0x28) 05:07:59 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 05:07:59 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000600)={0x30, 0x5, 0x0, {0x800000000000010, 0x1, 0x0, 0x10}}, 0x30) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x7fff, 0xff, 0xfffffffffffffff8}) 05:07:59 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@mss={0x2, 0x2}, @mss={0x2, 0xff}, @window={0x3, 0x6, 0x2}, @window={0x3, 0x10000, 0x3}, @timestamp, @timestamp, @sack_perm, @window={0x3, 0x66c, 0x3ff}, @timestamp], 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$int_in(r0, 0xa00000c0045002, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x80000, 0x8000) fadvise64(r2, 0x0, 0x4, 0x5) 05:07:59 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:59 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:07:59 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0xa6ba0) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) io_submit(r1, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000008040000, 0x3f00000000000759, 0x8, 0x1, 0x3, r0, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xc00}]) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) 05:07:59 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 05:07:59 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x5, 0x80) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket(0xa, 0x1, 0x0) getsockopt$inet6_int(r1, 0x6, 0xb, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) 05:07:59 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newtaction={0x54, 0x30, 0x701, 0x0, 0x0, {}, [{0x40, 0x1, @m_connmark={0x3c, 0x0, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c}}, {0x4}}}}]}, 0x54}}, 0x0) sendmmsg$alg(r1, &(0x7f0000001f00)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="179295aa74e6759c09273323744af4ee250a85466602c209f383e26a91de0266489880f7cfaf05662bed43f9981d", 0x2e}], 0x1, &(0x7f0000001400)=[@iv={0xf8, 0x117, 0x2, 0xe2, "ef7e72af64ba9a2ab4e9041fdebe2e5d483a2e3b86f587cb40d627418e0ca47990bb401923cc4ad2b74f945acbd8bddfc90cb8f38c54c285f70e920e175efc73f2f73ea3491dc8d2c968bcf4b1b45f0d063f42d01ba192d4e6f7497aa1e0e9fba848ce02e5b63bee065a6135cb402d191a7b6c35e1323a06bb94b2fa539d0e30faad1ff16f9978c463ace81539788288af0c45329c2ef849201be9c6131e9bf2ba52e44f85ded18dafd2f6c0556750239d7895dc2930d03a66b949c7f7f18502138c899d2fcfb8da2d14d6dcba9ef6844c1278724b707c9a528cdea479d2223c673b"}, @assoc={0x18, 0x117, 0x4, 0x1a5}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x80fb}], 0x158, 0x4000040}, {0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000280)="dfb421f678f3bf9049b832a9c937a2d53c4641fc9baa523e497e9f36f9", 0x1d}, {&(0x7f0000002000)="7646061df59ec2425400749cefb034c816b6abe44cf27c22a590f9c1cf8fa599c8e447bb716e3f48873e2806075b2269dfbd9dc036eda64fbf16bf86aac0480b3fca79c2963e0f8a151c6584112a4b9d8f6449e69bb7dbc12a47a6f9ff0bfe8cf6", 0x61}], 0x2, &(0x7f0000001640)=[@assoc={0x18, 0x117, 0x4, 0x3f}, @assoc={0x18, 0x117, 0x4, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x8000}, @op={0x18, 0x117, 0x3, 0x1}], 0x78, 0x1}, {0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f00000016c0)="52e56b759ee255192ed60256749ba9016e7239e528dccfce022398e1fe7621dc7ab227277361f13991bb850da03f30fdcae66803", 0x34}, {&(0x7f0000001700)="e1af1ad98cf165a3174a411448d2dea0a64ff06f427da81a423925a9f035ee6e80f04f7c5b191a8ffcfb", 0x2a}, {&(0x7f0000001740)="e9bbc08f04bf3fc3119102172f18fafe906b006aee6f132d3ffdb32ff43c4021e0a0d5c03bf543ff2408a857c27e8f73929f5af4b8122de47374f254955fecbdd29f31e60fcf7788ea223806b0d76ac2f64c1ec8c2bd9ef51c0497f944fa0d9f47144b15f1ba51a3e3891bd05d7fa8dd751d55def8a3b27475bb8b36ff998553ce84830583e81d532f9bad526ff0301c01de255ca3d46b9e5cd1e3c4814b9fbf58023ca300fce0dbfec22f480354ca22b08de9af7a63a242848db5256da3546b202e976381fd7735f02e71cefb6c", 0xce}, {&(0x7f0000001840)="38c59d21a6f5fd8f28ee3c42fc8297fbda0545cb762ef828e420f5fc9ac6f219608d729d1046d793a14693d8164fd9c0705428cab8466ee11b2e1c8599f71986c4e9d566e179ddb996dd1490a2646a7b2bbe8c4993e9e54f7c64ee438fcc82b8f5bdb31956b1ba50822243b55e1bf50bdac2a65a4db9a04e3037608aa67f61dab25353dc87c3371833da6baf790f0c97329360c55d67f133658236303ea789", 0x9f}, {&(0x7f0000001900)="5233e75814e5378a8f6c4d2fdda68bd301c345962f961a4b84f8cf292bed9668cac1f4575d9bb6dad558774c5286e19bc31dd9c212ed1be7a34b2c0ce8ca98ccb566973af06614de95cd147f15bf40f13296161b7e04aed45b1e6c", 0x5b}, {&(0x7f0000001980)="171f71687630a0f04a5ebeb6faa52d1c931ea5580ba3b9db14686ac060c3b0eda7908684c68cf47f281972da670f65d56e79bc49a067ba723da2b40611fc77b58f3f574b629a44e402f8a8ceadc06a7b77fd7a90ebee1a1ce993a7faf9a5f54fa50c6da7231fda4bf293af2f57d79f60589c0da489992f636bc55c685e4f51e4795bb3f5d7a9d2bade2d3228d474681d9a4158121b4bd5c81a4b0983a9789f78989d82d0d98aa7eee7957773705f872ad77e964776e67d1d8d8e4d0dfcc0c27c007f8c13f02a09a3896fe0e4e58cfbca1e7d779a387c417fd4bc8aadc239429fa4aa5d80bccede1684152b9e59cc53fc16adbe70b73a1d", 0xfffffffffffffd8e}], 0x6, &(0x7f0000001b00)=[@iv={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xf0, 0x117, 0x2, 0xd6, "488a903990e5d4f5a4bf7dd77a1ca25a86c9603b9e9dceafe717a70c42efc179c4a9ff8bbfd9eab560201cb2294b918265a18ab6af711cc7a589bff2bf1ef420ece3eb4728620f585b7c1ca64df2c055c3988a7255d1f415f06d60a240151f2185e97e430b26d6a47d91a1cf54ebd7e4d51b48be6be89049f649f1ffeecb391eea602dd1aaff9e72b7380fc238a1256b3c468aeee8fab3cc20edfb2d076fa8398cf9056ba62fdcabe814f3ca3624e615b9bfd92353d5d8073ff3177de78a98edf93137003fd044ac29f1cb9c3fa6dadacc907839dae9"}], 0x120, 0x8800}, {0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000001c40)="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", 0xff}, {&(0x7f0000001d40)="4b56670d12cefccc6500ef7684754a3238afc063c3157b5c466912b5d448448f9ce9d9102eb7c9ce0ca490eeb0588c46e9ade3511e4d4907cf99ff9329d35a761baa1b65f9c32f1a99cb91b7df1613f36239d3a020b77e3fd942320487c96a1bec1c309f017ee2154500623e4f6a62dad08984d05ab4233bed5e1fcfc7fd94cba37780f079243b8586ee506919e1ffe69f27729fc36e06612acce3825f31d4", 0x9f}, {&(0x7f0000001e00)="6c962b475783e0a894f15ed53ffb814be2f4a56882184ede7d6dca01bd71edfbcc83b7612c8bd63b91c2e6b02090f3805edaa6b9cdec2da98849a3867ca6ea2015d5f2a766f2adb884af88a1267d5276b4474bfc79d0de413b53131a82b3fa3fa2630ef1db0b3d0ee61d5ed8f70e8d33511ad933bbf7f96c7097af106e509edede9d0f", 0x83}], 0x3, 0x0, 0x0, 0x8804}], 0x4, 0x0) 05:07:59 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 05:07:59 executing program 5: r0 = socket$inet(0x2, 0x80001, 0x84) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@getlink={0x44, 0x12, 0x11, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x4014, 0x40000}, [@IFLA_GROUP={0x8, 0x1b, 0x4}, @IFLA_PHYS_PORT_ID={0x1c, 0x22, "a780ce53238197cddc3288b6dd71bddc6cc349d410"}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) bind$inet(r0, &(0x7f0000022ff0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f000000a000)='\f', 0x1}], 0x1}, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, [], @raw_data=[0xeaf, 0x0, 0x7, 0x521, 0x9, 0x0, 0x7fff, 0x60e, 0x7, 0x293, 0x7, 0x8, 0x9, 0x0, 0x6, 0x400, 0xb3b, 0x7, 0x7fff, 0xfff, 0x3, 0xfffffffffffffffd, 0x5, 0x0, 0x2, 0x0, 0x2, 0xffffffffffffff80, 0x40, 0xfffffffffffffffc, 0x6, 0x80000000]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@broadcast}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0xb8}, 0x1, 0x10}, 0x0) 05:07:59 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:07:59 executing program 0: ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x9) r2 = socket$inet6_sctp(0xa, 0x80000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write$apparmor_current(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='c\bangeprofile \x00'], 0xf) write(r2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={r3, 0x45, "e4acff427642cc919d283dfc2a94d65bc25d8d760485c456045f8e59dc802ccb0962fd0676008a963c7a5dcb0d471b2a85a7305e11e724f1f57a508487bfc904b247a20011"}, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/21) shutdown(r2, 0x1) r4 = accept(r1, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)={'syz0'}, 0x20000) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) 05:08:00 executing program 3: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) 05:08:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}}, {{@in6=@ipv4, 0x0, 0x2b}}}, 0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:00 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000640)={r3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1ad6006fc781619eb98cf618bd115374ecda6d4d668841c431f5631cad64d88b5bac966fbdd887b5535418cbee70018ef4bb6c57cd88cc1b1ff68056c7c8ebfd29b42782091e99162c9bfa7ea3d3a743edf96930906aacca9fb1556fcf4e1ad5e3eb37d5"], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="006340400000000000000000000000f47ac64000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r5, &(0x7f00000007c0)=@abs, &(0x7f0000000000)=0x6e) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) memfd_create(&(0x7f0000000080)='!proccgroup\x00', 0x0) openat$cgroup_ro(r6, &(0x7f0000000840)='pids.events\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000400)={'veth0_to_bridge\x00', 0x100}) accept(r5, &(0x7f0000000580)=@alg, &(0x7f0000000600)=0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000008c0)={0x2c, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, r4}, @clear_death={0x400c630f, 0x1, 0x3}, @release={0x40046306, 0x2}], 0x160, 0x0, &(0x7f0000000940)="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"}) [ 301.298168][T10714] binder: 10713:10714 unknown command 1862325786 [ 301.324578][T10714] binder: 10713:10714 ioctl c0306201 20000140 returned -22 [ 301.344293][T10714] binder_alloc: 10713: binder_alloc_buf size 137438953472 failed, no address space 05:08:00 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:00 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:00 executing program 3: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) 05:08:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}}, {{@in6=@ipv4, 0x0, 0x2b}}}, 0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) [ 301.372804][T10714] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 301.392989][T10714] binder: 10713:10714 transaction failed 29201/-28, size 103079215104-34359738368 line 3056 [ 301.408974][T10716] binder: 10713:10716 unknown command 0 [ 301.493323][T10714] binder: 10713:10714 Release 1 refcount change on invalid ref 1 ret -22 05:08:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}}, {{@in6=@ipv4, 0x0, 0x2b}}}, 0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:00 executing program 3: r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) [ 301.549412][T10716] binder: 10713:10716 ioctl c0306201 200002c0 returned -22 [ 301.611896][T10728] binder: 10713:10728 BC_ACQUIRE_DONE u0000000000000000 no match 05:08:00 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x741201, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="e899c6342d00cac464fdb59b67e4bfa9a4ead1d3f01e9c086bdf3de691aced8f41375f8746191c2b479a16912125eb23cb1833d03277056ba40b097f4d00bf10a0be9cfaedf96c13a965c595e6c961d758e0ee8ef67468c540389696fc0c59d5e53b0d93f44df86bc2ee2a54783fa459982f58eb502d98bf551d6e9ea8137d21caaa3f9fd4a56459229b74c51a7a66be246a24ed702bd7b7843f9d2c097261888d08fe215903002112ea6af3c5e1f64dfd5164ea5e4a61d31e660cc5b8cbf9c2155a9c01dc8cf195af291704a6e3e92a6f95b72dc161026fbf5729203b551f39cdb9c6c11cea04ff13563896062ed2156e54b7") getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000fff000/0x1000)=nil, 0x1000}, &(0x7f0000000180)=0x10) umount2(&(0x7f00000001c0)='./file0\x00', 0x3) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x6, 0x4, 0x8}) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000240)={'teql0\x00', 0x1000, 0x71dc}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000340), &(0x7f0000000380)=0xc) ioctl$VIDIOC_ENUMAUDOUT(r0, 0xc0345642, &(0x7f00000003c0)={0xa51, "968f0f0513cff952b2d1d8645855d0c20124c471ee28492c90c4a52cc14363dd", 0x3, 0x1}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000400)={{0x7, 0x8}, 'port1\x00', 0x1, 0x40, 0x1, 0x223df1ca, 0x5, 0xedf7, 0x47d9, 0x0, 0x2, 0x44f9643c}) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f00000004c0)) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000540)={0x0, 0x8001, 0x80000000, [], &(0x7f0000000500)=0x1000}) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000580)={0xf, @output={0x1000, 0x1, {0x40, 0x40}, 0x6}}) ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000680)={[{0x5, 0x8, 0xec, 0x7e7f, 0xac, 0x6, 0x0, 0x3553, 0x8, 0x2, 0x1b, 0x200, 0x9}, {0xffffffffffffffa0, 0x8, 0x8000, 0x1, 0x8, 0x200, 0xfff, 0x80, 0x269, 0x7, 0x6, 0x9}, {0xfffffffffffffffc, 0x2, 0x7, 0x5, 0x3, 0x0, 0x419, 0x6, 0x3f, 0x20000000000000, 0x7, 0x8, 0x7fff}]}) r1 = creat(&(0x7f0000000700)='./file1\x00', 0x8) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000740)) ioctl$KDSETLED(r1, 0x4b32, 0x6) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000780)={0x6}) perf_event_open(&(0x7f0000000800)={0x5, 0x70, 0x5, 0x5, 0xffffffffffffff44, 0xfffffffffffffc00, 0x0, 0xfffffffffffffffd, 0x40010, 0x8, 0xfffffffffffffffd, 0x10000, 0x5, 0x0, 0x3, 0x5e06, 0x9, 0x80000001, 0xff, 0x8415, 0x80000001, 0xff, 0xe2, 0x7fff, 0x0, 0x6, 0x5, 0x51, 0x6, 0x4, 0x10001, 0x6, 0x6, 0x5, 0x80, 0x8, 0x9, 0x80000001, 0x0, 0x2, 0x1, @perf_config_ext={0x4, 0x69}, 0x2004, 0x8, 0xeada, 0x5, 0x3, 0x0, 0x10000}, 0x0, 0xd, 0xffffffffffffff9c, 0x0) linkat(r1, &(0x7f0000000880)='./file0\x00', r1, &(0x7f00000008c0)='./file1\x00', 0x1400) add_key$keyring(&(0x7f0000000900)='keyring\x00', &(0x7f0000000940)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = socket(0x1, 0x80006, 0x8000) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$TIOCEXCL(r1, 0x540c) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000980)=0x2, 0x4) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000a00)={0x5, &(0x7f00000009c0)=[{0x4, 0x6}, {0x1, 0x1712}, {0x1, 0x85d6}, {0x54, 0x6}, {0x1, 0x101}]}) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000a40), &(0x7f0000000a80)=0xb) write$P9_RWRITE(r1, &(0x7f0000000ac0)={0xb, 0x77, 0x1, 0xd8}, 0xb) fcntl$setstatus(r2, 0x4, 0x42000) sched_yield() 05:08:00 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:00 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:00 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}}, {{@in6=@ipv4, 0x0, 0x2b}}}, 0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) [ 301.729163][T10714] binder: 10713:10714 BC_ACQUIRE_DONE node 6 has no pending acquire request 05:08:01 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) [ 301.880043][T10714] binder: 10713:10714 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 301.905703][T10714] binder: 10713:10714 Release 1 refcount change on invalid ref 2 ret -22 [ 302.061427][T10716] binder: 10713:10716 unknown command 1862325786 [ 302.091470][T10716] binder: 10713:10716 ioctl c0306201 20000140 returned -22 [ 302.129565][T10716] binder: BINDER_SET_CONTEXT_MGR already set [ 302.150285][T10763] binder_alloc: 10713: binder_alloc_buf, no vma [ 302.169459][T10716] binder: 10713:10716 ioctl 40046207 0 returned -16 [ 302.193868][T10728] binder: 10713:10728 unknown command 0 [ 302.207525][T10728] binder: 10713:10728 ioctl c0306201 200002c0 returned -22 [ 302.240509][T10763] binder: 10713:10763 transaction failed 29189/-3, size 103079215104-34359738368 line 3056 [ 302.268598][T10764] binder: 10713:10764 Release 1 refcount change on invalid ref 1 ret -22 05:08:01 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000640)={r3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1ad6006fc781619eb98cf618bd115374ecda6d4d668841c431f5631cad64d88b5bac966fbdd887b5535418cbee70018ef4bb6c57cd88cc1b1ff68056c7c8ebfd29b42782091e99162c9bfa7ea3d3a743edf96930906aacca9fb1556fcf4e1ad5e3eb37d5"], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="006340400000000000000000000000f47ac64000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r5, &(0x7f00000007c0)=@abs, &(0x7f0000000000)=0x6e) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) memfd_create(&(0x7f0000000080)='!proccgroup\x00', 0x0) openat$cgroup_ro(r6, &(0x7f0000000840)='pids.events\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000400)={'veth0_to_bridge\x00', 0x100}) accept(r5, &(0x7f0000000580)=@alg, &(0x7f0000000600)=0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000008c0)={0x2c, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, r4}, @clear_death={0x400c630f, 0x1, 0x3}, @release={0x40046306, 0x2}], 0x160, 0x0, &(0x7f0000000940)="859547f83b9b058a973a491d7e6378544744f2b56b02270a2f78214a936e9afb25cd94695643af6563f86771aa9621b9f30f2ca538b018247a633c28ee01e03b4639679311117971e60dc1538f34e961ae301463172c41754be988f6beb0ce4d83c69f86c236d29520e6cdaf5dbb60404c66d63315ff3f000000632781d0197ef1f81314da0a1ed90b681842cf85a41b496ce0a7a6f5aa4bbb2348e21f220c325b566d3eea8861be89b3398c6aec3349174f9cdc9de34df361ac9bf7afd8566849487c3c0a1e3aaacd180288f3196a89f6e9bcc757eb25c1dd3fdd5331ad3e2a313659914d5281ec9f0d9ae4dc4a6e93c7568408de9dd8c81da853b3bebe88adb1aeeb388f8b46e6b54042ddf4047738a56b2a79c9600564c106f9e4040da920f18988e59f9702f6d9d26c009467f2b5d4728ea04c571d46d8d7a75fa4bf60cf922550828ac1cce174cce758f101105299b56c3563fb44bc7f8936eb4183cfc0"}) 05:08:01 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}}, {{@in6=@ipv4, 0x0, 0x2b}}}, 0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:01 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000100)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) write$UHID_INPUT(r0, &(0x7f0000000240)={0x8, "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", 0x1000}, 0x1006) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000200)={0x40000eb}) 05:08:01 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:01 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:01 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000640)={r3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1ad6006fc781619eb98cf618bd115374ecda6d4d668841c431f5631cad64d88b5bac966fbdd887b5535418cbee70018ef4bb6c57cd88cc1b1ff68056c7c8ebfd29b42782091e99162c9bfa7ea3d3a743edf96930906aacca9fb1556fcf4e1ad5e3eb37d5"], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="006340400000000000000000000000f47ac64000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r5, &(0x7f00000007c0)=@abs, &(0x7f0000000000)=0x6e) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) memfd_create(&(0x7f0000000080)='!proccgroup\x00', 0x0) openat$cgroup_ro(r6, &(0x7f0000000840)='pids.events\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000400)={'veth0_to_bridge\x00', 0x100}) accept(r5, &(0x7f0000000580)=@alg, &(0x7f0000000600)=0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000008c0)={0x2c, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, r4}, @clear_death={0x400c630f, 0x1, 0x3}, @release={0x40046306, 0x2}], 0x160, 0x0, &(0x7f0000000940)="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"}) [ 302.527368][T10781] binder: 10771:10781 unknown command 1862325786 05:08:01 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) 05:08:01 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}}, {{@in6=@ipv4, 0x0, 0x2b}}}, 0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) [ 302.573478][T10781] binder: 10771:10781 ioctl c0306201 20000140 returned -22 [ 302.654009][T10781] binder_alloc: 10771: binder_alloc_buf size 137438953472 failed, no address space [ 302.726012][T10781] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 302.760288][T10798] binder: 10790:10798 unknown command 1862325786 05:08:01 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x800000000000000a}}, {{@in6=@ipv4, 0x0, 0x2b}}}, 0xe8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:01 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) [ 302.785072][T10802] binder: 10771:10802 unknown command 0 [ 302.793249][T10798] binder: 10790:10798 ioctl c0306201 20000140 returned -22 [ 302.811436][T10806] binder: 10771:10806 Release 1 refcount change on invalid ref 1 ret -22 [ 302.852576][T10802] binder: 10771:10802 ioctl c0306201 200002c0 returned -22 [ 302.882701][T10811] binder: BINDER_SET_CONTEXT_MGR already set [ 302.895992][T10808] binder: 10771:10808 BC_ACQUIRE_DONE u0000000000000000 no match [ 302.914440][T10781] binder: 10771:10781 transaction failed 29201/-28, size 103079215104-34359738368 line 3056 [ 302.940222][T10798] binder_alloc: 10771: binder_alloc_buf size 137438953472 failed, no address space 05:08:02 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000640)={r3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1ad6006fc781619eb98cf618bd115374ecda6d4d668841c431f5631cad64d88b5bac966fbdd887b5535418cbee70018ef4bb6c57cd88cc1b1ff68056c7c8ebfd29b42782091e99162c9bfa7ea3d3a743edf96930906aacca9fb1556fcf4e1ad5e3eb37d5"], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="006340400000000000000000000000f47ac64000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r5, &(0x7f00000007c0)=@abs, &(0x7f0000000000)=0x6e) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) memfd_create(&(0x7f0000000080)='!proccgroup\x00', 0x0) openat$cgroup_ro(r6, &(0x7f0000000840)='pids.events\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000400)={'veth0_to_bridge\x00', 0x100}) accept(r5, &(0x7f0000000580)=@alg, &(0x7f0000000600)=0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000008c0)={0x2c, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, r4}, @clear_death={0x400c630f, 0x1, 0x3}, @release={0x40046306, 0x2}], 0x160, 0x0, &(0x7f0000000940)="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"}) [ 302.969984][T10811] binder: 10790:10811 ioctl 40046207 0 returned -16 [ 302.986773][T10798] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 303.050171][T10818] binder: 10790:10818 unknown command 0 [ 303.051435][T10822] binder: 10790:10822 Release 1 refcount change on invalid ref 1 ret -22 [ 303.077730][T10818] binder: 10790:10818 ioctl c0306201 200002c0 returned -22 [ 303.150705][T10811] binder: 10790:10811 BC_ACQUIRE_DONE u0000000000000000 no match [ 303.187977][T10798] binder: 10790:10798 transaction failed 29201/-28, size 103079215104-34359738368 line 3056 [ 303.200315][T10825] binder: 10824:10825 unknown command 1862325786 [ 303.217306][T10825] binder: 10824:10825 ioctl c0306201 20000140 returned -22 [ 303.243835][T10825] binder: BINDER_SET_CONTEXT_MGR already set [ 303.250309][T10825] binder: 10824:10825 ioctl 40046207 0 returned -16 [ 303.268609][T10825] binder_alloc: 10771: binder_alloc_buf size 137438953472 failed, no address space [ 303.278727][T10825] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) 05:08:02 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:02 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:02 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) 05:08:02 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:02 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000640)={r3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1ad6006fc781619eb98cf618bd115374ecda6d4d668841c431f5631cad64d88b5bac966fbdd887b5535418cbee70018ef4bb6c57cd88cc1b1ff68056c7c8ebfd29b42782091e99162c9bfa7ea3d3a743edf96930906aacca9fb1556fcf4e1ad5e3eb37d5"], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="006340400000000000000000000000f47ac64000000000000000000000000000000000000000000018000000000000000800000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="852a627300000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000b80)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000"]) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r5, &(0x7f00000007c0)=@abs, &(0x7f0000000000)=0x6e) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() fallocate(r0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) memfd_create(&(0x7f0000000080)='!proccgroup\x00', 0x0) openat$cgroup_ro(r6, &(0x7f0000000840)='pids.events\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000400)={'veth0_to_bridge\x00', 0x100}) accept(r5, &(0x7f0000000580)=@alg, &(0x7f0000000600)=0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000008c0)={0x2c, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, r4}, @clear_death={0x400c630f, 0x1, 0x3}, @release={0x40046306, 0x2}], 0x160, 0x0, &(0x7f0000000940)="859547f83b9b058a973a491d7e6378544744f2b56b02270a2f78214a936e9afb25cd94695643af6563f86771aa9621b9f30f2ca538b018247a633c28ee01e03b4639679311117971e60dc1538f34e961ae301463172c41754be988f6beb0ce4d83c69f86c236d29520e6cdaf5dbb60404c66d63315ff3f000000632781d0197ef1f81314da0a1ed90b681842cf85a41b496ce0a7a6f5aa4bbb2348e21f220c325b566d3eea8861be89b3398c6aec3349174f9cdc9de34df361ac9bf7afd8566849487c3c0a1e3aaacd180288f3196a89f6e9bcc757eb25c1dd3fdd5331ad3e2a313659914d5281ec9f0d9ae4dc4a6e93c7568408de9dd8c81da853b3bebe88adb1aeeb388f8b46e6b54042ddf4047738a56b2a79c9600564c106f9e4040da920f18988e59f9702f6d9d26c009467f2b5d4728ea04c571d46d8d7a75fa4bf60cf922550828ac1cce174cce758f101105299b56c3563fb44bc7f8936eb4183cfc0"}) [ 303.290563][T10825] binder: 10824:10825 transaction failed 29201/-28, size 103079215104-34359738368 line 3056 [ 303.311206][T10825] binder: 10824:10825 unknown command 0 [ 303.328942][T10825] binder: 10824:10825 ioctl c0306201 200002c0 returned -22 [ 303.379824][T10836] binder: 10824:10836 Release 1 refcount change on invalid ref 1 ret -22 05:08:02 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:02 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) [ 303.445794][T10838] binder: 10832:10838 unknown command 1862325786 [ 303.498895][T10838] binder: 10832:10838 ioctl c0306201 20000140 returned -22 [ 303.527015][T10825] binder: 10824:10825 BC_ACQUIRE_DONE u0000000000000000 no match 05:08:02 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) [ 303.552106][T10845] binder: BINDER_SET_CONTEXT_MGR already set 05:08:02 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:02 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) [ 303.612166][T10836] binder: 10824:10836 BC_ACQUIRE_DONE u0000000000000000 no match [ 303.618868][T10856] binder: 10832:10856 unknown command 0 [ 303.619973][T10836] binder: 10824:10836 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 303.620004][T10836] binder: 10824:10836 Release 1 refcount change on invalid ref 2 ret -22 [ 303.726898][T10856] binder: 10832:10856 ioctl c0306201 200002c0 returned -22 [ 303.764134][T10845] binder: 10832:10845 ioctl 40046207 0 returned -16 05:08:02 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) [ 303.770922][T10852] binder_alloc: 10771: binder_alloc_buf size 137438953472 failed, no address space [ 303.781567][T10863] binder: 10832:10863 Release 1 refcount change on invalid ref 1 ret -22 [ 303.943545][T10852] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 304.009652][T10852] binder: 10832:10852 transaction failed 29201/-28, size 103079215104-34359738368 line 3056 05:08:03 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) [ 304.158559][T10838] binder: 10832:10838 BC_ACQUIRE_DONE u0000000000000000 no match [ 304.230090][T10845] binder: 10832:10845 BC_ACQUIRE_DONE u0000000000000000 no match [ 304.253033][T10845] binder: 10832:10845 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 05:08:03 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:03 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:03 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) [ 304.278770][T10845] binder: 10832:10845 Release 1 refcount change on invalid ref 2 ret -22 05:08:03 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x180, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ff2000/0xc000)=nil, 0xc000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x40000000000005, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff9c}]) dup2(r3, r2) 05:08:03 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1) 05:08:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:03 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1) 05:08:03 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:03 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:04 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:04 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x80200000000002, 0x0) getsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r1 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)={&(0x7f0000000540)='./file0\x00', 0x0, 0x10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000500)='\x00', r2}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f000000de00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000003}, 0x10142) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(r1, &(0x7f0000000580)='cpuacct.usage_user\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a40)={r5, 0x10, &(0x7f0000000940)={&(0x7f00000009c0)=""/109, 0x6d, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a80)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000ff7f98bfaed75a01c5b9b0e35e964446f5439b2c49234e960c63c1537055ac49a0e36c6c00a226bc45b8d0379d65ae975b31c8406931c7cc141f91615a5d8db47ad9e31801ffcdbfed2f97eabd770f2ee38be59c338141f8e9000000000000000000000000"], 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x7, &(0x7f0000000ac0)=ANY=[@ANYBLOB="000000008100f8ffff0000f900000001be935b26669508ec1c0700003c1f003395f0377b74b84ec63e1e61e35729a4ee99b12464129a751dc00df1d47875eada2764742992399a116861ad0f23d699010e76dfdbced879c91a341f7fb3072edda9dd4e17fadb26a3c7e32de88f055d9d60566e2bb3fc0566b157fb4b93f370c68acf35516133f4cc1b8a800125ea8a2862365e1638ae284878a9139c85cae72b2c125dad88716f6ea76bcd6e2c85dadb9f14ef92f9d2ea55bee9153b"], 0x0, 0xf48, 0x0, 0x0, 0x0, 0x800000000000}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)={&(0x7f0000000100)='./file0\x00', r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000280)="0494c16d15656fc30b46585fde1e", 0x0, 0xf000}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)={&(0x7f0000000440)='./file0\x00', 0x0, 0x10}, 0x10) r9 = socket$kcm(0x2, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GP\x1a\x00\xf9\xd3\xc4q\xb4\xa5C\v\x11i\x1d\x81\xfbK\x9cI\x10j\xb3\xa0\x1e\xaan\x14\x94\xe1\x01\x12\xf6\xe5\'\xa7F\x96\x1b-\xa6a\xbc\x05\x17\xd1\xfe\xd1$\xf6\xef\xb4)-\xc4\xc6\xdfR\xa2\xc0b<\xdc\x1a\x18v}\x96\x1c&\xd3\xaa\x8cc:#Ig\xdf\xe0G\xb1Y\x97\xef\xc5\xa3\xbbR,\xb098F\xdc\xc3\xf6\xe7j(\x865i|d+<\xc7\xb3\xb3k=\x13T\xddP\x87\x12\xa1\xf1^;T-\x8a\f\f\x9as\xd1\x9d\x95+\xce\xf7\xd7\xd5\xcbp;D\xc4\xf1~_v\xe7\xa2\xf9\xc4N\ao\xb1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0xab93031f99fda67f, &(0x7f0000000080)=""/251}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r5, 0x28, &(0x7f0000000640)={0x0, 0x0}}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000900)={&(0x7f00000008c0)='./file1\x00', r6}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={r10, 0x4}, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)=@nfc={0x27, 0x0, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000700)="bdc3f5c47317ab4ca2fb53056600a53067b1ffc57c5428c2fd378b4b911dc474760a340235932635476a0c92e7ce56b7e9b27f312e0a656966d91c", 0x3b}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x890c, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r') 05:08:04 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:04 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:04 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x1) 05:08:04 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) [ 305.380252][T10949] device lo entered promiscuous mode 05:08:04 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:04 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1) 05:08:04 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:05 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:05 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:05 executing program 2: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:05 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1) 05:08:05 executing program 0: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:05 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:05 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x1) 05:08:05 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:05 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:05 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x0) 05:08:05 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:05 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:05 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x0) 05:08:06 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:06 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:06 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x0) 05:08:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:06 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:06 executing program 0: r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)='cgroup.subtree_control\x00', 0x2, 0x0) r1 = accept4$packet(0xffffffffffffff9c, 0x0, &(0x7f00000001c0), 0x800) setsockopt$sock_timeval(r1, 0x1, 0x0, 0x0, 0x0) socket$inet(0x2b, 0x0, 0x0) syz_mount_image$btrfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ntfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, 0x0) perf_event_open(&(0x7f0000005240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x404005, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0x300000000000000}) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) mkdir(&(0x7f0000000640)='./file1\x00', 0x0) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f0000000200)={0x5c7, 0x7, 0x2c, "8a2a216454357bedc2c7a76ff86968ff9345eb61e775274fd128ea356e6fb5d5e313909cdcbe307511707608ea9b48ba3ed30ffd18f7dbd1d543d71d", 0x2a, "1c8598bd0aacf0144d6721bf025603e0bc65240e1f6d08cfff4c02cfaede560e6df858312355d8dc6467fdb4fe301684097caca576bd60637c0051c1", 0x50}) epoll_pwait(r2, &(0x7f0000000700)=[{}], 0x1, 0xeb, 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffc000/0x2000)=nil) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="d4dd7b1fedb3c1b42ba637c089ff77598764a47f"], 0xc) syz_open_dev$sndpcmp(0x0, 0x3, 0x0) 05:08:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:06 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:06 executing program 3: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:06 executing program 0 (fault-call:2 fault-nth:0): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:06 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) [ 307.742354][T11059] FAULT_INJECTION: forcing a failure. [ 307.742354][T11059] name failslab, interval 1, probability 0, space 0, times 1 [ 307.783115][T11059] CPU: 0 PID: 11059 Comm: syz-executor0 Not tainted 5.0.0-rc4-next-20190130 #22 [ 307.792162][T11059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 307.802221][T11059] Call Trace: [ 307.805529][T11059] dump_stack+0x1db/0x2d0 [ 307.809889][T11059] ? dump_stack_print_info.cold+0x20/0x20 [ 307.815661][T11059] should_fail.cold+0xa/0x14 [ 307.820284][T11059] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 307.826104][T11059] ? ___might_sleep+0x1e7/0x310 [ 307.830969][T11059] ? arch_local_save_flags+0x50/0x50 [ 307.836285][T11059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.842553][T11059] __should_failslab+0x121/0x190 [ 307.847500][T11059] should_failslab+0x9/0x14 [ 307.852029][T11059] kmem_cache_alloc_trace+0x2d1/0x760 [ 307.857441][T11059] alloc_pipe_info+0x152/0x580 [ 307.862217][T11059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.868459][T11059] ? pipe_read+0x940/0x940 [ 307.872888][T11059] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 307.878525][T11059] ? common_file_perm+0x293/0x820 [ 307.883568][T11059] splice_direct_to_actor+0x795/0x9d0 [ 307.888962][T11059] ? ksys_dup3+0x660/0x660 [ 307.893399][T11059] ? generic_pipe_buf_nosteal+0x10/0x10 [ 307.898970][T11059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.905219][T11059] ? do_splice_to+0x190/0x190 [ 307.909895][T11059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.916142][T11059] ? rw_verify_area+0x118/0x360 [ 307.921006][T11059] do_splice_direct+0x2c7/0x420 [ 307.925871][T11059] ? splice_direct_to_actor+0x9d0/0x9d0 [ 307.931428][T11059] ? rcu_read_lock_sched_held+0x110/0x130 [ 307.937164][T11059] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 307.942649][T11059] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 307.942741][T11059] ? __sb_start_write+0x1ac/0x360 [ 307.942763][T11059] do_sendfile+0x61a/0xe60 [ 307.942791][T11059] ? do_compat_pwritev64+0x1c0/0x1c0 [ 307.942815][T11059] ? fput+0x128/0x1a0 [ 307.942830][T11059] ? do_syscall_64+0x8c/0x800 [ 307.942842][T11059] ? do_syscall_64+0x8c/0x800 [ 307.942860][T11059] __x64_sys_sendfile64+0x1f8/0x240 [ 307.942878][T11059] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 307.987915][T11059] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 307.993399][T11059] do_syscall_64+0x1a3/0x800 [ 307.997998][T11059] ? syscall_return_slowpath+0x5f0/0x5f0 [ 308.003656][T11059] ? prepare_exit_to_usermode+0x232/0x3b0 [ 308.009402][T11059] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 308.014959][T11059] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 308.020846][T11059] RIP: 0033:0x458089 [ 308.024738][T11059] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 308.044836][T11059] RSP: 002b:00007fabe842ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 308.053245][T11059] RAX: ffffffffffffffda RBX: 00007fabe842ec90 RCX: 0000000000458089 [ 308.061210][T11059] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 308.069177][T11059] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 308.077142][T11059] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fabe842f6d4 [ 308.085111][T11059] R13: 00000000004c4fd7 R14: 00000000004d8b90 R15: 0000000000000005 05:08:07 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:07 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:07 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:07 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:07 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:07 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:07 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:07 executing program 3: write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:07 executing program 0 (fault-call:2 fault-nth:1): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:07 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:07 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) [ 308.972659][T11115] FAULT_INJECTION: forcing a failure. [ 308.972659][T11115] name failslab, interval 1, probability 0, space 0, times 0 [ 309.022464][T11115] CPU: 0 PID: 11115 Comm: syz-executor0 Not tainted 5.0.0-rc4-next-20190130 #22 [ 309.031507][T11115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.042090][T11115] Call Trace: [ 309.045412][T11115] dump_stack+0x1db/0x2d0 [ 309.049761][T11115] ? dump_stack_print_info.cold+0x20/0x20 [ 309.055493][T11115] ? percpu_ref_put_many+0x129/0x270 [ 309.060791][T11115] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 309.067063][T11115] should_fail.cold+0xa/0x14 05:08:08 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:08 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:08 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:08 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:08 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x11}, 0x98) r1 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x800) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000f00)=@filter={'filter\x00', 0xe, 0x2, 0xd18, [0x0, 0x200001c0, 0x200001f0, 0x20000220], 0x0, &(0x7f00000000c0), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x7, 0x40, 0xea47, '\x00', 'ip6gretap0\x00', 'bridge_slave_1\x00', 'bond_slave_1\x00', @empty, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @local, [0x8c1c7d0ebe7c78f0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x968, 0x968, 0x998, [@ipvs={'ipvs\x00', 0x28, {{@ipv4=@broadcast, [0xff000000, 0xffffff00, 0xff000000, 0xffffff00], 0x4e21, 0x2f, 0x6, 0x4e20, 0x20, 0x10}}}, @among={'among\x00', 0x880, {{0x100, 0x80000001, 0x2, {[0x9, 0x2, 0x7cd5, 0x80, 0x7, 0x2, 0x5, 0x1a8b, 0x4, 0x4, 0x3db8, 0x1, 0x20, 0x100000000, 0x40, 0x20, 0x400, 0x0, 0x5, 0x80000001, 0xffffffffffff7fff, 0xffffffffffffffff, 0xffff, 0x40000, 0x8, 0x7, 0x3, 0x3, 0x12, 0xfffffffffffffe00, 0x1ff, 0x7fff, 0x10000, 0x4, 0x0, 0xde55, 0xfff, 0x6, 0x200, 0x100, 0x80, 0x73, 0x400, 0x6, 0x81, 0x6, 0x0, 0x100000000, 0x401, 0x20, 0x101, 0x2, 0xd9, 0x7ff, 0x4, 0x3f, 0x100000001, 0x9, 0x4, 0x80000000, 0x0, 0x6, 0x1, 0x55, 0x7fffffff, 0x6e4a0e92, 0x9, 0x10000, 0x101, 0x13bc, 0x3, 0x3e, 0x80, 0x33c, 0x6, 0x400, 0x4, 0x6, 0x4, 0x3, 0x1, 0x26a9, 0x400, 0x0, 0x4, 0x2, 0x8000, 0x5, 0x101, 0x100, 0x7fff, 0x1, 0x7ff, 0xc666, 0x3, 0x3f, 0x40, 0xffff, 0x80, 0xc99, 0x8001, 0x3ff, 0x8, 0x44f, 0x5, 0x3ff, 0x6, 0x8, 0x5, 0x5, 0x2, 0x1f, 0x8000, 0x3, 0x8000, 0x7fff, 0x2ea3, 0x9, 0x2, 0xb, 0x5, 0xffffffff, 0x8, 0xfffffffffffffff9, 0x3, 0x0, 0xdd, 0x10001, 0xc000000000000000, 0x5, 0x1, 0x401, 0x8000, 0x7, 0x0, 0x200, 0x50b, 0x8, 0x6, 0xffffffff00000001, 0x5, 0x8000, 0x5, 0x7fffffff, 0xffffffff, 0x7ff, 0x5b6, 0x905, 0x9, 0x4f2, 0x1, 0x3f, 0x4ce, 0x4, 0x4, 0xe6, 0x200000002000, 0x7ff, 0x8001, 0x3, 0x9, 0x4, 0xfffffffffffffeff, 0x8000, 0x2, 0x40, 0x3, 0x7, 0xc38f, 0x400, 0x80000001, 0x6, 0x100, 0x71, 0x2, 0x1, 0x5, 0xfffffffffffffffc, 0x4, 0x4b, 0x5d, 0x7, 0x5, 0x2, 0x2, 0x7, 0x6, 0x400, 0xffffffffffffe3c1, 0x5705, 0xffff, 0xfffffffffffffffc, 0x80000000, 0x100, 0x27f30, 0x10000, 0x1, 0x9, 0x154a, 0x2, 0xff, 0x200, 0x1000, 0x1, 0x75, 0x2, 0x9, 0x9, 0x20, 0x3, 0x7, 0x0, 0x6, 0x7, 0x10000, 0x4, 0x45, 0x1ff, 0xfffffffffffffffc, 0x3, 0x3, 0x46, 0x0, 0x1, 0x80, 0x9, 0x20, 0x40, 0x0, 0x80000000, 0x0, 0x4, 0x5c0a, 0x626c6926, 0x20, 0x8001, 0x5, 0x98, 0x1ff, 0x4, 0x8080, 0x3, 0x4, 0x4, 0x4, 0xfd, 0x5, 0x1, 0x6, 0x0, 0x6, 0x7f, 0x3f, 0x3, 0x9, 0x6, 0x2], 0x4, [{[0x3, 0x75], @broadcast}, {[0x1, 0x8], @broadcast}, {[0x100, 0x9], @remote}, {[0xfffffffffffffff7, 0x80000001], @dev={0xac, 0x14, 0x14, 0x15}}]}, {[0x5, 0x9, 0xe8b, 0x80, 0x5, 0x3, 0x3, 0x3f, 0x9, 0x3, 0x40, 0x8000, 0x7, 0x3, 0x90b1, 0x20, 0x7, 0x7, 0x8, 0x800, 0x5b71, 0x0, 0x7f, 0x1ff, 0x40, 0x7ff, 0xffffffff, 0x5, 0xa29, 0xc70, 0x100000001, 0x5, 0x905, 0xfff, 0x7, 0x3, 0x80, 0x9, 0xec22, 0x200, 0x1f, 0x5, 0x0, 0xfffffffffffff8ac, 0x7, 0xe62, 0x3f, 0x9, 0x701e, 0x7fffffff, 0x100, 0x800, 0xffc0000000000000, 0x11, 0x7, 0x3ff, 0x1000, 0x101, 0x9, 0x4, 0x0, 0x8, 0x1, 0x101, 0x2, 0xffffffffffff4843, 0x9, 0x400, 0x9, 0x642, 0x182f, 0x3, 0xffffffffffff4be9, 0x200, 0x92, 0x20, 0x5, 0x8, 0x100000000, 0xbe16, 0x1, 0x6, 0xffffffff7fffffff, 0x3ff, 0x4, 0x1f, 0x38d, 0x400, 0x800, 0x3ff, 0x1, 0x3, 0x100000000, 0x2, 0x2, 0x80, 0x0, 0x2, 0x3, 0x4, 0x2, 0xffffffff, 0x100000001, 0x6, 0xc2, 0x39d9a305, 0x6, 0x401, 0x49, 0x8, 0x8, 0x6, 0x2, 0x7fff, 0x10001, 0x3, 0x4, 0x9, 0x4a0, 0x3, 0x0, 0x3f, 0x2, 0x6, 0x4, 0x2, 0x1ff, 0x0, 0x2, 0x81, 0x3ff, 0x6, 0x3, 0x28000, 0x8, 0x6, 0x6, 0x8000, 0x38a3, 0x100000001, 0x1, 0x7ff, 0xffffffff, 0x1ff, 0x2, 0x6, 0x3, 0xd6, 0x10000, 0x6, 0x400, 0x20, 0x0, 0x3ff, 0x1f, 0x4, 0x2, 0x7, 0x8, 0x0, 0x3, 0x20, 0x9, 0x9, 0x6e, 0x10000, 0x5048, 0x2, 0x9, 0xffffffffffff4d19, 0xdf3e301, 0xffffffffffff4df1, 0x5, 0x0, 0xd6, 0x1f, 0x10001, 0x1, 0x100000000, 0xd5, 0x7fffffff, 0x5, 0x36f, 0x1000, 0x20, 0x7, 0x80000001, 0x1, 0x7, 0x6, 0x7, 0x3, 0x2, 0x1, 0x4b9f, 0x5, 0x367f, 0x7fffffff, 0x9, 0x9, 0x3, 0x9, 0x8, 0x3, 0x100, 0x15f, 0x1f, 0xfffffffffffff000, 0x7, 0x3, 0x2, 0x80000000, 0xffffffff80000000, 0xfffffffffffffff9, 0x80000001, 0x401, 0x8020000, 0x66c1, 0xa44, 0x6, 0x676, 0x371c, 0x1fb, 0x3, 0x7fffffff, 0x7, 0x5, 0x80, 0x4, 0x5, 0x0, 0x100000000, 0x7f, 0xf12, 0x10001, 0x10000, 0x5, 0x2e41, 0x616, 0x2, 0x7, 0x9, 0x9, 0x800, 0x8000, 0x7, 0x1, 0xd11, 0x8, 0x9, 0x800, 0x8, 0x3, 0x5, 0x10000, 0x2, 0x9], 0x4, [{[0x37f60b07, 0x6], @remote}, {[0xffffffffffffffc0, 0x8], @multicast1}, {[0x100000001, 0x80], @multicast2}, {[0x4], @empty}]}}}}]}}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}, {{{0x1d, 0x0, 0xb3fb, 'eql\x00', 'ip6_vti0\x00', 'yam0\x00', 'veth1\x00', @broadcast, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @dev={[], 0x11}, [0xff, 0xff, 0xff, 0xff], 0x140, 0x270, 0x2c0, [@arp={'arp\x00', 0x38, {{0x4, 0x8906, 0x2, @local, 0xff000000, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, @broadcast, [0x0, 0xff, 0x0, 0x0, 0x6b90ec487df5c40e], @local, [0xff, 0xff, 0xff], 0x88, 0x9}}}, @stp={'stp\x00', 0x48, {{0x200, {0x0, 0x7, 0x0, @broadcast, [0xff, 0x0, 0xff, 0x0, 0xff], 0x7, 0x0, 0x800, 0x7, @link_local, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x4e23, 0x4e23, 0x4, 0x8000, 0x1000, 0x6da3, 0x2, 0x200000000000000, 0x2, 0xfffffffffffffffb}, 0x64, 0x902}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xfffffffffffffffe, 'system_u:object_r:crond_exec_t:s0\x00'}}}]}, @common=@log={'log\x00', 0x28, {{0xffff, "314a4a9c197af0c2f0e6c403c598fc02e72e7a24faa41d1aee092f6668c6", 0x1}}}}]}]}, 0xd90) r2 = dup2(r1, r1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001080)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f0000001180)=0xe8) lstat(&(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000013c0)={0x0, 0x0}, &(0x7f0000001400)=0xc) getgroups(0x4, &(0x7f0000001440)=[0x0, 0xee01, 0xee00, 0x0]) stat(&(0x7f0000001480)='./file0\x00', &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001540)={0x0, 0x0, 0x0}, &(0x7f0000001580)=0xc) write$FUSE_DIRENTPLUS(r2, &(0x7f00000015c0)={0x290, 0xfffffffffffffffe, 0x5, [{{0x1, 0x3, 0x1000, 0x800, 0xb4, 0x8, {0x1, 0x101, 0x8, 0xfff, 0x7, 0x9, 0x7, 0x101, 0xdd91, 0x100, 0x3, r3, r4, 0x81, 0xffffffff}}, {0x2, 0x1, 0x9, 0x200, '-em0user/'}}, {{0x6, 0x2, 0x1, 0x4, 0x4, 0xfff, {0x6, 0x8, 0x5, 0x81, 0x80, 0x10000, 0x3, 0x6, 0xd3, 0x6, 0x7f, r5, r6, 0xffffffff92840a8c}}, {0x2, 0x1, 0x8, 0xfffffffffffff000, '@vmnet1,'}}, {{0x3, 0x1, 0x200, 0x8000, 0x5, 0xfff, {0x1, 0x6, 0x2, 0x0, 0x8, 0x3, 0x69e, 0x100000001, 0x4, 0x10001, 0xfc00000000000, r7, r8, 0x8, 0x8}}, {0x6, 0x2, 0x4, 0x10000, 'stp\x00'}}, {{0x1, 0x0, 0x4, 0x4, 0x6, 0x100000000, {0x0, 0x9, 0x7, 0x9, 0x7cb, 0xdb6, 0x8bd1, 0x40, 0x4, 0x8, 0x748, r9, r10, 0x100, 0x4}}, {0x0, 0x45, 0x0, 0x5}}]}, 0x290) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/vsock\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r11, 0x408c5333, &(0x7f0000000fc0)={0x2, 0x101, 0x1, 'queue1\x00', 0x3}) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c) [ 309.071696][T11115] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 309.077549][T11115] ? ___might_sleep+0x1e7/0x310 [ 309.077569][T11115] ? arch_local_save_flags+0x50/0x50 [ 309.077599][T11115] __should_failslab+0x121/0x190 [ 309.092680][T11115] should_failslab+0x9/0x14 [ 309.092699][T11115] __kmalloc+0x2dc/0x740 [ 309.092715][T11115] ? kmem_cache_alloc_trace+0x354/0x760 [ 309.092738][T11115] ? alloc_pipe_info+0x286/0x580 [ 309.092760][T11115] alloc_pipe_info+0x286/0x580 [ 309.092795][T11115] ? pipe_read+0x940/0x940 [ 309.092816][T11115] ? debug_lockdep_rcu_enabled+0x71/0xa0 [ 309.092832][T11115] ? common_file_perm+0x293/0x820 [ 309.092859][T11115] splice_direct_to_actor+0x795/0x9d0 [ 309.092878][T11115] ? ksys_dup3+0x660/0x660 [ 309.092890][T11115] ? generic_pipe_buf_nosteal+0x10/0x10 [ 309.092913][T11115] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 309.092926][T11115] ? do_splice_to+0x190/0x190 [ 309.092938][T11115] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 309.092958][T11115] ? rw_verify_area+0x118/0x360 05:08:08 executing program 0 (fault-call:2 fault-nth:2): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) [ 309.092975][T11115] do_splice_direct+0x2c7/0x420 [ 309.092994][T11115] ? splice_direct_to_actor+0x9d0/0x9d0 [ 309.093016][T11115] ? rcu_read_lock_sched_held+0x110/0x130 [ 309.093031][T11115] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 309.093046][T11115] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 309.093061][T11115] ? __sb_start_write+0x1ac/0x360 [ 309.093083][T11115] do_sendfile+0x61a/0xe60 [ 309.093112][T11115] ? do_compat_pwritev64+0x1c0/0x1c0 [ 309.093133][T11115] ? fput+0x128/0x1a0 [ 309.093151][T11115] ? do_syscall_64+0x8c/0x800 [ 309.093165][T11115] ? do_syscall_64+0x8c/0x800 [ 309.093202][T11115] __x64_sys_sendfile64+0x1f8/0x240 [ 309.093222][T11115] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 309.093239][T11115] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 309.093265][T11115] do_syscall_64+0x1a3/0x800 [ 309.093284][T11115] ? syscall_return_slowpath+0x5f0/0x5f0 [ 309.093302][T11115] ? prepare_exit_to_usermode+0x232/0x3b0 [ 309.093324][T11115] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.093347][T11115] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 309.093360][T11115] RIP: 0033:0x458089 [ 309.093377][T11115] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 309.093385][T11115] RSP: 002b:00007fabe842ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 309.093400][T11115] RAX: ffffffffffffffda RBX: 00007fabe842ec90 RCX: 0000000000458089 [ 309.093408][T11115] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 05:08:08 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) [ 309.093417][T11115] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 309.093426][T11115] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fabe842f6d4 [ 309.093434][T11115] R13: 00000000004c4fd7 R14: 00000000004d8b90 R15: 0000000000000005 [ 309.295534][T11133] Unknown ioctl 1082938163 05:08:08 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) [ 309.391794][T11137] FAULT_INJECTION: forcing a failure. [ 309.391794][T11137] name failslab, interval 1, probability 0, space 0, times 0 [ 309.440789][T11130] Unknown ioctl 1082938163 05:08:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x305800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x4}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000002c0)={0x56a8, 0xd, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x6053, r2, 0x2000) [ 309.589056][T11137] CPU: 1 PID: 11137 Comm: syz-executor0 Not tainted 5.0.0-rc4-next-20190130 #22 [ 309.598239][T11137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 309.608320][T11137] Call Trace: [ 309.611647][T11137] dump_stack+0x1db/0x2d0 [ 309.616005][T11137] ? dump_stack_print_info.cold+0x20/0x20 [ 309.621744][T11137] ? print_usage_bug+0xd0/0xd0 [ 309.626528][T11137] ? check_preemption_disabled+0x48/0x290 [ 309.632258][T11137] should_fail.cold+0xa/0x14 [ 309.636865][T11137] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 309.642696][T11137] ? ___might_sleep+0x1e7/0x310 [ 309.647559][T11137] ? arch_local_save_flags+0x50/0x50 [ 309.652859][T11137] ? mark_held_locks+0xf0/0xf0 [ 309.657651][T11137] __should_failslab+0x121/0x190 [ 309.662601][T11137] should_failslab+0x9/0x14 [ 309.667167][T11137] kmem_cache_alloc_node_trace+0x270/0x720 [ 309.672982][T11137] ? debug_smp_processor_id+0x1c/0x20 [ 309.678361][T11137] ? perf_trace_lock_acquire+0x138/0x7d0 [ 309.684008][T11137] __kmalloc_node+0x3d/0x70 05:08:08 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) [ 309.688524][T11137] kvmalloc_node+0x68/0x100 [ 309.693060][T11137] iov_iter_get_pages_alloc+0x87f/0x15a0 [ 309.698712][T11137] ? aa_file_perm+0x46a/0x1180 [ 309.703499][T11137] ? find_held_lock+0x35/0x120 [ 309.708292][T11137] ? iov_iter_revert+0xaa0/0xaa0 [ 309.713256][T11137] ? lock_downgrade+0xc40/0xc40 [ 309.713289][T11137] ? kasan_check_read+0x11/0x20 [ 309.713306][T11137] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 309.713329][T11137] ? rcu_read_unlock_special+0x380/0x380 [ 309.734646][T11137] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 309.740379][T11137] ? iov_iter_pipe+0xba/0x2f0 [ 309.745087][T11137] default_file_splice_read+0x1b1/0xac0 [ 309.750658][T11137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 309.756911][T11137] ? aa_path_link+0x5d0/0x5d0 [ 309.761600][T11137] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 309.767599][T11137] ? iter_file_splice_write+0xfc0/0xfc0 [ 309.773168][T11137] ? add_lock_to_list.isra.0+0x450/0x450 [ 309.778815][T11137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 309.785063][T11137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 309.791312][T11137] ? check_preemption_disabled+0x48/0x290 [ 309.797049][T11137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 309.803313][T11137] ? fsnotify+0x50c/0xef0 [ 309.807675][T11137] ? debug_mutex_init+0x2d/0x60 [ 309.812550][T11137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 309.818811][T11137] ? __fsnotify_parent+0xe2/0x450 [ 309.823841][T11137] ? fsnotify_first_mark+0x350/0x350 [ 309.829143][T11137] ? apparmor_path_rmdir+0x30/0x30 [ 309.834270][T11137] ? alloc_pipe_info+0x286/0x580 [ 309.839228][T11137] ? security_file_permission+0x94/0x320 [ 309.844875][T11137] ? rw_verify_area+0x118/0x360 [ 309.849729][T11137] ? iter_file_splice_write+0xfc0/0xfc0 [ 309.855282][T11137] do_splice_to+0x12a/0x190 [ 309.859810][T11137] splice_direct_to_actor+0x31b/0x9d0 [ 309.865190][T11137] ? generic_pipe_buf_nosteal+0x10/0x10 [ 309.870749][T11137] ? do_splice_to+0x190/0x190 [ 309.875435][T11137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 309.881714][T11137] ? rw_verify_area+0x118/0x360 [ 309.886578][T11137] do_splice_direct+0x2c7/0x420 [ 309.891468][T11137] ? splice_direct_to_actor+0x9d0/0x9d0 [ 309.897029][T11137] ? rcu_read_lock_sched_held+0x110/0x130 [ 309.902758][T11137] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 309.908226][T11137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 309.914484][T11137] ? __sb_start_write+0x1ac/0x360 [ 309.919518][T11137] do_sendfile+0x61a/0xe60 [ 309.923957][T11137] ? do_compat_pwritev64+0x1c0/0x1c0 [ 309.929257][T11137] ? fput+0x128/0x1a0 [ 309.933267][T11137] ? do_syscall_64+0x8c/0x800 [ 309.937956][T11137] ? do_syscall_64+0x8c/0x800 [ 309.942660][T11137] __x64_sys_sendfile64+0x1f8/0x240 [ 309.947875][T11137] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 309.953188][T11137] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 309.958680][T11137] do_syscall_64+0x1a3/0x800 [ 309.963286][T11137] ? syscall_return_slowpath+0x5f0/0x5f0 [ 309.968930][T11137] ? prepare_exit_to_usermode+0x232/0x3b0 [ 309.974681][T11137] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 309.980248][T11137] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 309.986153][T11137] RIP: 0033:0x458089 [ 309.990053][T11137] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 310.009654][T11137] RSP: 002b:00007fabe842ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 310.009670][T11137] RAX: ffffffffffffffda RBX: 00007fabe842ec90 RCX: 0000000000458089 [ 310.009680][T11137] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 310.009690][T11137] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 310.009700][T11137] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fabe842f6d4 [ 310.009709][T11137] R13: 00000000004c4fd7 R14: 00000000004d8b90 R15: 0000000000000005 05:08:09 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:09 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x7, 0x521, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x40) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000140)={0xbf, 0x3, 0x5, 0x7, 0x13, 0x2, 0x9, 0x4, 0x6, 0x1f}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x7, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x400}, @map={0x18, 0x7f9829a75c4a8b4e, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x2e}, @alu={0x7, 0x9f62, 0x3, 0x4, 0xb, 0x50, 0x1}, @generic={0x5, 0x51f, 0x4, 0x101, 0x8}], &(0x7f00000001c0)='GPL\x00', 0x80000000, 0xb1, &(0x7f0000000200)=""/177, 0x41100, 0x1, [], 0x0, 0xb}, 0x48) 05:08:09 executing program 0 (fault-call:2 fault-nth:3): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:09 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) [ 310.274864][T11183] FAULT_INJECTION: forcing a failure. [ 310.274864][T11183] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 310.341432][T11183] CPU: 1 PID: 11183 Comm: syz-executor0 Not tainted 5.0.0-rc4-next-20190130 #22 [ 310.350636][T11183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 310.360694][T11183] Call Trace: [ 310.364007][T11183] dump_stack+0x1db/0x2d0 [ 310.368365][T11183] ? dump_stack_print_info.cold+0x20/0x20 [ 310.374093][T11183] ? kernel_text_address+0x73/0xf0 [ 310.379241][T11183] should_fail.cold+0xa/0x14 [ 310.383843][T11183] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 310.389675][T11183] ? arch_local_save_flags+0x50/0x50 [ 310.394976][T11183] ? lock_release+0xc40/0xc40 [ 310.399681][T11183] should_fail_alloc_page+0x50/0x60 [ 310.404891][T11183] __alloc_pages_nodemask+0x323/0xdc0 [ 310.410269][T11183] ? add_lock_to_list.isra.0+0x450/0x450 [ 310.415921][T11183] ? __alloc_pages_slowpath+0x2c50/0x2c50 [ 310.421671][T11183] ? __kmalloc_node+0x3d/0x70 [ 310.426366][T11183] ? rcu_read_lock_sched_held+0x110/0x130 [ 310.432098][T11183] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 310.438372][T11183] alloc_pages_current+0x107/0x210 [ 310.438400][T11183] push_pipe+0x3fc/0x7a0 [ 310.438431][T11183] iov_iter_get_pages_alloc+0x90f/0x15a0 [ 310.438452][T11183] ? aa_file_perm+0x46a/0x1180 [ 310.447787][T11183] ? find_held_lock+0x35/0x120 [ 310.447814][T11183] ? iov_iter_revert+0xaa0/0xaa0 [ 310.447836][T11183] ? lock_downgrade+0xc40/0xc40 [ 310.447860][T11183] ? kasan_check_read+0x11/0x20 [ 310.477571][T11183] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 310.483565][T11183] ? rcu_read_unlock_special+0x380/0x380 05:08:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) [ 310.489232][T11183] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 310.494957][T11183] ? iov_iter_pipe+0xba/0x2f0 [ 310.499675][T11183] default_file_splice_read+0x1b1/0xac0 [ 310.505232][T11183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 310.511490][T11183] ? aa_path_link+0x5d0/0x5d0 [ 310.516183][T11183] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 310.522171][T11183] ? iter_file_splice_write+0xfc0/0xfc0 [ 310.527723][T11183] ? add_lock_to_list.isra.0+0x450/0x450 [ 310.533364][T11183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 310.539603][T11183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 310.539630][T11183] ? check_preemption_disabled+0x48/0x290 [ 310.539657][T11183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 310.539675][T11183] ? fsnotify+0x50c/0xef0 [ 310.539695][T11183] ? debug_mutex_init+0x2d/0x60 [ 310.567059][T11183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 310.573308][T11183] ? __fsnotify_parent+0xe2/0x450 [ 310.578349][T11183] ? fsnotify_first_mark+0x350/0x350 [ 310.583652][T11183] ? apparmor_path_rmdir+0x30/0x30 05:08:09 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) [ 310.588782][T11183] ? alloc_pipe_info+0x286/0x580 [ 310.593744][T11183] ? security_file_permission+0x94/0x320 [ 310.599386][T11183] ? rw_verify_area+0x118/0x360 [ 310.604239][T11183] ? iter_file_splice_write+0xfc0/0xfc0 [ 310.609807][T11183] do_splice_to+0x12a/0x190 [ 310.614322][T11183] splice_direct_to_actor+0x31b/0x9d0 [ 310.619722][T11183] ? generic_pipe_buf_nosteal+0x10/0x10 [ 310.625280][T11183] ? do_splice_to+0x190/0x190 [ 310.629958][T11183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 310.629981][T11183] ? rw_verify_area+0x118/0x360 05:08:09 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) [ 310.641055][T11183] do_splice_direct+0x2c7/0x420 [ 310.645931][T11183] ? splice_direct_to_actor+0x9d0/0x9d0 [ 310.651495][T11183] ? rcu_read_lock_sched_held+0x110/0x130 [ 310.657263][T11183] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 310.662729][T11183] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 310.668997][T11183] ? __sb_start_write+0x1ac/0x360 [ 310.674036][T11183] do_sendfile+0x61a/0xe60 [ 310.678479][T11183] ? do_compat_pwritev64+0x1c0/0x1c0 [ 310.683775][T11183] ? fput+0x128/0x1a0 [ 310.687761][T11183] ? do_syscall_64+0x8c/0x800 [ 310.692444][T11183] ? do_syscall_64+0x8c/0x800 [ 310.697157][T11183] __x64_sys_sendfile64+0x1f8/0x240 [ 310.702383][T11183] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 310.707676][T11183] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 310.713162][T11183] do_syscall_64+0x1a3/0x800 [ 310.717764][T11183] ? syscall_return_slowpath+0x5f0/0x5f0 [ 310.723404][T11183] ? prepare_exit_to_usermode+0x232/0x3b0 [ 310.729155][T11183] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 310.734718][T11183] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 310.740613][T11183] RIP: 0033:0x458089 [ 310.744521][T11183] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 310.764163][T11183] RSP: 002b:00007fabe842ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 310.772578][T11183] RAX: ffffffffffffffda RBX: 00007fabe842ec90 RCX: 0000000000458089 [ 310.780559][T11183] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 310.788544][T11183] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 310.788560][T11183] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fabe842f6d4 [ 310.804509][T11183] R13: 00000000004c4fd7 R14: 00000000004d8b90 R15: 0000000000000005 05:08:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) 05:08:10 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:10 executing program 1: socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:10 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:10 executing program 0 (fault-call:2 fault-nth:4): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:10 executing program 3: syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x802, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4c80, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000100)) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) socket(0xa, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000080)="0a5cc80700315f85715070") r4 = pkey_alloc(0x0, 0xf7ffffdffffffffc) pkey_free(r4) r5 = dup3(r3, 0xffffffffffffffff, 0x80000) futimesat(r5, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={{0x0, 0x7530}}) flock(r3, 0x5) flock(r5, 0x100000000000005) r6 = gettid() syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0xc0, 0x80) dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)=0x0) timer_settime(r7, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, &(0x7f00000003c0)) tkill(r6, 0x1e) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xf}, r6, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000880)}, 0x0) socketpair(0xf, 0x1, 0x8, &(0x7f0000000740)={0xffffffffffffffff}) futimesat(r8, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x77359400}, {0x77359400}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') [ 311.055264][T11216] FAULT_INJECTION: forcing a failure. [ 311.055264][T11216] name failslab, interval 1, probability 0, space 0, times 0 05:08:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 311.111610][T11216] CPU: 0 PID: 11216 Comm: syz-executor0 Not tainted 5.0.0-rc4-next-20190130 #22 [ 311.120738][T11216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 311.130821][T11216] Call Trace: [ 311.134146][T11216] dump_stack+0x1db/0x2d0 [ 311.138496][T11216] ? dump_stack_print_info.cold+0x20/0x20 [ 311.144245][T11216] should_fail.cold+0xa/0x14 [ 311.148855][T11216] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 311.154683][T11216] ? ___might_sleep+0x1e7/0x310 [ 311.159549][T11216] ? arch_local_save_flags+0x50/0x50 [ 311.164856][T11216] __should_failslab+0x121/0x190 [ 311.169812][T11216] should_failslab+0x9/0x14 [ 311.174332][T11216] kmem_cache_alloc_node_trace+0x270/0x720 [ 311.180153][T11216] __kmalloc_node+0x3d/0x70 [ 311.184682][T11216] kvmalloc_node+0x68/0x100 [ 311.189208][T11216] seq_read+0x832/0x1130 [ 311.193461][T11216] ? usercopy_warn+0x110/0x110 [ 311.198235][T11216] ? fsnotify_first_mark+0x350/0x350 [ 311.203558][T11216] kernfs_fop_read+0x153/0x6a0 [ 311.208338][T11216] ? kernfs_vma_page_mkwrite+0x230/0x230 [ 311.213983][T11216] ? rw_verify_area+0x118/0x360 [ 311.218844][T11216] do_iter_read+0x4a9/0x660 [ 311.223370][T11216] ? dup_iter+0x260/0x260 [ 311.227732][T11216] vfs_readv+0x175/0x1c0 [ 311.231988][T11216] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 311.238090][T11216] ? iov_iter_revert+0xaa0/0xaa0 [ 311.243043][T11216] ? lock_downgrade+0xc40/0xc40 [ 311.247901][T11216] ? kasan_check_read+0x11/0x20 [ 311.252760][T11216] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 311.258748][T11216] ? rcu_read_unlock_special+0x380/0x380 [ 311.264397][T11216] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 311.270123][T11216] ? iov_iter_pipe+0xba/0x2f0 [ 311.274811][T11216] default_file_splice_read+0x50c/0xac0 [ 311.280379][T11216] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 311.286676][T11216] ? iter_file_splice_write+0xfc0/0xfc0 [ 311.292227][T11216] ? add_lock_to_list.isra.0+0x450/0x450 [ 311.297875][T11216] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 311.304120][T11216] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 311.310363][T11216] ? check_preemption_disabled+0x48/0x290 [ 311.316134][T11216] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 311.322395][T11216] ? fsnotify+0x50c/0xef0 [ 311.326742][T11216] ? debug_mutex_init+0x2d/0x60 [ 311.331608][T11216] ? __fsnotify_parent+0xe2/0x450 [ 311.336668][T11216] ? fsnotify_first_mark+0x350/0x350 [ 311.341973][T11216] ? apparmor_path_rmdir+0x30/0x30 [ 311.347097][T11216] ? alloc_pipe_info+0x286/0x580 [ 311.352047][T11216] ? security_file_permission+0x94/0x320 [ 311.357688][T11216] ? rw_verify_area+0x118/0x360 [ 311.362576][T11216] ? iter_file_splice_write+0xfc0/0xfc0 [ 311.368153][T11216] do_splice_to+0x12a/0x190 [ 311.372693][T11216] splice_direct_to_actor+0x31b/0x9d0 [ 311.378075][T11216] ? generic_pipe_buf_nosteal+0x10/0x10 [ 311.383651][T11216] ? do_splice_to+0x190/0x190 [ 311.388335][T11216] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 311.394597][T11216] ? rw_verify_area+0x118/0x360 [ 311.399474][T11216] do_splice_direct+0x2c7/0x420 [ 311.404335][T11216] ? splice_direct_to_actor+0x9d0/0x9d0 05:08:10 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) [ 311.409898][T11216] ? rcu_read_lock_sched_held+0x110/0x130 [ 311.415659][T11216] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 311.421130][T11216] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 311.427377][T11216] ? __sb_start_write+0x1ac/0x360 [ 311.432420][T11216] do_sendfile+0x61a/0xe60 [ 311.436857][T11216] ? do_compat_pwritev64+0x1c0/0x1c0 [ 311.442170][T11216] ? fput+0x128/0x1a0 [ 311.446159][T11216] ? do_syscall_64+0x8c/0x800 [ 311.450844][T11216] ? do_syscall_64+0x8c/0x800 [ 311.455534][T11216] __x64_sys_sendfile64+0x1f8/0x240 [ 311.460738][T11216] ? __ia32_sys_sendfile+0x2a0/0x2a0 [ 311.460772][T11216] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 311.460799][T11216] do_syscall_64+0x1a3/0x800 [ 311.460820][T11216] ? syscall_return_slowpath+0x5f0/0x5f0 [ 311.460841][T11216] ? prepare_exit_to_usermode+0x232/0x3b0 [ 311.481756][T11216] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 311.481784][T11216] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 311.481812][T11216] RIP: 0033:0x458089 05:08:10 executing program 3: r0 = socket$inet6(0xa, 0x3, 0xfb) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x10000, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) socketpair(0x3, 0x5, 0x80, &(0x7f0000000300)) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000340)={@empty}, &(0x7f0000000380)=0x14) fgetxattr(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="73856375726874796e2d002eb3ae160eaae95d41769667ef55fe8d5453ff6665bc2af84a0c213fcab95d93cb04da01007fe270ac1ecdec0e0215bf552f715233c5424e410fbd276dc7c7e6995a6f0dec093b7e552b818a29a1130e407b5c1301f37f60523389f9897aa46ec000ff95a079e6f205706cb3f4196f020053db39addfb251d5c207fde67cc0871a64690f0440b99640f5bd913b3636049251c5c95400528d97e7d968df8b413e1a00000000000000000000000000000050a67d5fbe4879a9c76454b0f6c7ba24f115ef8497c77d471e8b73f794cf345d14295fc1df42977338fa636598c7ea67c9e6156bca0cc07216c556877e5930"], 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(r2, 0x541d) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r3, 0x800000c0045002, &(0x7f0000000580)=0x100040000) [ 311.481828][T11216] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 311.481837][T11216] RSP: 002b:00007fabe842ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 311.481852][T11216] RAX: ffffffffffffffda RBX: 00007fabe842ec90 RCX: 0000000000458089 [ 311.481860][T11216] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 311.481868][T11216] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 311.481877][T11216] R10: 0000000000000001 R11: 0000000000000246 R12: 00007fabe842f6d4 05:08:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:08:10 executing program 0 (fault-call:2 fault-nth:5): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) [ 311.481885][T11216] R13: 00000000004c4fd7 R14: 00000000004d8b90 R15: 0000000000000005 05:08:10 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:10 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) [ 311.640237][T11234] Unknown ioctl 21533 [ 311.704526][T11235] Unknown ioctl 21533 05:08:10 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 05:08:11 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:11 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x480000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000340)={r1, 0x7fff, 0x18}, 0x8) r2 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000000)={0x1, 0x2}) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000080)={0x100000001, 0x2, 0xffffffff}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$KVM_PPC_GET_PVINFO(r4, 0x4080aea1, &(0x7f0000000100)=""/221) setsockopt$inet6_udp_int(r4, 0x11, 0xa, &(0x7f0000000200)=0x8, 0x4) 05:08:11 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:11 executing program 1: socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:11 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:11 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 05:08:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008914, &(0x7f0000000240)="802d6bd58e5da8b356727adc1f023c128398704b0b17773eb1ce6aeb95c132ed8a2e624f9b4034b11e1c806f1b682571acb83ac63f147f8faebc0d2bdffef718192fe07482027df3336c5c66ad0615db55f615e4400564e71a423575870d83a4253ab54598766ef2e475c56f8fdd427703b6541020c7e27c1d139de81c28ab27bdfca431df888ee9805d926b8a316d608dd686c0b2fcd38a9110772a341d91ace684065690fbfff06eb3557741f9dfa6523e027f60636dc7ebdd4fbbf70f129cdf717fbe8ef0de62855dcf9a5abb22bb3e11280afafe3100000000000000006b0824cce902d3e8b726ce6d2a380387b1abfa658ad7db437930860e8b098df585d7185fe3621fff8e9eed6f0b0a477dd2e058b4ce9a9ae2178f584cc9aade3bdbb4ef82130dd7f71178d9") syz_emit_ethernet(0x300b00, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60b4090005ca3c0000000000000000000000ffffe0000002ff020000000000000000000009040060b680fa0000000000000000000000000000ffffffffffff00000000000000000000ffffac14ffbb75b8fabbc4b9441cd5dfeda212d9d28465185527e9a64837670a7133a6879f6e8cbfdf2cdc6b4e1ea2e1581a32eaeabc89a6"], 0x0) 05:08:11 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2) 05:08:11 executing program 4: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:11 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 05:08:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:11 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:11 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x3) 05:08:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:11 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x2, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYPTR, @ANYRES64, @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES64, @ANYPTR64, @ANYPTR, @ANYRESHEX], @ANYRESHEX]], &(0x7f0000000340)='syzkaller\x00', 0x7e, 0xfffffffffffffda5, 0x0, 0xfffffffff7fffffc}, 0x182) 05:08:11 executing program 1: socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:11 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[]}}, 0x0) 05:08:11 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:11 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x8) 05:08:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x3fffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000700), 0x31f, 0x0) 05:08:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[]}}, 0x0) 05:08:12 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) sigaltstack(&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000700)) sendmsg$unix(r0, &(0x7f0000000000)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000005c0)=[{&(0x7f0000000180)="6d30e26ecb030e29b6f0a2bede4d603effd4ec8f71f81e6bc907fa622eafbac29ab78fa5a69bd28c3f27afeaa2d623f706d4f18c5253848ba3a7047d68004c2e0017856e0f6acfdd158b0ff3ae2b176d97639275fdda5e7e0cf9f3128ac9239fa39e77338d5b07f7cf5efdf2164a8a6c94d8cffb364ae2c49a9e2338f6785861734322d63eb1ab37f64c24", 0x8b}, {&(0x7f0000000240)="fae2fba0838c89ee071b0b0183de2d7f90ff354097074d3f7bf149fa26452dece8cd7f68da49c378605ba70f834a40726213d919cbe0b793a2f7b36603e21c94a2f9bae06a6353fb5c821ab02fa8994e3fe722b4f08f6005227c2336bdfd65c9af8bf740f9ccbee5e745b775e5329b9ec843b2de46b7d0984cbe6e4d42ef1c1d3fea1b69eeef695622572523ef92", 0x8e}, {&(0x7f0000000300)="d880f8b392e2b0fb9dcc2d75c24d0bff76baa9ca2c84171a911b30061170ffa6bd51c2f7accb647b8f85a1d8339fbfc6f471f156c99d0c455431b5c77bfcd2f8006f6b4c4a9bcb4889b71081a5bd852fad767fe1f064146a93005c5483ca2fa96eceb3d75d9924baeecfe21bf5184e2c26fc0e263a6596fd74e2d58700a066110df0d237ad05632f79a116ee4017577fe950e84cab66305a9d4688bbfea0df90003c", 0xa2}, {&(0x7f00000003c0)="04e24c86a86a81633357da8ebe70a6ad2102f42deab153637ab0f30148954c3be9ffebf4e08832f6fed2446cff9a5473fe276e1eaa504a7a05bec615e74dd005d0b3def0b326606280ca37dcaaab7b982453c3a53eac449cdbd03ea9e58cd775867ce1f64456b9877d04938ee5933ca51776b709b0a1d542cca62bb8e19ce752815e445f09ed3dba53e4ff89317f027f815f9e8c40c7d7716c334a3425536022ccab35fb44d474a5c85c11f8d55cfabe43ba361190b172af557848c9650624888c36a1a9bab047f659ee26b042bf4029b01daf5d95d45f83f6647d2d3e827c35a435741200f1c8362cb8d4a971824734", 0xf0}, {&(0x7f00000004c0)="3c739428790a3bf72388c71cda076d2829fb437bd1482a4b24d90c5f073ae7a7e624cca377db8bb84ed2e047e45ecc3aea7a0f9ccaf27592efa1cb22d62af01af6f5636660758ed17aad96a1a2b37918b818d1957866ee8c467ec197947d300e85ff3771a1d4e3dd10f6768c322bc74b760c428e61317dc9f88a50ef2a70e2fefca673fe52d5bdebb543d6229daa3af2db406e9f3b0b7c3222f9db69a63768a4fcd4ef20d8581b27b1677836d317cd1e0cd982b7f38eab1d669d1442c978ee035a1f3467a2366b3491f188eedd6e3e58023f0673bfba55ee02732f32a99fa6c8bc", 0xe1}], 0x5, 0x0, 0x0, 0x20004000}, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9204, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 05:08:12 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x10) 05:08:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[]}}, 0x0) 05:08:12 executing program 1: syz_open_dev$video4linux(0x0, 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:12 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x802, 0x0) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/104, 0x68, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x208000, 0x0) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x4) setns(0xffffffffffffffff, 0x8000000) inotify_rm_watch(r2, r3) tee(r0, r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x39e45bf5186c4aa9) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00'}) r4 = semget(0xffffffffffffffff, 0x0, 0x0) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000180)=[0x5]) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'team0\x00\x00\xff\xff\xff\xc0\x00\x03\x00\x00\xff', 0x4bfd}) 05:08:12 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:12 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xf000) 05:08:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x14}}, 0x0) 05:08:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) 05:08:12 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 05:08:12 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) 05:08:12 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) 05:08:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) 05:08:13 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:13 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x80000002) 05:08:13 executing program 1: syz_open_dev$video4linux(0x0, 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) [ 314.799384][T11388] device team0 entered promiscuous mode [ 314.811462][T11388] device team_slave_0 entered promiscuous mode [ 314.818049][T11388] device team_slave_1 entered promiscuous mode [ 314.832067][T11388] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.841988][T11419] device team0 left promiscuous mode [ 314.847455][T11419] device team_slave_0 left promiscuous mode [ 314.864079][T11419] device team_slave_1 left promiscuous mode 05:08:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7"], 0x1}}, 0x0) 05:08:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) 05:08:14 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xfffff000) 05:08:14 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:14 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xc40, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r0, 0x5380) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100), 0x5, 0x7, 0x3}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000180)={0x100000, 0x14000}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001640)={0x0, 0x0}, &(0x7f0000001680)=0xc) lstat(&(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ntfs(&(0x7f00000001c0)='ntfs\x00', &(0x7f0000000200)='./file0\x00', 0xb7, 0x6, &(0x7f0000001580)=[{&(0x7f0000000240)="a4f8af719c819c23ae351ff5352760a60811257f118ed78bd9295bd6df84d869fc251a29ea50974920c419589d2b8be8a5fad2911970cae13959155858223551a1a290f7d25de3105b26db735db81e1f93c3cc5503f37589c84559e547b0d8bbe4a6caf91a242d2d0653264708a414484066e60ed09e5a81b308e405d1aa177b159bf589ddf775b8ed6b2bb8ecfcd6df73328ef17f417eb617c576", 0x9b, 0x4}, {&(0x7f0000000300)="1a1d8e9f0f7c109d36e27d49bfa5905f46024e74c7f144b7901bbcd9cd46203427", 0x21, 0x1f}, {&(0x7f0000000340)="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", 0x1000, 0x9}, {&(0x7f0000001340)="c8635d7b1dcbbe9cf4bd3596458b40183574342bb2c0086b83c6a8efa3f09f86784e009964370cacc746848ce68835a0aec705648f5174e296359d02a6f966c79f58d4be108385ada549abb4e5b1831019c113fcbbca12e2c2fbe784ea5eda966ba4a594822e7d81fa63dc8948eb8dbc9c34489c01ee6f75c9c30dc50a928d043b2cdf111b986d38827940058983a7036646b19bf8d68b9a5b8cddad33d78153d30d02b7ad1f50e47c7967dcc2c1dfb6ff7de5e67254a187219b5dce100a2e50fef9e02d45a04be03a3406", 0xcb}, {&(0x7f0000001440)="f308d38c71c0284d3b787185929692a5d2ff960ff2c96c850b2543b370cb34963cf868e7f41af74ef639684ef444c1bd6e99a3252f79d838eb617277c2f045d076b82b7d16e3c2b45d688ff44fa82f865e5c8c9807d103dfe1b0de555a62d28c43b1d0f7804926064470930e797d10ed5ec8b41c6e7441bbe9b15d2178a54d8011199ef91f75c6958f25a32d63ccd340ee19c51b3f0275c8b1b870b1e7aaa5d3bd031d518ae94d85206ff0cc148ca2d504221fe9e5b1cd367221effecbcfae3d412e7214c0a49b66c787eb0a01069714609a0656182a9ab9605645e8ba0087", 0xdf, 0xff}, {&(0x7f0000001540)="f29f7ef01861dfdbb1", 0x9, 0x5}], 0x2112000, &(0x7f0000001780)={[{@uid={'uid', 0x3d, r2}}, {@gid={'gid', 0x3d, r3}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}], [{@audit='audit'}, {@pcr={'pcr', 0x3d, 0x11}}]}) getsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f0000001800), &(0x7f0000001840)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000001880)) recvmmsg(r4, &(0x7f00000019c0)=[{{&(0x7f00000018c0)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001940)=""/37, 0x25}], 0x1}, 0x8}], 0x1, 0x2142, &(0x7f0000001a00)={0x77359400}) syz_mount_image$nfs4(&(0x7f0000001a40)='nfs4\x00', &(0x7f0000001a80)='./file0\x00', 0x4, 0x2, &(0x7f0000001b80)=[{&(0x7f0000001ac0)="a784112470462387a10a9fc361ae1e596cd07515adfff709ed4008abfb", 0x1d, 0xa600000000}, {&(0x7f0000001b00)="9841086ba0dace86c2c91eb755a810385ff9a66d223a29fd522fd11106f7256dc254a739947393cc7ce66b38191a56c56b2783fb51b1f7c166ee471aac396f1a1ac7ab101c65", 0x46, 0x4c}], 0x1000, &(0x7f0000001bc0)='audit') setxattr$security_smack_entry(&(0x7f0000001c00)='./file1\x00', &(0x7f0000001c40)='security.SMACK64EXEC\x00', &(0x7f0000001c80)='mft_zone_multiplier', 0x13, 0x1) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000001cc0)={{0xa9e6, 0x1}, 0x1, 0x81, 0x1, {0x2, 0x2}, 0x6, 0xfffffffffffffffb}) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000001d40)=0x10000) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000001d80)=0x5) munlockall() getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001dc0)=@assoc_value={0x0}, &(0x7f0000001e00)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001e40)={r5, 0x1, 0x0, 0x9}, &(0x7f0000001e80)=0x10) syz_mount_image$ntfs(&(0x7f0000001ec0)='ntfs\x00', &(0x7f0000001f00)='./file0\x00', 0xfffffffffffffffa, 0x4, &(0x7f0000002080)=[{&(0x7f0000001f40)="27acfa4159c89064bbca008c761fa065f839e19f8aa2aace96ab03730aec3c573e1abb7223597441a51570a27dafb270eeb0e1070d37cf1c963a92fb13eb399d9a4bd06c87fb7d6dbdd99c3bee5bb6c5d637a41baea3d83aaefc9cca24fa6231830eba", 0x63, 0x4}, {&(0x7f0000001fc0)="9f984e8a9b4a96", 0x7, 0x81}, {&(0x7f0000002000)="349d5338ee1315e25cf5944b1d506853ff67191e0cbc89c5ef809bf130de37af16a9e56de3e10f", 0x27, 0x6}, {&(0x7f0000002040), 0x0, 0x2}], 0x800000, &(0x7f0000002100)={[], [{@fsname={'fsname', 0x3d, 'nfs4\x00'}}, {@permit_directio='permit_directio'}, {@uid_lt={'uid<', r2}}, {@subj_type={'subj_type', 0x3d, 'wlan1(GPL'}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@permit_directio='permit_directio'}, {@permit_directio='permit_directio'}]}) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r4, &(0x7f00000021c0)={r0, r4, 0x8}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000002200)={0x0, 0x0, 0x7f}) prctl$PR_GET_SECUREBITS(0x1b) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000002240)=0x4c) io_setup(0xffffffff, &(0x7f0000002280)) getsockname$ax25(r0, &(0x7f00000022c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @remote, @null, @rose, @rose, @rose]}, &(0x7f0000002340)=0x48) creat(&(0x7f0000002380)='./file0\x00', 0x40) [ 315.152552][T11422] device team0 entered promiscuous mode [ 315.158315][T11422] device team_slave_0 entered promiscuous mode [ 315.165390][T11422] device team_slave_1 entered promiscuous mode [ 315.173094][T11422] 8021q: adding VLAN 0 to HW filter on device team0 05:08:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7"], 0x1}}, 0x0) 05:08:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) 05:08:14 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xffff88809038a001) 05:08:14 executing program 1: syz_open_dev$video4linux(0x0, 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:14 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0xfffffc6e, 0xfa00, {0x3, &(0x7f0000000280)={0xffffffffffffffff}, 0x2, 0x20000000000100d}}, 0x20) syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x80000001, 0x4002) r2 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x0, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000054a40353bd82f7e41cab47c5c4"], 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x30, 0xfa00, {{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x25}, 0x5}, {0xa, 0x4e24, 0xf0, @ipv4={[], [], @multicast2}, 0x8}, r1, 0x9866}}, 0x48) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @remote}}}, 0xfffffffffffffe18) 05:08:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7"], 0x1}}, 0x0) 05:08:14 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0xfffffffffffff000) 05:08:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:08:14 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b6773"], 0x1}}, 0x0) 05:08:14 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7752, 0x480081) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000540)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000000c0)={0xfffffffffffffff9, {{0xa, 0x4e21, 0x102000000, @mcast1, 0x4}}}, 0x88) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000180)=0x10) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000080)={0x6, 0x1}) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000580), 0x4) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000200)=@ethernet, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)=""/148, 0x94}, {&(0x7f0000000340)=""/189, 0xbd}], 0x2}, 0x100) r2 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.weight\x00', 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000004c0)='veth0_to_bridge\x00') ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000500)) write$P9_RUNLINKAT(r0, &(0x7f0000000480)={0x7, 0x4d, 0x1}, 0x7) sendfile(r2, r2, 0x0, 0x1) 05:08:14 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:08:15 executing program 3: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b6773"], 0x1}}, 0x0) 05:08:15 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:15 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 05:08:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b6773"], 0x1}}, 0x0) 05:08:15 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:15 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x1) ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000040)}) r3 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="5afb0b0cf55109cd8133b3679fb690480fcfe1a3983cd2437bf682ba1ebf9afef87a5e21775237c46a92be61d2ae28bd025e5703c9c9016247db90e35a976a6296198fafca45299cff4acbcd5b42b5ba868b35893f440a9e7302e3f82b1b6e1157638b16dc475dc8499b2c5012a61ccd83823f59711d13bbd04508d2494e1397e1aff4c10828264f9bacb3ecca31a8e4bbb4821b4cadcb90482b09706e1e9e1912b241b343c32c2c0c7a9fb8f1322cee74f09be907fbf308026cdc3685cb8a66ab53eabf0eaf94d445070c8f58e01498720e4b7fb5a41a76a988cd", 0xdb, 0xfffffffffffffff8) keyctl$setperm(0x5, r3, 0xffffffff) sendfile(r1, r1, 0x0, 0x1) 05:08:15 executing program 3: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:15 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f0000000040)={0x7ff, "6f36e234b4a17422966ae84bbd42667364a6d886b7de338b0bf997202c7c7645", 0x2, 0x1}) 05:08:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30d"], 0x1}}, 0x0) 05:08:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 05:08:15 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30d"], 0x1}}, 0x0) 05:08:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 05:08:15 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:16 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30d"], 0x1}}, 0x0) 05:08:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 05:08:16 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x101000, 0x0) ioctl$TIOCLINUX5(r2, 0x541c, &(0x7f0000000080)={0x5, 0x5, 0x84, 0x8000, 0x1f}) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x400041, 0x0) 05:08:16 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x307042) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x1013, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000180)) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000006, 0x110, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000002c0)={r2}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000080)={r3}) set_mempolicy(0x4000, &(0x7f00000000c0)=0x6, 0x1f) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)=0x1) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, 0x0, 0x3dd) 05:08:16 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4"], 0x1}}, 0x0) 05:08:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[]}}, 0x0) 05:08:16 executing program 3: syz_emit_ethernet(0x49, &(0x7f0000000000)={@local, @remote, [], {@ipx={0x8137, {0xffff, 0x3b, 0x6, 0x1, {@random=0x800, @random="7366f5c66c7a", 0xc1}, {@random=0xeb9, @current, 0xdf9c}, "9e36b002bcd8fa352f43f216ca8eca2c9d93d6d48d2bcf60f35d809556"}}}}, 0x0) 05:08:16 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x41, 0x400000) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000300)='io.m\xb7ax\x83\xbe\\_\x8e\xa9\xbd-\x95\xe1$\xdfn\r\x83r\xbc\xa8L\x1b\xbf.\xec^\xe5\xef\xaas\xdfn\xbaizr_%CR\xfd\xa7oL\x0e\x8ac%o\v2\xe3{u\xf6\xd5h\x91m&\x8c!\xe4O\x936e#\xf4\xde<\x13b0\x1a\xcd\xd8}PfL\x19\xf2.=:\xb1\xa4\xddA\xb0\x1c\xf4\xdd\xb3\xa1\xaffo\xb1\xa7L\xe2R\x8a\xf2\xb1\xbc\x86\'\xe8\x88\xe1vs\xaa\xa3K\xff\xfd%\xd4{\xcc\xf2\x1av\x9e\x13\x8a\xf9\x10\xa2\xf7\x95\x01\x00\xf6\ba\x83\x99\xc1%Dh.\x87\xd7\xeb1\\,6QC\xcd1\xb1u\x98B\xae\x9d\x14\xb3&\xe0\xb5\x01\xe9\xcc\xae\xd0I-\x9f\xc1\xd4\xb2\v\x03GN\xa7c\xe27\xd4\xa8', 0x2, 0x0) fcntl$setlease(r1, 0x400, 0x0) sendfile(r2, r2, 0x0, 0x1) ioctl$DRM_IOCTL_MODESET_CTL(r0, 0x40086408, &(0x7f00000000c0)={0x9, 0x1000}) r3 = getuid() getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000940)) r5 = geteuid() syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x5, 0x8, &(0x7f0000000880)=[{&(0x7f0000000180)="b85c4e847abf6d339535a0cd4ad541cf2637fc99486a0ab6760f750b8f38fc187fdbe91b0ad2c0c87609767abe15285245f977c591429433ee1d4e3ec0796cb4cfa6a43f492dfbf518", 0x49, 0x8}, {&(0x7f0000000200)="5a1165f48fec5715b4323b567d8206cd0724319f544c72ace6fa881e1dcff3bd27a774b31998134e817af272fcb7013eec80a02409831a37d4d3113eaca8fe8fde24c327", 0x44, 0x80000001}, {&(0x7f0000000400)="54ca102c85b5fe41fb709c80328daecd71b66844672259d1483b29a1b675726316a141f1a06e76013d35deeca15ee530e14a45ef1e2d49b1ceefd4e1f336c91e8f475f170a30a16b52ddab77af51abdb94cae69558bf67d943b6c2f9d20cf5ae4791026e65ca8f16397614676cac1a5a4737f7bade8cc438bd2ef97223615fbe04b528a86287fcf069626b0c4daad47c683b18cbda3d63cdea71b21dcadc452194370eb001bf3bf8afcd7f2f15fa20101d67975b7065af2a627682ca56cc34b93a2461a2da481dbd9220a35d93b5fab2dd11af8b34ba13c434ba802f58b7316a398f21a9858c635d8c788108eaf564d2212ec7", 0xf3, 0x7}, {&(0x7f0000000500)="3fa6df05f5b9229ed4f86f92eab4abff5cd480f57023d190de16a4c714c69f6c05f81a1dbb1e699ecc3f5710858aeb1613a7f11dc28b5645df7ca3454bb7b25a2abba0430d4ca093f291d170b73b638a75fbca7b17409239ebaa17085576e61fcfc6ee4d6536d4a46cde2a59c05de2a4395bbbf8505edccf68ed9fc2f7c5687c444519e1455c09e44baae1bf42c62189ddc9bb51002192b7c12cf0b12e5fd3a13713bfed8ecf199150da9a022260c02482c185da7f5ad13ba343235565af218d6193518c719d97671ff4a9f4e06e98950bb76a231709fb094a989f749187c74997b3d39f4533", 0xe6, 0x100000000}, {&(0x7f0000000600)="fd3189a6d27646928bd51b214a1ea6f2c0669f5728b6de3fd6fd6e74d3a0edcf75ff093061e0620266f9e65e6422d60cc0b48e10d773f3299e980248441c60384b520081383b8b1126c573b40b291d9e3a988e996419798c95315f1cc74fced1e92efdcddeefb54a30721754f9fbd248a5d40648f96f6b0aa2667060164a50e682a00153", 0x84, 0x2}, {&(0x7f00000006c0)="01842b09980b45f0d12d5b67ff1ec1095c15c335fb4669e6a3fe1226a74ed36ad72a7010b5f56bd10084708f68f2cfcb5c921c813d7e18e6656ac8229a0026a89a01dc6516821d55ce7a88c7ecd4a9090db26b9f2635f5cd406be7b9d48e21fd816e2c9e9d92082f19c9e21cbf24b1ad1f9b64fae93255e45da71bae6ec7c06cc9d81daf57361afc66ecf40a7ea13cd6da5d43cd7472ef7c997739d345d7316dd423fe0263523f55d6651b1b866408d42e7b21b4f7af1e47440b895005d829ccbd5c08511bb87babb7b2a2751a33d04b001869", 0xd3, 0x3d}, {&(0x7f0000000100)}, {&(0x7f00000007c0)="ceb411900e02c39811531e29e2a93eada6d2a47a55fcb91c40fce9b90b3874dce9bdec7bba1f0fbb8475b87d41e4860e161facb3370d93b9b2acde9a644fa7cd758f25020929b14bb2ba9ae0a5db8f66d49a2bf1364d17c503c9539de6d4b20802a10c440733cba09dc706de51025a5ebe0a50ddd94d1ed8659655c248cb0578d31b6a7b0eaf85c8f09d203803bdc3344e287b5cc4811aea74d38050", 0x9c, 0x20}], 0x8, &(0x7f0000000980)={[{@dots='dots'}, {@fat=@errors_remount='errors=remount-ro'}], [{@euid_eq={'euid', 0x3d, r3}}, {@euid_eq={'euid', 0x3d, r4}}, {@dont_appraise='dont_appraise'}, {@uid_gt={'uid>', r5}}, {@measure='measure'}]}) 05:08:16 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4"], 0x1}}, 0x0) 05:08:16 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[]}}, 0x0) 05:08:17 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:17 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:17 executing program 3: syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x7f, 0x40001) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x800, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x4000, 0x0) write(r0, &(0x7f0000000400)="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", 0x200) r2 = add_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="3ffd5d69eb5d622333684717016dd7e1ea92a95ca4b074982a4846164b4d9d8e383fec686d38c15616487b4c944de0a3c297febea083e5c2521b880274f759424a48dd7d73cbe673ef81d04ca56443d01b625bbbef08a9f3b92d72eb4f242b66d48d26b02193e848a0cbd34c1eb2352f2470f7347dad62cde11f3d84dde2aea62bbd700fbe76c86d7b54a69d24b5ccea7d3dbb1ca44734326e39a78a86f8506dfc133ec2cc6cfe0013c70e1bfc317e442d22291875d9359a2cb80f14c1775951042e7d2f4635f1237b42bc6031b4bddc478838ef0df11bbe7478dd30543dd5843a1210f54f262ab5ea365988998316a42f41a445", 0xf4, 0xfffffffffffffffe) keyctl$invalidate(0x15, r2) sendfile(r0, r1, 0x0, 0x10000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x8001, @remote}}}, 0x84) mmap(&(0x7f00002e5000/0x2000)=nil, 0x2000, 0x4, 0x12, r0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) 05:08:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4"], 0x1}}, 0x0) 05:08:17 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U-', 0x5}, 0x28, 0x3) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000040)=0x7) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1) 05:08:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[]}}, 0x0) 05:08:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) 05:08:17 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x80200, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x4003) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0xffffffffffffffff, 0xacf5, 0x0, 0x3, 0xe, 0xda9, 0x6, 0x2, 0xffff, 0x6, 0x1000, 0x8}) sendfile(r1, r1, 0x0, 0x1) 05:08:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a"], 0x1}}, 0x0) [ 318.372893][ T26] audit: type=1800 audit(1548911297.432:47): pid=11621 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=16880 res=0 [ 318.530155][ T26] audit: type=1804 audit(1548911297.432:48): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir818709962/syzkaller.m6LIuY/138/file0" dev="sda1" ino=16880 res=1 05:08:17 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) 05:08:17 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a"], 0x1}}, 0x0) [ 318.628436][ T26] audit: type=1800 audit(1548911297.472:49): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=16880 res=0 05:08:17 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000002c0)='exY\x11\xd2\x05\x00\x00\x00a\x92\xb3\x8e\xf9&\x8c\xfe\xc8m*\xb0\xef\xcc%\x93\x80*\xba\xb4\f\x0fZsM}5R\xf2\xc5-\xf4K\xfd\x80\xb8_;\xfcr\xd9\b\xc0\xdb\x00\xfc-\xa8EX\xf2\xbef\xe4D\x83\xa3}\x87NB\xc0[2\xbe\x1e\xbb\xad\xc5', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000100)={0x3, 0x2, 0x6, 0x40, 0x1, 0x1000}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400, 0x0) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000040)=0x101) [ 318.799792][ T26] audit: type=1804 audit(1548911297.592:50): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir818709962/syzkaller.m6LIuY/138/file0" dev="sda1" ino=16880 res=1 [ 319.017918][ T26] audit: type=1800 audit(1548911297.612:51): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=16880 res=0 05:08:18 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x0, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:18 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a"], 0x1}}, 0x0) [ 320.657533][ T26] audit: type=1804 audit(1548911299.712:52): pid=11633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir818709962/syzkaller.m6LIuY/138/file0" dev="sda1" ino=16880 res=1 [ 320.689532][ T26] audit: type=1800 audit(1548911299.712:53): pid=11633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=16880 res=0 [ 320.717675][ T26] audit: type=1804 audit(1548911299.762:54): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir818709962/syzkaller.m6LIuY/138/file0" dev="sda1" ino=16880 res=1 05:08:19 executing program 3: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:19 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x1}}, 0x0) 05:08:19 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:19 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40000, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:19 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c"], 0x1}}, 0x0) 05:08:19 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x0, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) [ 320.749304][ T26] audit: type=1800 audit(1548911299.762:55): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor3" name="file0" dev="sda1" ino=16880 res=0 05:08:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c"], 0x1}}, 0x0) 05:08:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f00000000c0)=@tipc, &(0x7f0000000040)=0x80, 0x80800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r2, @ANYBLOB="02032cbd7000fddbdf25030000002400030008000100030000000800010001000000080007004e2100000800040001000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) read(r0, &(0x7f0000000000)=""/56, 0x38) sendfile(r3, r3, 0x0, 0x1) 05:08:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7"], 0x1}}, 0x0) 05:08:20 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:20 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='io.ma|\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x1) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x200, 0x2) 05:08:20 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c"], 0x1}}, 0x0) 05:08:20 executing program 3: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7"], 0x1}}, 0x0) 05:08:20 executing program 5 (fault-call:4 fault-nth:0): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:20 executing program 0: r0 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, r0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1) 05:08:20 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:20 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x0, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) [ 321.752093][T11734] FAULT_INJECTION: forcing a failure. [ 321.752093][T11734] name failslab, interval 1, probability 0, space 0, times 0 [ 321.812144][T11734] CPU: 0 PID: 11734 Comm: syz-executor5 Not tainted 5.0.0-rc4-next-20190130 #22 [ 321.821196][T11734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.831250][T11734] Call Trace: [ 321.834560][T11734] dump_stack+0x1db/0x2d0 [ 321.838906][T11734] ? dump_stack_print_info.cold+0x20/0x20 [ 321.844681][T11734] should_fail.cold+0xa/0x14 [ 321.849286][T11734] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 321.855116][T11734] ? ___might_sleep+0x1e7/0x310 [ 321.859985][T11734] ? arch_local_save_flags+0x50/0x50 [ 321.860005][T11734] ? trace_hardirqs_on+0xbd/0x310 [ 321.860033][T11734] __should_failslab+0x121/0x190 [ 321.860056][T11734] should_failslab+0x9/0x14 [ 321.875271][T11734] kmem_cache_alloc_node+0x265/0x710 [ 321.875288][T11734] ? __local_bh_enable_ip+0x15a/0x270 [ 321.875311][T11734] ? _raw_spin_unlock_bh+0x31/0x40 [ 321.875334][T11734] __alloc_skb+0xf4/0x730 [ 321.875349][T11734] ? __local_bh_enable_ip+0x15a/0x270 [ 321.875367][T11734] ? skb_trim+0x190/0x190 [ 321.909657][T11734] ? netlink_insert+0x103/0x240 [ 321.914527][T11734] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 321.920775][T11734] ? netlink_autobind.isra.0+0x228/0x310 [ 321.926425][T11734] netlink_sendmsg+0xb11/0xf90 [ 321.931200][T11734] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 321.937471][T11734] ? netlink_unicast+0x770/0x770 [ 321.942413][T11734] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 321.947994][T11734] ? apparmor_socket_sendmsg+0x2a/0x30 [ 321.953476][T11734] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 321.959734][T11734] ? security_socket_sendmsg+0x93/0xc0 [ 321.965201][T11734] ? netlink_unicast+0x770/0x770 [ 321.970180][T11734] sock_sendmsg+0xdd/0x130 [ 321.974606][T11734] ___sys_sendmsg+0x7ec/0x910 [ 321.979321][T11734] ? copy_msghdr_from_user+0x570/0x570 [ 321.984804][T11734] ? ksys_dup3+0x660/0x660 [ 321.989247][T11734] ? lock_downgrade+0xc40/0xc40 [ 321.994120][T11734] ? __fget_light+0x2db/0x420 [ 321.998808][T11734] ? fget_raw+0x20/0x20 [ 322.002981][T11734] ? __mutex_unlock_slowpath+0x195/0x870 [ 322.008650][T11734] ? wait_for_completion+0x810/0x810 [ 322.013952][T11734] ? __fdget+0x1b/0x20 [ 322.018032][T11734] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 322.024300][T11734] ? sockfd_lookup_light+0xc2/0x160 [ 322.024324][T11734] __sys_sendmsg+0x112/0x270 [ 322.024344][T11734] ? __ia32_sys_shutdown+0x80/0x80 [ 322.024374][T11734] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 322.034253][T11734] ? trace_hardirqs_off_caller+0x300/0x300 [ 322.034273][T11734] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 322.034294][T11734] __x64_sys_sendmsg+0x78/0xb0 [ 322.051259][T11734] do_syscall_64+0x1a3/0x800 [ 322.051282][T11734] ? syscall_return_slowpath+0x5f0/0x5f0 [ 322.051301][T11734] ? prepare_exit_to_usermode+0x232/0x3b0 [ 322.051325][T11734] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 322.051350][T11734] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 322.061547][T11734] RIP: 0033:0x458089 [ 322.061564][T11734] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 05:08:20 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7"], 0x1}}, 0x0) 05:08:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b6773"], 0x1}}, 0x0) 05:08:21 executing program 3: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:21 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000040)={0x7, 0x1b}) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1) 05:08:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b6773"], 0x1}}, 0x0) [ 322.061573][T11734] RSP: 002b:00007faed518ec78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.061588][T11734] RAX: ffffffffffffffda RBX: 00007faed518ec90 RCX: 0000000000458089 [ 322.061612][T11734] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 322.061621][T11734] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 322.061649][T11734] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faed518f6d4 [ 322.152776][T11734] R13: 00000000004c563f R14: 00000000004d93a0 R15: 0000000000000006 05:08:21 executing program 5 (fault-call:4 fault-nth:1): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:21 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000080)) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000100)) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000140)={0x3, 0x86c4, 0x4, 0x0, 0xf}) openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) 05:08:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b6773"], 0x1}}, 0x0) 05:08:21 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:21 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8000, 0x101100) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f00000000c0)={{0x7, 0x8}, {0x5, 0x10000}, 0x7, 0x4, 0x7fffffff}) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000040)={0x52, 0x7ff, 0x4, {0x8, 0xffff}, {0x6, 0xc11}, @const={0xc, {0x9, 0x8, 0x40}}}) 05:08:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30d"], 0x1}}, 0x0) [ 322.615390][T11784] FAULT_INJECTION: forcing a failure. [ 322.615390][T11784] name failslab, interval 1, probability 0, space 0, times 0 [ 322.691176][T11784] CPU: 1 PID: 11784 Comm: syz-executor5 Not tainted 5.0.0-rc4-next-20190130 #22 [ 322.700230][T11784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.710297][T11784] Call Trace: [ 322.713608][T11784] dump_stack+0x1db/0x2d0 [ 322.717969][T11784] ? dump_stack_print_info.cold+0x20/0x20 [ 322.723704][T11784] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 322.729518][T11784] ? kasan_slab_alloc+0xf/0x20 [ 322.734306][T11784] ? kmem_cache_alloc_node+0x144/0x710 [ 322.739779][T11784] ? __alloc_skb+0xf4/0x730 [ 322.744301][T11784] ? sock_sendmsg+0xdd/0x130 [ 322.748904][T11784] should_fail.cold+0xa/0x14 [ 322.753523][T11784] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 322.759344][T11784] ? ___might_sleep+0x1e7/0x310 [ 322.764207][T11784] ? arch_local_save_flags+0x50/0x50 [ 322.769498][T11784] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 322.775741][T11784] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 322.781999][T11784] __should_failslab+0x121/0x190 [ 322.786947][T11784] should_failslab+0x9/0x14 [ 322.791470][T11784] kmem_cache_alloc_node_trace+0x270/0x720 [ 322.797282][T11784] ? __alloc_skb+0xf4/0x730 [ 322.801891][T11784] __kmalloc_node_track_caller+0x3d/0x70 [ 322.807544][T11784] __kmalloc_reserve.isra.0+0x40/0xe0 [ 322.812922][T11784] __alloc_skb+0x12d/0x730 [ 322.817357][T11784] ? __local_bh_enable_ip+0x15a/0x270 [ 322.822733][T11784] ? skb_trim+0x190/0x190 [ 322.822752][T11784] ? netlink_insert+0x103/0x240 [ 322.822773][T11784] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 05:08:21 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:21 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x6}) 05:08:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30d"], 0x1}}, 0x0) 05:08:21 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) [ 322.822788][T11784] ? netlink_autobind.isra.0+0x228/0x310 [ 322.822810][T11784] netlink_sendmsg+0xb11/0xf90 [ 322.848583][T11784] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 322.854845][T11784] ? netlink_unicast+0x770/0x770 [ 322.859806][T11784] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 322.865363][T11784] ? apparmor_socket_sendmsg+0x2a/0x30 [ 322.870837][T11784] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 322.877116][T11784] ? security_socket_sendmsg+0x93/0xc0 [ 322.882586][T11784] ? netlink_unicast+0x770/0x770 [ 322.887537][T11784] sock_sendmsg+0xdd/0x130 [ 322.891965][T11784] ___sys_sendmsg+0x7ec/0x910 [ 322.896658][T11784] ? copy_msghdr_from_user+0x570/0x570 [ 322.902122][T11784] ? ksys_dup3+0x660/0x660 [ 322.906558][T11784] ? lock_downgrade+0xc40/0xc40 [ 322.911416][T11784] ? __fget_light+0x2db/0x420 [ 322.911436][T11784] ? fget_raw+0x20/0x20 [ 322.911459][T11784] ? __mutex_unlock_slowpath+0x195/0x870 [ 322.911481][T11784] ? wait_for_completion+0x810/0x810 [ 322.911502][T11784] ? __fdget+0x1b/0x20 [ 322.911517][T11784] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 322.911536][T11784] ? sockfd_lookup_light+0xc2/0x160 [ 322.920349][T11784] __sys_sendmsg+0x112/0x270 [ 322.920369][T11784] ? __ia32_sys_shutdown+0x80/0x80 [ 322.920400][T11784] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 322.920421][T11784] ? trace_hardirqs_off_caller+0x300/0x300 [ 322.968333][T11784] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 322.973803][T11784] __x64_sys_sendmsg+0x78/0xb0 [ 322.978577][T11784] do_syscall_64+0x1a3/0x800 [ 322.983215][T11784] ? syscall_return_slowpath+0x5f0/0x5f0 [ 322.988860][T11784] ? prepare_exit_to_usermode+0x232/0x3b0 [ 322.994592][T11784] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 323.000198][T11784] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 323.006125][T11784] RIP: 0033:0x458089 [ 323.010062][T11784] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 323.029675][T11784] RSP: 002b:00007faed516dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:08:22 executing program 0: r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x1, 0x2) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes128, 0x2, "66579540c38bfb96"}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1) [ 323.038253][T11784] RAX: ffffffffffffffda RBX: 00007faed516dc90 RCX: 0000000000458089 [ 323.046232][T11784] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 323.054202][T11784] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 323.062188][T11784] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faed516e6d4 [ 323.070159][T11784] R13: 00000000004c563f R14: 00000000004d93a0 R15: 0000000000000005 05:08:22 executing program 3: syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) getpeername$packet(r0, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001540)={&(0x7f0000000400)=@newpolicy={0x111c, 0x13, 0x100, 0x70bd26, 0x25dfdbfd, {{@in6=@ipv4={[], [], @empty}, @in=@dev={0xac, 0x14, 0x14, 0x17}, 0x4e24, 0xfff, 0x4e22, 0x9, 0x2, 0xa0, 0x20, 0x2f, r3, r4}, {0x0, 0x3, 0x1, 0x10000, 0x1, 0x50000000, 0x20, 0xfffffffffffffff8}, {0xa6, 0x5, 0x74c, 0xfac}, 0xf7, 0x6e6bb7, 0x1, 0x0, 0x3, 0x3}, [@algo_auth_trunc={0x104c, 0x14, {{'crc32c\x00'}, 0x8000, 0x100, "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"}}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2c, 0x1}}, @etimer_thresh={0x8, 0xc, 0xfffffffffffffffa}]}, 0x111c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 05:08:22 executing program 5 (fault-call:4 fault-nth:2): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30d"], 0x1}}, 0x0) 05:08:22 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) 05:08:22 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4"], 0x1}}, 0x0) 05:08:22 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4"], 0x1}}, 0x0) 05:08:22 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:22 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.descendants\x00', 0x2, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x7, 0x80000) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x7, 0x0, "6b45480492e9371460f95bf8f93c51099ef31aec951106d62f8d3b5a6ab8bc4d85f3d1ff9f097eebdc8263f7ba7e660272b8321c57a57f9925ad753c3fe17b8ff083528e86fc3db4e074aa929f364964"}, 0xd8) sendfile(r1, r1, 0x0, 0x7fffffff) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x8000, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000340)={{0x2, 0x7fffffff, @empty}, {0x1, @local}, 0x40, {0x2, 0x4e22, @broadcast}, 'veth0_to_bond\x00'}) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000100)={0x100000001, 0xffffffffffffff25, 0x9, 'queue0\x00', 0x2}) ioctl$IMSETDEVNAME(r4, 0x80184947, &(0x7f0000000080)={0x9, 'syz0\x00'}) [ 323.632505][T11840] FAULT_INJECTION: forcing a failure. [ 323.632505][T11840] name failslab, interval 1, probability 0, space 0, times 0 [ 323.690097][T11840] CPU: 0 PID: 11840 Comm: syz-executor5 Not tainted 5.0.0-rc4-next-20190130 #22 [ 323.699143][T11840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.709205][T11840] Call Trace: [ 323.712550][T11840] dump_stack+0x1db/0x2d0 [ 323.716906][T11840] ? dump_stack_print_info.cold+0x20/0x20 [ 323.722663][T11840] should_fail.cold+0xa/0x14 [ 323.727463][T11840] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 323.733285][T11840] ? perf_trace_lock_acquire+0x138/0x7d0 [ 323.738925][T11840] ? mark_held_locks+0xf0/0xf0 [ 323.743700][T11840] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 323.749167][T11840] ? lockdep_hardirqs_on+0x418/0x5d0 [ 323.754459][T11840] ? retint_kernel+0x2d/0x2d [ 323.759064][T11840] __should_failslab+0x121/0x190 [ 323.764019][T11840] should_failslab+0x9/0x14 [ 323.768549][T11840] kmem_cache_alloc+0x47/0x710 [ 323.773333][T11840] skb_clone+0x1c5/0x510 [ 323.777579][T11840] ? skb_split+0x1210/0x1210 [ 323.782207][T11840] netlink_deliver_tap+0xbc0/0xf40 [ 323.787339][T11840] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.793591][T11840] ? netlink_remove_tap+0x630/0x630 [ 323.798797][T11840] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 323.804797][T11840] ? kasan_check_write+0x14/0x20 [ 323.809760][T11840] netlink_unicast+0x5e2/0x770 [ 323.814533][T11840] ? netlink_attachskb+0x980/0x980 [ 323.819662][T11840] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.825908][T11840] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 323.831648][T11840] netlink_sendmsg+0xa05/0xf90 [ 323.836413][T11840] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 323.842679][T11840] ? netlink_unicast+0x770/0x770 [ 323.847615][T11840] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 323.853189][T11840] ? apparmor_socket_sendmsg+0x2a/0x30 [ 323.858660][T11840] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.864909][T11840] ? security_socket_sendmsg+0x93/0xc0 [ 323.870368][T11840] ? netlink_unicast+0x770/0x770 [ 323.875319][T11840] sock_sendmsg+0xdd/0x130 [ 323.879740][T11840] ___sys_sendmsg+0x7ec/0x910 [ 323.884426][T11840] ? copy_msghdr_from_user+0x570/0x570 [ 323.889886][T11840] ? ksys_dup3+0x660/0x660 [ 323.894321][T11840] ? lock_downgrade+0xc40/0xc40 [ 323.899183][T11840] ? __fget_light+0x2db/0x420 [ 323.903863][T11840] ? fget_raw+0x20/0x20 [ 323.908026][T11840] ? __mutex_unlock_slowpath+0x195/0x870 [ 323.913676][T11840] ? wait_for_completion+0x810/0x810 [ 323.918968][T11840] ? __fdget+0x1b/0x20 [ 323.923037][T11840] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 323.929276][T11840] ? sockfd_lookup_light+0xc2/0x160 [ 323.934485][T11840] __sys_sendmsg+0x112/0x270 [ 323.939120][T11840] ? __ia32_sys_shutdown+0x80/0x80 [ 323.944259][T11840] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 323.950330][T11840] ? trace_hardirqs_off_caller+0x300/0x300 [ 323.956152][T11840] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 323.961615][T11840] __x64_sys_sendmsg+0x78/0xb0 [ 323.966425][T11840] do_syscall_64+0x1a3/0x800 [ 323.971021][T11840] ? syscall_return_slowpath+0x5f0/0x5f0 [ 323.976669][T11840] ? prepare_exit_to_usermode+0x232/0x3b0 [ 323.982406][T11840] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 323.987962][T11840] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 323.993852][T11840] RIP: 0033:0x458089 [ 323.997753][T11840] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 324.017357][T11840] RSP: 002b:00007faed516dc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.025775][T11840] RAX: ffffffffffffffda RBX: 00007faed516dc90 RCX: 0000000000458089 05:08:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4"], 0x1}}, 0x0) [ 324.033746][T11840] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004 [ 324.042178][T11840] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 324.050175][T11840] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faed516e6d4 [ 324.058172][T11840] R13: 00000000004c563f R14: 00000000004d93a0 R15: 0000000000000005 05:08:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80000, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) 05:08:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a"], 0x1}}, 0x0) 05:08:23 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000009c0)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e330897501f9007b6b482550829e022b8753a188748c569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637ce0080b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b11f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3d009d308bd73f47725390000000000000000000000000000000000000000000000195e23", 0xc0, r1) fstatfs(r0, &(0x7f0000000240)=""/167) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r2, r3}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000040)={&(0x7f0000000580)={'streebog256-generic\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}}) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x140, 0x0) ioctl$VIDIOC_ENUMAUDOUT(r4, 0xc0345642, &(0x7f0000000140)={0x3ff, "f9f3edee7e4ffcd0c2021a820adcc971921352694f31139354698d8694a5abce", 0x2, 0x1}) 05:08:23 executing program 5 (fault-call:4 fault-nth:3): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:23 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) syncfs(r1) sendfile(r1, r1, 0x0, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x9e9520aede431716, r1, 0x1a) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21028482}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4) openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) 05:08:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a"], 0x1}}, 0x0) 05:08:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x6, 0x9, [0x7fff, 0x5, 0x0, 0x8, 0x6, 0x8, 0xffff, 0x5, 0x2]}, &(0x7f00000000c0)=0x1a) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000100)=r3, 0x4) sendfile(r1, r1, 0x0, 0xce8f) 05:08:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a"], 0x1}}, 0x0) 05:08:23 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:23 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:23 executing program 3: r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000040)={@ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x14) recvmmsg(r0, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x6a4, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x6, 0x4) shutdown(r0, 0x0) 05:08:23 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x1) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r3, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x801) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:23 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c"], 0x1}}, 0x0) 05:08:23 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c"], 0x1}}, 0x0) 05:08:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:24 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x100, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f00000001c0)=0xffffffffffffff48) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r1, &(0x7f0000000380)='./file0\x00', 0x2, 0x1) write$FUSE_CREATE_OPEN(r1, &(0x7f00000002c0)={0xa0, 0x0, 0x2, {{0x5, 0x1, 0x0, 0x6, 0x5, 0x6, {0x0, 0x373bca85, 0xcfe3, 0xffff, 0x7fff, 0x10000, 0x1, 0x2, 0x6, 0x1, 0xffff, r2, r3, 0xf259, 0x4}}, {0x0, 0x2}}}, 0xa0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0x1ff, 0x4, 0x100000001, 0x0, r0}, 0x21) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, &(0x7f00000001c0), 0x0}, 0x18) 05:08:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:24 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c"], 0x1}}, 0x0) 05:08:24 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) r2 = dup2(r0, r1) ioctl$EXT4_IOC_RESIZE_FS(r1, 0x40086610, &(0x7f0000000200)=0x100) sendmsg$nl_crypto(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000400}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xf8}}, 0x4000) sendfile(r1, r0, 0x0, 0x1) 05:08:24 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="5dbd28cb3f12f40b6ffee452da4c64850000007eebaaff7d44ffff0000000016b8000000000000053866f74c6c26809da517dba0011c88b32781ed47562cd72a581e27fdb4a6fee15a9e87f3a45d208ca661a5f911d7cae11441a7c499c44bed704da933fb7cb69641388726e684169711709eb8309fe4de3189"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) recvfrom$rxrpc(r1, &(0x7f0000000080)=""/164, 0xa4, 0x40000000, &(0x7f0000000140)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, [], 0x1b}, 0x6}}, 0x24) 05:08:24 executing program 4 (fault-call:4 fault-nth:0): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:24 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) [ 325.713589][T11957] FAULT_INJECTION: forcing a failure. [ 325.713589][T11957] name failslab, interval 1, probability 0, space 0, times 0 [ 325.726731][T11957] CPU: 1 PID: 11957 Comm: syz-executor4 Not tainted 5.0.0-rc4-next-20190130 #22 [ 325.735776][T11957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 325.745842][T11957] Call Trace: [ 325.749152][T11957] dump_stack+0x1db/0x2d0 [ 325.753485][T11957] ? dump_stack_print_info.cold+0x20/0x20 [ 325.759218][T11957] should_fail.cold+0xa/0x14 [ 325.763826][T11957] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 325.769649][T11957] ? ___might_sleep+0x1e7/0x310 [ 325.774514][T11957] ? arch_local_save_flags+0x50/0x50 [ 325.779798][T11957] ? trace_hardirqs_on+0xbd/0x310 [ 325.784831][T11957] __should_failslab+0x121/0x190 [ 325.789788][T11957] should_failslab+0x9/0x14 [ 325.794337][T11957] kmem_cache_alloc_node+0x265/0x710 [ 325.799621][T11957] ? __local_bh_enable_ip+0x15a/0x270 [ 325.805026][T11957] ? _raw_spin_unlock_bh+0x31/0x40 [ 325.810140][T11957] __alloc_skb+0xf4/0x730 [ 325.814523][T11957] ? __local_bh_enable_ip+0x15a/0x270 [ 325.819892][T11957] ? skb_trim+0x190/0x190 [ 325.824235][T11957] ? netlink_insert+0x103/0x240 [ 325.829097][T11957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 325.835336][T11957] ? netlink_autobind.isra.0+0x228/0x310 [ 325.840969][T11957] netlink_sendmsg+0xb11/0xf90 [ 325.845735][T11957] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 325.851982][T11957] ? netlink_unicast+0x770/0x770 [ 325.856926][T11957] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 325.862483][T11957] ? apparmor_socket_sendmsg+0x2a/0x30 [ 325.867938][T11957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 325.874182][T11957] ? security_socket_sendmsg+0x93/0xc0 [ 325.879646][T11957] ? netlink_unicast+0x770/0x770 [ 325.884597][T11957] sock_sendmsg+0xdd/0x130 [ 325.889036][T11957] ___sys_sendmsg+0x7ec/0x910 [ 325.893747][T11957] ? copy_msghdr_from_user+0x570/0x570 [ 325.899209][T11957] ? ksys_dup3+0x660/0x660 [ 325.903641][T11957] ? lock_downgrade+0xc40/0xc40 [ 325.908495][T11957] ? __fget_light+0x2db/0x420 [ 325.913172][T11957] ? fget_raw+0x20/0x20 [ 325.917330][T11957] ? __mutex_unlock_slowpath+0x195/0x870 [ 325.922967][T11957] ? wait_for_completion+0x810/0x810 [ 325.928250][T11957] ? __fdget+0x1b/0x20 [ 325.932313][T11957] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 325.938563][T11957] ? sockfd_lookup_light+0xc2/0x160 [ 325.943760][T11957] __sys_sendmsg+0x112/0x270 [ 325.948347][T11957] ? __ia32_sys_shutdown+0x80/0x80 [ 325.953474][T11957] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 325.959554][T11957] ? trace_hardirqs_off_caller+0x300/0x300 [ 325.965360][T11957] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 325.970823][T11957] __x64_sys_sendmsg+0x78/0xb0 [ 325.975589][T11957] do_syscall_64+0x1a3/0x800 [ 325.980200][T11957] ? syscall_return_slowpath+0x5f0/0x5f0 [ 325.985836][T11957] ? prepare_exit_to_usermode+0x232/0x3b0 [ 325.991562][T11957] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 325.997124][T11957] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 326.003094][T11957] RIP: 0033:0x458089 [ 326.007039][T11957] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 326.026645][T11957] RSP: 002b:00007f4cc7cdac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.035053][T11957] RAX: ffffffffffffffda RBX: 00007f4cc7cdac90 RCX: 0000000000458089 [ 326.043019][T11957] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 326.050989][T11957] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 326.058953][T11957] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4cc7cdb6d4 [ 326.066931][T11957] R13: 00000000004c563f R14: 00000000004d93a0 R15: 0000000000000006 05:08:25 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={@null=' \x00', 0x3, 'batadv0\x00'}) sendfile(r1, r1, 0x0, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) arch_prctl$ARCH_GET_CPUID(0x1011) 05:08:25 executing program 3: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:25 executing program 4 (fault-call:4 fault-nth:1): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) [ 326.352704][T11983] FAULT_INJECTION: forcing a failure. [ 326.352704][T11983] name failslab, interval 1, probability 0, space 0, times 0 [ 326.390875][T11983] CPU: 0 PID: 11983 Comm: syz-executor4 Not tainted 5.0.0-rc4-next-20190130 #22 [ 326.399909][T11983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 326.409962][T11983] Call Trace: [ 326.413265][T11983] dump_stack+0x1db/0x2d0 [ 326.417618][T11983] ? dump_stack_print_info.cold+0x20/0x20 [ 326.423394][T11983] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 326.429206][T11983] ? kasan_slab_alloc+0xf/0x20 [ 326.433976][T11983] ? kmem_cache_alloc_node+0x144/0x710 [ 326.433992][T11983] ? __alloc_skb+0xf4/0x730 [ 326.434009][T11983] ? sock_sendmsg+0xdd/0x130 [ 326.434033][T11983] should_fail.cold+0xa/0x14 [ 326.443963][T11983] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 326.443989][T11983] ? ___might_sleep+0x1e7/0x310 [ 326.444006][T11983] ? arch_local_save_flags+0x50/0x50 [ 326.444023][T11983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 326.444042][T11983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 326.475313][T11983] __should_failslab+0x121/0x190 [ 326.486467][T11983] should_failslab+0x9/0x14 [ 326.490983][T11983] kmem_cache_alloc_node_trace+0x270/0x720 [ 326.496800][T11983] ? __alloc_skb+0xf4/0x730 [ 326.501329][T11983] __kmalloc_node_track_caller+0x3d/0x70 [ 326.506967][T11983] __kmalloc_reserve.isra.0+0x40/0xe0 [ 326.512346][T11983] __alloc_skb+0x12d/0x730 [ 326.516781][T11983] ? __local_bh_enable_ip+0x15a/0x270 [ 326.522161][T11983] ? skb_trim+0x190/0x190 [ 326.526523][T11983] ? netlink_insert+0x103/0x240 [ 326.531390][T11983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 326.537652][T11983] ? netlink_autobind.isra.0+0x228/0x310 [ 326.537678][T11983] netlink_sendmsg+0xb11/0xf90 [ 326.537694][T11983] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 326.537718][T11983] ? netlink_unicast+0x770/0x770 [ 326.559284][T11983] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 326.564844][T11983] ? apparmor_socket_sendmsg+0x2a/0x30 [ 326.570313][T11983] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 326.576572][T11983] ? security_socket_sendmsg+0x93/0xc0 [ 326.582046][T11983] ? netlink_unicast+0x770/0x770 [ 326.587017][T11983] sock_sendmsg+0xdd/0x130 [ 326.591450][T11983] ___sys_sendmsg+0x7ec/0x910 [ 326.596169][T11983] ? copy_msghdr_from_user+0x570/0x570 [ 326.601654][T11983] ? ksys_dup3+0x660/0x660 [ 326.606094][T11983] ? lock_downgrade+0xc40/0xc40 [ 326.610962][T11983] ? __fget_light+0x2db/0x420 [ 326.615690][T11983] ? fget_raw+0x20/0x20 [ 326.619865][T11983] ? __mutex_unlock_slowpath+0x195/0x870 [ 326.625523][T11983] ? wait_for_completion+0x810/0x810 [ 326.630814][T11983] ? __fdget+0x1b/0x20 [ 326.634896][T11983] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 326.641142][T11983] ? sockfd_lookup_light+0xc2/0x160 [ 326.641165][T11983] __sys_sendmsg+0x112/0x270 [ 326.641185][T11983] ? __ia32_sys_shutdown+0x80/0x80 [ 326.641215][T11983] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 326.662153][T11983] ? trace_hardirqs_off_caller+0x300/0x300 [ 326.662175][T11983] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 326.662200][T11983] __x64_sys_sendmsg+0x78/0xb0 [ 326.662218][T11983] do_syscall_64+0x1a3/0x800 [ 326.662237][T11983] ? syscall_return_slowpath+0x5f0/0x5f0 [ 326.662258][T11983] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 326.694165][T11983] ? __switch_to_asm+0x34/0x70 [ 326.698961][T11983] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 326.704521][T11983] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 326.710414][T11983] RIP: 0033:0x458089 [ 326.714310][T11983] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 326.733921][T11983] RSP: 002b:00007f4cc7cdac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.742345][T11983] RAX: ffffffffffffffda RBX: 00007f4cc7cdac90 RCX: 0000000000458089 05:08:25 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xe, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:25 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) fcntl$setflags(r0, 0x2, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0xccab6794874ba2fa) [ 326.750323][T11983] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 326.758300][T11983] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 326.766275][T11983] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4cc7cdb6d4 [ 326.774250][T11983] R13: 00000000004c563f R14: 00000000004d93a0 R15: 0000000000000006 05:08:26 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) prctl$PR_SVE_SET_VL(0x32, 0xf1) 05:08:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080)=0x2, 0x4) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 05:08:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:26 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000180)='\x02\xf0\xec\xb9L\xffB\xb4\xbdF\x01\x1d\xef\xffax\x00', 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4000, 0x0) r3 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000000) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000140)={0xba0000, 0x6, 0x401, [], &(0x7f00000000c0)={0x9909cd, 0x8, [], @p_u32=&(0x7f0000000080)=0xffffffffffffff46}}) inotify_rm_watch(r2, r3) sendfile(r1, r1, 0x0, 0x1) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0) 05:08:26 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x1, 0x8, 0x209e20, 0x8000000001}, 0x2c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000080)=0x2, 0x4) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10034, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x820000, 0x0}, 0x2c) 05:08:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xf0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:26 executing program 4 (fault-call:4 fault-nth:2): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) [ 327.294003][T12033] QAT: Invalid ioctl [ 327.307774][T12035] QAT: Invalid ioctl 05:08:26 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) [ 327.405436][T12044] FAULT_INJECTION: forcing a failure. [ 327.405436][T12044] name failslab, interval 1, probability 0, space 0, times 0 [ 327.453607][T12044] CPU: 1 PID: 12044 Comm: syz-executor4 Not tainted 5.0.0-rc4-next-20190130 #22 [ 327.462683][T12044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 327.472742][T12044] Call Trace: [ 327.476060][T12044] dump_stack+0x1db/0x2d0 [ 327.480407][T12044] ? dump_stack_print_info.cold+0x20/0x20 [ 327.486155][T12044] should_fail.cold+0xa/0x14 [ 327.490758][T12044] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 327.496580][T12044] ? perf_trace_lock_acquire+0x138/0x7d0 [ 327.502250][T12044] ? mark_held_locks+0xf0/0xf0 [ 327.507026][T12044] ? perf_trace_lock+0x750/0x750 [ 327.511983][T12044] ? __netlink_lookup+0x5fd/0xb50 [ 327.517018][T12044] __should_failslab+0x121/0x190 [ 327.521969][T12044] should_failslab+0x9/0x14 [ 327.526481][T12044] kmem_cache_alloc+0x47/0x710 [ 327.531272][T12044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 327.537536][T12044] skb_clone+0x1c5/0x510 [ 327.541791][T12044] ? skb_split+0x1210/0x1210 [ 327.546386][T12044] ? rcu_softirq_qs+0x20/0x20 [ 327.551067][T12044] ? rcu_read_unlock_special+0x380/0x380 [ 327.556746][T12044] netlink_deliver_tap+0xbc0/0xf40 [ 327.561864][T12044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 327.568140][T12044] ? netlink_remove_tap+0x630/0x630 [ 327.573379][T12044] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 327.579386][T12044] ? kasan_check_write+0x14/0x20 [ 327.584341][T12044] netlink_unicast+0x5e2/0x770 [ 327.589124][T12044] ? netlink_attachskb+0x980/0x980 [ 327.594250][T12044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 327.600496][T12044] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 327.606248][T12044] netlink_sendmsg+0xa05/0xf90 [ 327.611026][T12044] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 327.617286][T12044] ? netlink_unicast+0x770/0x770 [ 327.622228][T12044] ? aa_sock_msg_perm.isra.0+0xba/0x170 [ 327.627781][T12044] ? apparmor_socket_sendmsg+0x2a/0x30 [ 327.633264][T12044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 327.639513][T12044] ? security_socket_sendmsg+0x93/0xc0 [ 327.644991][T12044] ? netlink_unicast+0x770/0x770 [ 327.649947][T12044] sock_sendmsg+0xdd/0x130 [ 327.654380][T12044] ___sys_sendmsg+0x7ec/0x910 [ 327.659059][T12044] ? copy_msghdr_from_user+0x570/0x570 [ 327.664516][T12044] ? ksys_dup3+0x660/0x660 [ 327.668965][T12044] ? lock_downgrade+0xc40/0xc40 [ 327.673834][T12044] ? __fget_light+0x2db/0x420 [ 327.678542][T12044] ? fget_raw+0x20/0x20 [ 327.682712][T12044] ? __mutex_unlock_slowpath+0x195/0x870 [ 327.688367][T12044] ? wait_for_completion+0x810/0x810 [ 327.693671][T12044] ? __fdget+0x1b/0x20 [ 327.697757][T12044] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 327.703999][T12044] ? sockfd_lookup_light+0xc2/0x160 [ 327.709202][T12044] __sys_sendmsg+0x112/0x270 [ 327.713841][T12044] ? __ia32_sys_shutdown+0x80/0x80 [ 327.718985][T12044] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 327.725058][T12044] ? trace_hardirqs_off_caller+0x300/0x300 [ 327.730867][T12044] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 327.736328][T12044] __x64_sys_sendmsg+0x78/0xb0 [ 327.741093][T12044] do_syscall_64+0x1a3/0x800 [ 327.745691][T12044] ? syscall_return_slowpath+0x5f0/0x5f0 [ 327.751330][T12044] ? prepare_exit_to_usermode+0x232/0x3b0 [ 327.757055][T12044] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 327.762615][T12044] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 327.768511][T12044] RIP: 0033:0x458089 [ 327.772421][T12044] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 327.792025][T12044] RSP: 002b:00007f4cc7cdac78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e 05:08:26 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x1be, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) [ 327.800438][T12044] RAX: ffffffffffffffda RBX: 00007f4cc7cdac90 RCX: 0000000000458089 [ 327.808407][T12044] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000005 [ 327.816376][T12044] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 327.824366][T12044] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4cc7cdb6d4 [ 327.832338][T12044] R13: 00000000004c563f R14: 00000000004d93a0 R15: 0000000000000006 05:08:27 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:27 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x3}) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1) 05:08:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:27 executing program 4 (fault-call:4 fault-nth:3): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:27 executing program 3: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:27 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f00000000c0)='io.max\x00', 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$TIOCCONS(r1, 0x541d) sendfile(r1, r0, 0x0, 0x7fff) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000040)=0x2c3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000100)=""/226, &(0x7f0000000080)=0xe2) 05:08:27 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x6000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:27 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x101ff, 0x0, &(0x7f0000ff9000/0x4000)=nil}) 05:08:27 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:28 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x800) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x9, 0x2, 0x9, 0x31, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x7, 0x1, 0x47, 0x0, 0xfffffffffffffff8}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={[], [], @multicast1}, @in=@remote, 0xa, 0x10, 0x4}, @sadb_x_sec_ctx={0x15, 0x18, 0x8, 0x8, 0x9e, "53da3afcd4f54d064f0188b22a09c4c161f91ba827d19e11ac211cc910b82ac225a0d104b450062f9b41a1127a748b5a5ba6a5ca9d9ff16b4cc3b4f65f19e65b1bfee26f06c5275ed605123a21e9ee90a6589c4594fd946cf7144f23929eda9d9a1896ca71c4f5181cdcc23fca1e307268b348d3eeac433b680e07ba33d18e3c797a95124046987d21239039e19bb47618cd0c91ac9f691499bc80083fab"}, @sadb_x_nat_t_port={0x1, 0x15, 0x200}, @sadb_sa={0x2, 0x1, 0x4d5, 0x2, 0x7, 0x9a, 0x3, 0x80000001}, @sadb_lifetime={0x4, 0x7, 0x0, 0x8000, 0x2}, @sadb_x_sa2={0x2, 0x13, 0x0, 0x0, 0x0, 0x70bd27, 0x3506}, @sadb_spirange={0x2, 0x10, 0x4d5, 0x4d4}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d5}, @sadb_lifetime={0x4, 0x0, 0x7338, 0x4e1, 0xd4fb, 0x2}]}, 0x188}}, 0x4000) 05:08:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xbe01, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:28 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:28 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x7f, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg(r1, &(0x7f0000000040), 0x420f122659c074, 0x40) 05:08:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4202, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0xc) 05:08:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xf0ffff, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:28 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x20000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f00000001c0), 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) 05:08:28 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:28 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x600, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000000c0)={0x0, 0x0, @ioapic}) sendfile(r1, r1, 0x0, 0x1) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000040)={0x9, 0x2, 0x8, 0x8, 0x0, 0x4}) openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x400, 0x0) 05:08:28 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x1000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:28 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:28 executing program 3: ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) connect$l2tp(r2, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x4}}, 0xfffffffffffffec1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000340)=0x105, 0x4) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d8023337b03f32e91ac8245592d71fcf43d4a8a5d03dd332b743c1960801c7c43fc42098f93d50c4e8648b"]) sendto$inet6(r1, &(0x7f0000000000)="eadd01cfe1d3bacf1c6263b7ee85ad314f4c4979b198d7dbb8bb35efe67fa1ddd252e5586ec279e02ca113f1413df19ba449d3280433424115f5033e041fc83fbdc2c5", 0x43, 0x20000010, &(0x7f0000000100)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7fffffff}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) syz_read_part_table(0x700000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000ed793afe00000000020082012600010000006400000000012700fd030c00650000006400000000030d0085043100c90000006400000000043200052020002d010000d30600", 0x5d, 0x1a0}]) 05:08:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x20000, 0x108) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x1, 0x8) mkdirat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x1ff) sendfile(r1, r1, 0x0, 0x1) 05:08:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xa, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x2000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:29 executing program 0: lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f00000001c0)=[0xee01, 0xee01, 0xee00, 0xee01, 0x0]) r3 = getgid() fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setgroups(0x7, &(0x7f00000003c0)=[r0, r1, r2, r3, r4, r5, r6]) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x1) readahead(r7, 0x9, 0x9) 05:08:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xe, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) [ 330.336004][T12200] __loop_clr_fd: partition scan of loop3 failed (rc=-22) 05:08:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x4000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:29 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:29 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgrouPc\xa4\xf4\'\a\xe5\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0xfffffffffffffffd) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) 05:08:29 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:29 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x8000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:29 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:30 executing program 3: ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) connect$l2tp(r2, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x4}}, 0xfffffffffffffec1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000340)=0x105, 0x4) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d8023337b03f32e91ac8245592d71fcf43d4a8a5d03dd332b743c1960801c7c43fc42098f93d50c4e8648b"]) sendto$inet6(r1, &(0x7f0000000000)="eadd01cfe1d3bacf1c6263b7ee85ad314f4c4979b198d7dbb8bb35efe67fa1ddd252e5586ec279e02ca113f1413df19ba449d3280433424115f5033e041fc83fbdc2c5", 0x43, 0x20000010, &(0x7f0000000100)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7fffffff}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) syz_read_part_table(0x700000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000ed793afe00000000020082012600010000006400000000012700fd030c00650000006400000000030d0085043100c90000006400000000043200052020002d010000d30600", 0x5d, 0x1a0}]) 05:08:30 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x3ed) 05:08:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xa000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x60, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) [ 331.054412][ T8180] __loop_clr_fd: partition scan of loop3 failed (rc=-22) 05:08:30 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) readv(r1, &(0x7f0000000380)=[{&(0x7f0000000000)=""/20, 0x14}, {&(0x7f00000000c0)=""/245, 0xf5}, {&(0x7f00000001c0)=""/121, 0x79}, {&(0x7f0000000240)=""/82, 0x52}, {&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f00000002c0)=""/179, 0xb3}], 0x6) 05:08:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xe000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xf0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:30 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:30 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, &(0x7f0000000140)) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:30 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x10000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x1a2, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:30 executing program 3: ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) connect$l2tp(r2, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x4}}, 0xfffffffffffffec1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000340)=0x105, 0x4) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d8023337b03f32e91ac8245592d71fcf43d4a8a5d03dd332b743c1960801c7c43fc42098f93d50c4e8648b"]) sendto$inet6(r1, &(0x7f0000000000)="eadd01cfe1d3bacf1c6263b7ee85ad314f4c4979b198d7dbb8bb35efe67fa1ddd252e5586ec279e02ca113f1413df19ba449d3280433424115f5033e041fc83fbdc2c5", 0x43, 0x20000010, &(0x7f0000000100)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7fffffff}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) syz_read_part_table(0x700000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000ed793afe00000000020082012600010000006400000000012700fd030c00650000006400000000030d0085043100c90000006400000000043200052020002d010000d30600", 0x5d, 0x1a0}]) [ 331.682500][T12283] __loop_clr_fd: partition scan of loop3 failed (rc=-22) 05:08:30 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:30 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000000)='#vmnet1\x00', 0xffffffffffffffff}, 0x30) sched_getaffinity(r2, 0x8, &(0x7f00000000c0)) 05:08:30 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x60000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:31 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f00000001c0)={{0x6, @rand_addr=0x1000, 0x4e22, 0x2, 'rr\x00', 0x1, 0x6, 0x8}, {@empty, 0x4e21, 0x12003, 0x80000001, 0xfffffffffffff5d0, 0x9}}, 0x44) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000002c0)={0xfffffffffffffffb, 0x358c, 0x401}) r3 = accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x10) getsockopt$inet_dccp_buf(r3, 0x21, 0x8f, &(0x7f0000000100)=""/33, &(0x7f0000000140)=0x21) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000240), &(0x7f0000000280)=0x14) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x80, 0x0) ioctl$TIOCCONS(r4, 0x541d) sendfile(r2, r2, 0x0, 0x1) 05:08:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x9effffff, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) [ 332.374423][T12331] __loop_clr_fd: partition scan of loop3 failed (rc=-22) 05:08:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xbe010000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:31 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, &(0x7f0000000140)) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:31 executing program 3: ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000001c0)='/dev/usbmon#\x00') r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ppp\x00', 0x200000, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = socket$l2tp(0x18, 0x1, 0x1) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r0, &(0x7f0000005fc0), 0x8000000000000fc, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f00000002c0), &(0x7f0000000300), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000002c0), 0x0) connect$l2tp(r2, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @broadcast}, 0x4}}, 0xfffffffffffffec1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000340)=0x105, 0x4) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="d8023337b03f32e91ac8245592d71fcf43d4a8a5d03dd332b743c1960801c7c43fc42098f93d50c4e8648b"]) sendto$inet6(r1, &(0x7f0000000000)="eadd01cfe1d3bacf1c6263b7ee85ad314f4c4979b198d7dbb8bb35efe67fa1ddd252e5586ec279e02ca113f1413df19ba449d3280433424115f5033e041fc83fbdc2c5", 0x43, 0x20000010, &(0x7f0000000100)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7fffffff}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000440)={'syz1'}, 0x1200e) syz_read_part_table(0x700000000000000, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000ed793afe00000000020082012600010000006400000000012700fd030c00650000006400000000030d0085043100c90000006400000000043200052020002d010000d30600", 0x5d, 0x1a0}]) 05:08:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x3f00, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:31 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x103040, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x40) 05:08:31 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:31 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xf0ffffff, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:31 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x48000, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000100)={0x0, 0xc4c, 0x5, 0x10001, 0x1ff, 0x1}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={r3, 0x6, 0x0, 0x6, 0x5}, &(0x7f00000001c0)=0x18) 05:08:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x6000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xfffff000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xa201, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x30240, 0x0) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000000c0)=""/183, &(0x7f0000000040)=0xb7) [ 333.076079][T12386] __loop_clr_fd: partition scan of loop3 failed (rc=-22) 05:08:32 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, 0x0, &(0x7f0000000140)) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xf000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendfile(r1, r1, 0x0, 0x1) 05:08:32 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:32 executing program 3: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xf0ffff, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:32 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xffffff9e, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:32 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='.$\xee\x1b\xa5\tw2\xc7.\x00\x00\x007>:\xa1cgroup/sy\xc0\x1f\n\x1b\x80i&\xda%z0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = creat(&(0x7f0000000000)='\x00', 0x100) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={r0, r2, 0x2, 0x2}, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) sendfile(r1, r1, 0x0, 0x1) 05:08:32 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:32 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={r1, 0x8}, 0x8) 05:08:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x1000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xfffffff0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:33 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) r2 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000540)={0x0, 0xffffffffffffffbf}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000005c0)={r3, 0x1f, 0x1}, &(0x7f0000000600)=0x8) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x481, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0xc62b, 0x111000) ioctl$KVM_SET_PIT2(r5, 0x4070aea0, &(0x7f0000000140)={[{0x7, 0x8, 0x7, 0xb7, 0x126, 0x7fffffff, 0x401, 0xd, 0x7f, 0x1, 0x2, 0x3ff, 0x3ff}, {0x0, 0x1f, 0x80000001, 0x20, 0x7f, 0x8, 0x0, 0x7, 0x7, 0x3, 0xa9, 0x72d, 0x1}, {0x7ff, 0x80000001, 0x28, 0x8, 0x5, 0x6, 0x9a, 0x3f, 0x5, 0xcc, 0x0, 0x8, 0x81}], 0x7ff}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0) r7 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) socketpair(0x1, 0x1, 0x80, &(0x7f0000000a40)) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f00000006c0)={[], 0x20, 0x2, 0x34, 0x0, 0xc0000, 0x10000, 0x3000}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0xe8, &(0x7f0000000200)=[@in={0x2, 0x4e23, @rand_addr=0x7}, @in6={0xa, 0x4e21, 0x9, @mcast2, 0x7}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e24, 0x4, @empty, 0x81}, @in6={0xa, 0x4e20, 0x100, @rand_addr="6db4ad89030aa3ff65461ed5830f3e50", 0x400}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e20, 0x7ff, @dev={0xfe, 0x80, [], 0xb}, 0x4}, @in6={0xa, 0x4e22, 0x9, @local, 0x3}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e22, 0x4, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x14}}, 0xe49}]}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000380)={r9, @in6={{0xa, 0x4e20, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1d}}, 0x6}}, [0x7, 0x3, 0xf, 0x50b9, 0x96, 0x4, 0xbb, 0x5, 0x7, 0x800, 0x200, 0x2, 0xfff, 0x2, 0x8000]}, &(0x7f0000000480)=0x100) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) syz_open_dev$media(&(0x7f0000000a80)='/dev/media#\x00', 0x400, 0x2000) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, &(0x7f0000000d00)={"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"}) ioctl$KVM_RUN(r10, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000009c0)={r5, &(0x7f0000000880)="b932ebd5d0cd9cf389da74c8a9f8264873834325bc7c903896d3b4460e4bb47532ad84fed41dbb2018e67d561752505cf4bb5cf3c28cf05ba04e003981eda949808d4cb770046de9e5d429e6b5e72ba64c6125b1d13b2d79cb9b016e24757e9455a0c686c57bde96db54d7b872390be8752ae613ee46a271acf04d817e0ccde6187c99a1", &(0x7f0000000940)=""/126}, 0x18) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4004ae99, &(0x7f0000000100)) dup2(r8, r10) sendfile(r1, r1, 0x0, 0x1) openat$vsock(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/vsock\x00', 0x12000, 0x0) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000640)=[@text64={0x40, &(0x7f00000004c0)="0fc7ae0018000067f0801d05000000fdf20f326766470f383ac0410f01ca0f18c4470f013d0028000047cd0367f4b9800000c00f3235004000000f30", 0x3c}], 0x1, 0x60, &(0x7f0000000680)=[@cstype3={0x5, 0xe}, @cstype3={0x5, 0xc}], 0x2) 05:08:33 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="2fe062aa5c2aaa7242ccf190d6655700001c00000000973db3f5bafc22fd870a7c"], 0x0) r0 = socket$nl_xfrm(0x11, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8953, &(0x7f0000000000)={'\x02\x00\x81\x00\x7f\x00\x1e\x00 \x00\x8c\xa7\xcc\x99\x175'}) 05:08:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x2000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:33 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(0x0) lstat(0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xf0ffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:33 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x4000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:33 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5646, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0x35, 0x0, 0x4000000000401}, {}, {0x6}]}, 0x10) 05:08:33 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x5dbc2e2adc28f032, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000100)=r7) clone(0x8010000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="66b9810000400f322ed30cbad104ec660f38df2b0fe21526660ff85e503ede1b0f20c06635000000800f22c0b800088ec00fae470b", 0x35}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0xffffbffffffffffe, 0x0, 0xfffffffffffffcaf) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x8000, 0x1, 0x0, 0x0, 0x7f, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x400000000, 0x4, 0x0, 0x4, 0x7f, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffe, @perf_config_ext={0x1, 0x3f}, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x9}, 0x0, 0xa, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:33 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x100000000000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x8000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x200000000000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xa000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:34 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/net/tun\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x2400) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0xd2f, 0x1, 0x81, &(0x7f0000ffc000/0x4000)=nil, 0x5}) ioprio_set$uid(0x3, r1, 0xffffffff) 05:08:34 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = request_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='bdevuseruserproc)posix_acl_access*\x84+md5sum\x00', 0xfffffffffffffffe) keyctl$link(0x8, 0x0, r2) 05:08:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xe000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x400000000000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:34 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000000080)="080951b9413ceecfea14b1f839d8586efe6f6a5b69c2a124f356ec1fc2a651a4e98ab80d8ca637da6416eeacc6a5edcbd17b2937485b50f1a01d4ff78f7016ff2212d80b8b32384b1b70b1d0") ioctl(r0, 0x401000008912, &(0x7f0000000140)="0adc1f023c123f3188a070") r2 = socket(0x10, 0x802, 0x0) poll(&(0x7f0000000000)=[{r2, 0x1}], 0x1, 0x80000000) sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000100)={0x0, 0x78, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x100000000}, 0x3) write(r2, &(0x7f0000000240)="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", 0xfc) 05:08:34 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x2) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x101002, 0x0) fsetxattr$security_smack_transmute(r2, &(0x7f0000000100)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000140)='TRUE', 0x4, 0x3) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x5, 0x0, 0x1, 0xffffffffffffff9c}) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x101800) 05:08:34 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:34 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(0x0) lstat(0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x800000000000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:34 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) pwrite64(r1, &(0x7f0000000000)="4f76fbd3cfeee032b020a03ca04cc23ae86ff9a2315b164eeb02353354dba5a66052dd9d777690c56669fb226c58c561ce8fba6e9b87e6d036c407e287417ed0c849d400534ff6328c76703d9d4fe864730cc8e3ffb193", 0x57, 0x0) 05:08:34 executing program 3: mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0, 0x6810, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r3 = openat$zero(0xffffffffffffff9c, 0x0, 0x220200, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x0, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000140)='dctcp\x00', 0x6) r4 = socket$inet6(0xa, 0x3, 0x7) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x2200, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e24, @local}}, 0x2, 0x0, 0x101, 0x1, 0xfffffffffffffc0e}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000000c0)={r6, 0x9, 0x5, 0x4}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000004c0)={0x0, 0x9, 0x399, 0xfffffffffffffbff}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000002640)=@assoc_value, &(0x7f0000002680)=0xf7) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000002d40)=ANY=[@ANYBLOB], 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000003980)={0x0, @in6={{0xa, 0x4e23, 0x1, @loopback}}, [0x8, 0xb9, 0x7fff, 0xab5e, 0x1, 0x8, 0x10001, 0x6, 0x5c3c, 0x81, 0xffff, 0x1, 0x9, 0x9, 0x9]}, &(0x7f0000003a80)=0x100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000006ac0)={0x0, 0xca}, &(0x7f0000006b00)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000580)=ANY=[], 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000006c40)={0x0, 0x4e, "c9552c7cc01d7f1a503806c0d644f5758db26fb7b2c469dd13de619685442ed36c4bc5a0be46d1ece308d2911c59abfc153487945debe62fb37636f62168ba77a95faf6a7810d6fdda9f0db31fe4"}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100)=0x3e0, 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x5) recvmsg(r2, &(0x7f0000000340)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000280)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x3b4, &(0x7f0000000200)=""/20, 0x14}, 0x103) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040)) futex(&(0x7f0000000080), 0x18b, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)={{0x9, 0x100000001}, {0x401, 0xfffffffffffeffff}, 0x7, 0x1, 0x8}) 05:08:34 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x10000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:34 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xa00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:34 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1) 05:08:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x3f000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x60000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x1000000000000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:35 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x1ff) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x9effffff, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:35 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(0x0) lstat(0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r1+30000000}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r2, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xa2010000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x6000000000000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:35 executing program 3: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000640)="240000001a0025f0006bb4f7fdff141c0a0b5aff6e10b500000780cc08001b0052000000", 0x24) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x9, 0x8000) 05:08:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f00000000c0)=""/115, &(0x7f0000000040)=0x73) r2 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1) [ 336.804319][T12632] netlink: 'syz-executor3': attribute type 27 has an invalid length. 05:08:35 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x9effffff00000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) [ 336.846256][T12632] netlink: 'syz-executor3': attribute type 27 has an invalid length. 05:08:35 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xf0ffffff, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x4, 0x101000) ioctl$VIDIOC_G_AUDOUT(r1, 0x80345631, &(0x7f00000002c0)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)={r2}) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) ioctl(r2, 0x162e4fec, &(0x7f0000000980)="0adc1f123c12a41d8881321c083ecfdb2faa12ead8ffc9adb070") r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffffffff, 0x10000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r6 = getegid() sendmmsg$alg(r4, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="f8000000000000001701000002000000e000000046cf06b08d7b4b826ce3cada46ca955667dc27b099fbdd4ae3c189c127a5e7aad902af0e4b4ab2edaec0ececd440d5164a543cc2ab15c477c56f4efbb41f041866ea3920429c94ce096dcfd9c02569083e919ea0cb6ea6bf946e8d529a06772f314644667cc01ee401eeb556ac07f2921dafd24379e7d6e103e225d054af0c079c9211ca4cad321ad1f4f61a429e61aa9621833a6f2233d6531c1e4c0502f74ec251de536b67ef494517a5315b5d6d61f101cba7ae35ab5c5f1cca122d3928fbdf299326c3c15dbe605682c48dbc5e10035c9275489923f9b3ff11c389ff60a5daa467b3661065d61899ef3991d5657c0000000010010000000000001701000002000000f500000081f0ad8921971107202b4cdbd2356b6223e17567d6fe0f13429cc4fe28c8088c66e0577e56ff3102870165fae1cb173b2fd164295484b70f16927d476050d3900eb97fe89950f5e1390a3e4d4971f1a73210a17376cb1869684686c26f392f26f59ab5159e52dbc273ac8eedd6b870813204d6af8d891d18c0ecf14a967c2986c1b8127e4cb6d5bf479b437d132a29a1f166f8edccc91cdd0b7897ca03368a1cb89a88bb88f9e425bc0701e2853b6a41de718c33fa665686a5443dbceef048a6897f9b262b7627bab66c9a77fe295cd748d6f4da9ec5016ca8b20552b56c21ce9721b525504d4591d6ff2bba9ef4691017b5271c9800000000000000180000000000000017010000040000002700000000000000"], 0x220, 0x4000}], 0x1, 0xb5007be4c6638ad2) ioctl$VIDIOC_S_EDID(r1, 0xc0285629, &(0x7f0000000440)={0x0, 0x4, 0xff, [], &(0x7f0000000400)=0x6}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f00000004c0)={r2}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f0000000300)=""/174) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="5c0000007d0100000047000003060000000200000000040000000000100000008101fe7f000081000000000000ee0383a99a90fcfe2f70746d78000a00040026698270746d98000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7], 0x5c) ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f0000000540)=0x80) write$binfmt_misc(r4, &(0x7f0000000800)={'syz0', "74c21f3f38b85ff7ea39baae56ef430706ec133898f90f8bcfecf6193a855c8cd0b77c7890103217a6ef2f1df68aa96370ba7d10cc19cb19336a99c407fd609fcb29b2a6ccb5d4a0b6194315b09acb6f34a6be210fae4f591c7153f85f8a8148b272a4d920bc965c610d3f97e7ec82ee5716da38ec3b18e59c8cb608b14b4ead1458724dc8cd5f0081f848e0dadb0b1a496f748a837a065a3d67353047cbad45fb80"}, 0xa6) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000009c0)={0x0, 0xa5, "2fad56ef79a1253acc6048be0d498eaf8eb1b4f61e4f370ebde7447e68e77ee2fd525cbbbb8c69c9e2d2b9f0a78f5a2a94e45b80f61d391544c224064fa184767211905a4b15993af7f5d2e65e294cf6c1a2f76a86d0b07aa7cefb81f800d03a80900e582f1de768906ec272e4a6eaf9e2a84514ed180128cfbe72555d165c30e6321ed265cf1e0dff42f03e953db5a54d5e528c505220d6836b0292d3d0bbd329a357b656"}, &(0x7f0000000040)=0xad) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000940)={r8, 0x8}, 0x8) ioctl$HDIO_GETGEO(r4, 0x301, &(0x7f0000000500)) r9 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x4, 0x101800) ioctl$RTC_EPOCH_READ(r9, 0x8008700d, &(0x7f0000000480)) ioctl$KDADDIO(r0, 0x80045438, 0x70a000) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f00000008c0)={0x8, "2aaed396c009bbbbf718af638395001993664d67c1cbaf995120a8a01a83ceff", 0x3, 0xfffffffffffffffa, 0x6, 0x20000, 0x8}) 05:08:36 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xbe01000000000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xfffff000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:36 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) lstat(0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:36 executing program 0: r0 = msgget(0x0, 0x40) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/39) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x460c00, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) r3 = openat$cgroup_int(r1, &(0x7f00000000c0)='io9\xb3n\xac\x00\xa0\xe4\xcflo\x91\xafa\xd3\x1f\xf9y\xadXa\x82t\b\xc6j\x92\xe3\v\fN\xd1sg7;#\x1bH\xd3\x0e\a\x1bE\x9fd/+\xd3\r\xda\xb27\x85`8-\x91\x05XW\x03\x8b 5o|sA\xeb\x108\x0e\xb7g\x9f.(Q6\xd3oH4e\xa5\xcf\\?2\xe6A\xbd\x1e\x14\x7f\xff99=\xb0JQ\x9c&\x9c\x86V\xbd', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1) 05:08:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xf0ffffff00000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:36 executing program 3: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184908, &(0x7f0000000080)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x3000005, 0x31, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) r6 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x36c0ef66, 0x0, 0x100000000, 0x9, 0x80}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200), 0x0) getuid() fstat(r4, &(0x7f0000000280)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@loopback, @in=@broadcast}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) 05:08:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:36 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xffffff9e, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) [ 337.561243][T12692] ion_ioctl: ioctl validate failed 05:08:36 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xffffff7f00000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='ho.m\xc8\xfa\xa4\xa7\xf6\x84\xa9', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:36 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) write$FUSE_LK(r2, &(0x7f00000000c0)={0x28, 0x0, 0x5, {{0x0, 0x6, 0x1, r3}}}, 0x28) 05:08:36 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xfffffff0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xfffffffffffff000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:37 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) lstat(0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:37 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xf0ffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:37 executing program 3: sched_setaffinity(0x0, 0xfffffffffffffcbf, &(0x7f00000000c0)=0x8000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) r0 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000000)) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184908, &(0x7f0000000080)) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x3000005, 0x31, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, 0x0, 0x0) r6 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x36c0ef66, 0x0, 0x100000000, 0x9, 0x80}, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x70500000000000, 0x0, 0x0, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000200), 0x0) getuid() fstat(r4, &(0x7f0000000280)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@loopback, @in=@broadcast}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8) 05:08:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x100000000000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x1, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) 05:08:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x200000000000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:37 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:37 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='ib.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:38 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) lstat(0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x10000014c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r3 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r3, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:38 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x400000000000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:38 executing program 0: r0 = syz_open_dev$media(&(0x7f0000000d80)='/dev/media#\x00', 0x800400000008, 0x100000000000040) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000d40), 0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000c40)=@broute={'broute\x00', 0x20, 0x7, 0xb78, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000040), &(0x7f00000000c0)=ANY=[@ANYBLOB="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"]}, 0xbee) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000000)={0x2000}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000d00)) sendfile(r2, r2, 0x0, 0x1) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000cc0)={0x2}) 05:08:38 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fstat(r0, &(0x7f0000000680)) r1 = inotify_init() readv(r1, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/6, 0x10}], 0x286) creat(&(0x7f0000000080)='./file0\x00', 0x0) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x2a) creat(&(0x7f0000000240)='./file0\x00', 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 05:08:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x800000000000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:38 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) sendfile(r1, r0, 0x0, 0x1) 05:08:38 executing program 3: r0 = socket(0x1e, 0x805, 0x0) bind(r0, &(0x7f0000000000)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) connect$llc(r0, &(0x7f00000000c0)={0x1e, 0x302}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x5, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000280)="200b32e46d053cb5e588f5e02ecf") r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)="e701ffa88fd3edbaefe769a29a15fe92c3c6b74b1fdc74e5044b88aa86dd598b2614a7e3f94a78fe1cafd7d9e69aea4b1dbb1e991796726b5658d8fe8991dbff55deb346053753df809f81c7b666fe270b37e1d780512841389887910ecf0bd39a4232934e58001bd21e5d8eff40484ac55fd0bb78d9ee320a2901", 0x7b, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) prctl$PR_SET_DUMPABLE(0x4, 0x1) keyctl$instantiate(0xc, r2, 0x0, 0x0, r3) 05:08:38 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xa00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:39 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:39 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x600881, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x36b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=@srh, 0x8) connect$inet6(r1, &(0x7f00000000c0), 0x1c) sendmmsg(r1, &(0x7f0000000440), 0x400000000000211, 0x810) 05:08:39 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x8) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x4, 0x402000) accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) 05:08:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xe00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:39 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:39 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000280)={0xe845, 0x7, 0x9, 0x7f, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}]}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'batadv0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000300)={r0}) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a302e4ed8ee8a9ca8edab031f17806a8aad02d568a92fd6375b01c3e443ccf64b63e2e0ffb43227279a79792dab818bb4f9f82163619de5aabb5b98c0f974c33adb52132a37323cbd07891c28d0a58ab911eae5ac1d9d6a10b1868bc88a3a6255ed0f7910002ff90d8f52d8fc50e9beb327f487f834397613350226bdc864d589ae136ad02f180bc172ac54bea48111b7edf33669768bccf603338101ff4da7"], 0xa2) sendfile(r2, r2, 0x0, 0x1) 05:08:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x1000000000000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:39 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000000)='cpuset.\x04Oms\x00', 0x2, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x0) 05:08:39 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x3f00000000000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:40 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:40 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa0000200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xc0, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6ad}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe5d}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}]}, @TIPC_NLA_LINK={0x6c, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe2}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0xc881}, 0xd4) sendfile(r1, r1, 0x0, 0x1) 05:08:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:40 executing program 3: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x6000000000000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x9effffff00000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x2, &(0x7f0000000000)=']\x00', 0xffffffffffffffff}, 0x30) getpriority(0x0, r1) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x10000, 0x0) mq_notify(r2, &(0x7f0000000100)={0x0, 0xe, 0x2, @tid=r1}) r3 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1) 05:08:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xa201000000000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x4001, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0x7fff, 0x8008, 0x3, 0xa, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000100)={r3, 0x2, 0x1000, "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"}, 0x1008) 05:08:40 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:40 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:40 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xf0ffffff00000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:40 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:40 executing program 3: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:40 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@md5={0x1, "a7cfd431132f90c5e237903834bdd031"}, 0x11, 0x3) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:41 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x1, 0x0) sendfile(r1, r1, 0x0, 0x1) 05:08:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xffffff7f00000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:41 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:41 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x2}}, 0x10) 05:08:41 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xffffffff00000000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:41 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000001100)='memory.high\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='rdmaax\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) recvfrom$x25(r1, &(0x7f00000000c0)=""/4096, 0x1000, 0x40010102, &(0x7f0000000000)={0x9, @remote={[], 0x0}}, 0x12) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/full\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000011c0)={0x401, 0x8000, 0x64, 0x4, 0x0}, &(0x7f0000001200)=0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000001240)={r3, 0x7, 0xc0, "79f0999fbd95595771cafdd390e464f515fa182d63781ae65a634861aecb4a69705a4fba37f0dae4e95df975658379be79cc987cd63302962e6b7a2e8b72ba62595e2fa108914ae011a9bde49990969868eba4f3cc94ea3aed01d9a275a6e3a8e2edb2f9e83873bde423b02d34c0a85d07370e6d55842845f6fe18c60195f43fb6ccfa57eb3ab5c35d9fcf7f15846b1da9f44352c97c17f57b4026a34bb7e50957ad7b63404ea7f9d65b8d506f0a1005ca8e9799c536a5db07b5f02761ee9537"}, 0xc8) 05:08:41 executing program 1: syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x3fffffffffffff, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket(0x1e, 0x4, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8202, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(0x0, 0x0) write(r2, &(0x7f0000000340), 0x10000014c) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={0x0, 0x80000000, 0x7}, 0xc) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) r4 = add_key$user(&(0x7f0000000400)='user\x00', &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)="2f3164d479b58e5bd9681d1c58a31b12cdb15967547504a85501984168a9c178aa5aa276f758e65a000a934c1f91b87d4d47b7a3da693d025d762878973f963f0f2c5de88239dadfd95fe89f3cd883641ce17211d4f6efa604a109d156bdfb2a87b30f724752cfd429d88990654890860a92bf116aaefe18", 0x78, 0xffffffffffffffff) keyctl$setperm(0x5, r4, 0xffffffff) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0xfffffd34) 05:08:41 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:42 executing program 3: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) 05:08:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0xfffffffffffff000, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:42 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000007140)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000000)) sendfile(r1, r1, 0x0, 0x1) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x16f301, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000240)=0x3) write$P9_RREAD(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0xfb) connect$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) syz_open_dev$mouse(&(0x7f0000000340)='/dev/input/mouse#\x00', 0x4, 0x800) r3 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0x6, 0x80) fsync(r0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000001740)=0x0) perf_event_open(&(0x7f00000016c0)={0x2, 0x70, 0x9, 0x8, 0xfffffffffffffffc, 0x4b1, 0x0, 0x3ff, 0x1, 0x0, 0x3, 0x400, 0x100000000, 0x1, 0x3, 0x9, 0x101, 0xfffffffffffffff7, 0x3, 0xd2f, 0x8, 0x3, 0x8, 0x80, 0x400, 0x5, 0xc3, 0x101, 0x8, 0x9, 0x3f, 0x4, 0x800, 0x80, 0x4, 0xdd, 0x1, 0x3f, 0x0, 0xf9c, 0x1, @perf_config_ext={0xfffffffffffffffe, 0xfb}, 0x40, 0x0, 0x401, 0x5, 0x3, 0x3ff, 0x20}, r4, 0xc, 0xffffffffffffff9c, 0x0) readv(r3, &(0x7f0000001640)=[{&(0x7f0000000380)=""/189, 0xbd}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/247, 0xf7}, {&(0x7f0000001540)=""/106, 0x6a}, {&(0x7f00000015c0)=""/81, 0x51}], 0x5) write$P9_RSTATFS(r2, &(0x7f0000000280)={0x43, 0x9, 0x1, {0x0, 0x7, 0xffffffff, 0xd981, 0x1, 0x7fff, 0x3ff, 0x1f, 0x3}}, 0x43) [ 343.132000][T13023] ================================================================== [ 343.140296][T13023] BUG: KASAN: null-ptr-deref in reclaim_high.constprop.0+0xa6/0x1e0 [ 343.148271][T13023] Read of size 8 at addr 0000000000000138 by task syz-executor0/13023 [ 343.148278][T13023] [ 343.148294][T13023] CPU: 0 PID: 13023 Comm: syz-executor0 Not tainted 5.0.0-rc4-next-20190130 #22 [ 343.148303][T13023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.148309][T13023] Call Trace: [ 343.148330][T13023] dump_stack+0x1db/0x2d0 [ 343.148351][T13023] ? dump_stack_print_info.cold+0x20/0x20 [ 343.191164][T13023] ? reclaim_high.constprop.0+0xa6/0x1e0 [ 343.196821][T13023] ? vprintk_func+0x86/0x189 [ 343.201415][T13023] ? reclaim_high.constprop.0+0xa6/0x1e0 [ 343.207049][T13023] ? reclaim_high.constprop.0+0xa6/0x1e0 [ 343.212717][T13023] kasan_report.cold+0x5/0x40 [ 343.217420][T13023] ? reclaim_high.constprop.0+0xa6/0x1e0 [ 343.217440][T13023] check_memory_region+0x123/0x190 [ 343.217474][T13023] kasan_check_read+0x11/0x20 [ 343.217504][T13023] reclaim_high.constprop.0+0xa6/0x1e0 [ 343.217520][T13023] ? lockdep_hardirqs_on+0x418/0x5d0 [ 343.217539][T13023] ? memcg_oom_wake_function+0x6b0/0x6b0 [ 343.249373][T13023] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 343.254841][T13023] ? syscall_return_slowpath+0x519/0x5f0 [ 343.260477][T13023] ? trace_hardirqs_off_caller+0x300/0x300 [ 343.266285][T13023] ? lockdep_hardirqs_on+0x418/0x5d0 [ 343.271577][T13023] ? retint_kernel+0x2d/0x2d [ 343.276198][T13023] mem_cgroup_handle_over_high+0xc1/0x180 [ 343.281926][T13023] exit_to_usermode_loop+0x299/0x3b0 [ 343.287210][T13023] ? ret_from_fork+0x15/0x50 [ 343.291806][T13023] ? syscall_trace_enter+0x12a0/0x12a0 [ 343.297284][T13023] ? _raw_spin_unlock_irq+0x28/0x90 [ 343.302521][T13023] ? lockdep_hardirqs_on+0x418/0x5d0 [ 343.307822][T13023] syscall_return_slowpath+0x519/0x5f0 [ 343.313299][T13023] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 343.319044][T13023] ? _raw_spin_unlock_irq+0x5e/0x90 [ 343.324265][T13023] ret_from_fork+0x15/0x50 [ 343.328694][T13023] RIP: 0033:0x45665a [ 343.332592][T13023] Code: Bad RIP value. [ 343.336690][T13023] RSP: 002b:00007ffc11551500 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 343.345098][T13023] RAX: 0000000000000000 RBX: 00007ffc11551500 RCX: 000000000045665a [ 343.353081][T13023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 343.361052][T13023] RBP: 00007ffc11551540 R08: 0000000000000001 R09: 000000000244c940 [ 343.369024][T13023] R10: 000000000244cc10 R11: 0000000000000246 R12: 0000000000000001 05:08:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:42 executing program 2: ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000180)="0fae0165260fc79ff17c3e64f20f5f9ab94666b92d0200000f3266b80000aac60f23c00f21f86635030002000f23f826670f01cfb880068ec866b9800000c00f326635004000000f300f229b0f2297", 0x4f}], 0x1, 0x20, 0x0, 0x0) socketpair(0x0, 0x0, 0x100000001, &(0x7f0000000400)) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000080), 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x7, 0x805, 0x2, &(0x7f0000000300)) write$sndseq(0xffffffffffffffff, &(0x7f0000011fd2), 0xffffffee) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text64={0x40, &(0x7f0000000340)="0f18d40f01df48b800000000000000000f23d80f21f835c00000e00f23f80f9d59ecc4a240f230c422493e7fbd66420f38826b26666766400f38807ea30f001f3e470f0132", 0x45}], 0x1, 0x271776af24bda247, &(0x7f0000000440)=[@dstype3={0x7, 0x3}, @flags={0x3, 0x10080}], 0x2) read(0xffffffffffffffff, &(0x7f0000000000)=""/126, 0xfffffeab) [ 343.376997][T13023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.377022][T13023] ================================================================== [ 343.393015][T13023] Disabling lock debugging due to kernel taint 05:08:42 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) 05:08:42 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000029001fff03000000000000000800000016f67d94b6308bc5a0257000fac72baa3998a5a8d202ca45d8c33723c01d65b395d724794fa39dd7cae85a6f912ea7d8c5f9d02313f5c8aee056c1eb5dc7b7276ab22f7b67739f031d241f1dce4edc91dafd93a30de80d7b5cb1ab86e4e32e848a837c38"], 0x1}}, 0x0) [ 343.581957][T13023] Kernel panic - not syncing: panic_on_warn set ... [ 343.588626][T13023] CPU: 0 PID: 13023 Comm: syz-executor0 Tainted: G B 5.0.0-rc4-next-20190130 #22 [ 343.599050][T13023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 343.609102][T13023] Call Trace: [ 343.612402][T13023] dump_stack+0x1db/0x2d0 [ 343.616735][T13023] ? dump_stack_print_info.cold+0x20/0x20 [ 343.622464][T13023] panic+0x2cb/0x65c [ 343.626360][T13023] ? add_taint.cold+0x16/0x16 [ 343.631047][T13023] ? reclaim_high.constprop.0+0xa6/0x1e0 [ 343.636698][T13023] ? preempt_schedule+0x4b/0x60 [ 343.641552][T13023] ? ___preempt_schedule+0x16/0x18 [ 343.646697][T13023] ? trace_hardirqs_on+0xb4/0x310 [ 343.651733][T13023] ? reclaim_high.constprop.0+0xa6/0x1e0 [ 343.657373][T13023] end_report+0x47/0x4f [ 343.661540][T13023] ? reclaim_high.constprop.0+0xa6/0x1e0 [ 343.667173][T13023] kasan_report.cold+0xe/0x40 [ 343.671856][T13023] ? reclaim_high.constprop.0+0xa6/0x1e0 [ 343.677497][T13023] check_memory_region+0x123/0x190 [ 343.682621][T13023] kasan_check_read+0x11/0x20 [ 343.687312][T13023] reclaim_high.constprop.0+0xa6/0x1e0 [ 343.692772][T13023] ? lockdep_hardirqs_on+0x418/0x5d0 [ 343.698101][T13023] ? memcg_oom_wake_function+0x6b0/0x6b0 [ 343.703747][T13023] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 343.709212][T13023] ? syscall_return_slowpath+0x519/0x5f0 [ 343.714850][T13023] ? trace_hardirqs_off_caller+0x300/0x300 [ 343.720674][T13023] ? lockdep_hardirqs_on+0x418/0x5d0 [ 343.725974][T13023] ? retint_kernel+0x2d/0x2d [ 343.730580][T13023] mem_cgroup_handle_over_high+0xc1/0x180 [ 343.736304][T13023] exit_to_usermode_loop+0x299/0x3b0 [ 343.741591][T13023] ? ret_from_fork+0x15/0x50 [ 343.746180][T13023] ? syscall_trace_enter+0x12a0/0x12a0 [ 343.751635][T13023] ? _raw_spin_unlock_irq+0x28/0x90 [ 343.756866][T13023] ? lockdep_hardirqs_on+0x418/0x5d0 [ 343.762177][T13023] syscall_return_slowpath+0x519/0x5f0 [ 343.767687][T13023] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 343.773434][T13023] ? _raw_spin_unlock_irq+0x5e/0x90 [ 343.778635][T13023] ret_from_fork+0x15/0x50 [ 343.783063][T13023] RIP: 0033:0x45665a [ 343.786963][T13023] Code: Bad RIP value. [ 343.791030][T13023] RSP: 002b:00007ffc11551500 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 343.799435][T13023] RAX: 0000000000000000 RBX: 00007ffc11551500 RCX: 000000000045665a [ 343.807404][T13023] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 343.815374][T13023] RBP: 00007ffc11551540 R08: 0000000000000001 R09: 000000000244c940 [ 343.823349][T13023] R10: 000000000244cc10 R11: 0000000000000246 R12: 0000000000000001 [ 343.831335][T13023] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.840421][T13023] Kernel Offset: disabled [ 343.844743][T13023] Rebooting in 86400 seconds..