000240)={0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}]}) 10:45:36 executing program 0 (fault-call:2 fault-nth:2): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1790.079976] FAULT_INJECTION: forcing a failure. [ 1790.079976] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.126566] CPU: 1 PID: 26260 Comm: syz-executor.0 Not tainted 4.14.181-syzkaller #0 [ 1790.135698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1790.145342] Call Trace: [ 1790.147995] dump_stack+0x1b2/0x283 [ 1790.152335] should_fail.cold+0x10a/0x154 [ 1790.156502] should_failslab+0xd6/0x130 [ 1790.160572] __kmalloc+0x2c1/0x400 [ 1790.164123] ? sg_kmalloc+0x26/0x60 [ 1790.167844] sg_kmalloc+0x26/0x60 [ 1790.171509] __sg_alloc_table+0x25c/0x3a0 [ 1790.176253] ? sg_free_table+0x210/0x210 [ 1790.180409] sg_alloc_table+0x36/0x230 [ 1790.184306] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1790.189161] ion_system_heap_allocate+0x365/0x8c0 [ 1790.194021] ? ion_system_contig_heap_create+0x130/0x130 [ 1790.199590] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1790.204447] ion_alloc+0x1e9/0x7c0 [ 1790.208004] ? ion_dma_buf_release+0x40/0x40 [ 1790.212442] ? __might_fault+0x177/0x1b0 [ 1790.216606] ion_ioctl+0xef/0x1f8 [ 1790.220070] ? ion_alloc.cold+0x3d/0x3d [ 1790.224066] ? selinux_file_ioctl+0x3f7/0x560 [ 1790.228570] ? ion_alloc.cold+0x3d/0x3d [ 1790.232553] do_vfs_ioctl+0x75a/0xfe0 [ 1790.236400] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1790.242034] ? ioctl_preallocate+0x1a0/0x1a0 [ 1790.246460] ? security_file_ioctl+0x76/0xb0 [ 1790.250964] ? security_file_ioctl+0x83/0xb0 [ 1790.255382] SyS_ioctl+0x7f/0xb0 [ 1790.258762] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1790.262834] do_syscall_64+0x1d5/0x640 [ 1790.266743] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1790.272121] RIP: 0033:0x45ca29 [ 1790.275425] RSP: 002b:00007f2bfad90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1790.283284] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1790.290735] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1790.298184] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1790.305700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1790.313059] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2bfad916d4 10:45:36 executing program 5: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000240)={0x20a929, 0x1d, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r6, &(0x7f0000000100)="e8", 0x0, 0x20040040, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r6, 0x1) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000010977675ee3c40ccd28296a5d2e5d0dd0d24c66a9866aa4b889b439c04805518b5f5a9dce38ce1eab7cdde8dea7bf16c53044e2d3e412d82b5c01e65878e3b355e3de74788", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f00000000c0)={r8}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000340)={0x0, 0x1000, "ba58ef8cf24cb7092db0b8e5f466218ffd6e43fd390f2a0a38d03d03a331869e2b58261b6b5c9ed84eb47d39bb95c7bc75fd878ffca322a3f822a529405ca16fe3cf8abbc95535dd835825455ac37042653bef3a774dab895baeb788386c793cc052f31af144de786f3494a316912f3a591568c22c747299b9805cef6300d6fbbb03daba24130779d94a7fdf4fad6d6f78d63e3047cb9e27799998f7e4177fe6f7da0be05e4c90c2bb88e3572c998e66ac23af45c4e2a2b77d014a55fb79ec30916e0712fd59fac377f3a9b309a38a5347e260da95390d4e6f21e61eea9b090f9a4710af1f59c4b179535a7f470d1906d8d1b182b7d7b9f87e93ae7d5a6c6f356af2bc3782a7e58ad0501b91cc9121a5719e896fe13d125a1dc76951397a57491e61613cd1ae131c6597a456743ae647e87a183591944fdcd77207594aaf7ef184bb079556689661f0cefd33194f658f88f1840d098e542ce1788594e9470469407aa86aecd5d0f205c5ddcf1c31f0e6013cb665fb2371761cec57f35d92a1fdb3744e535770e2faddad04bd94e2086f421bc79974d2db1b0f2b0649019f8e909293dcc5f763c5210b124134deebb64c710c260375d1c1c682f6dd3aa922aa7a351ac528fb5c045b9e93b6f0d9f65bdb11a7b88532a5fc2e54f99e6f0e352e7f68593b107adf4e85429a2a6fd13418485359192355d4966e69425722b856fdbf486b61cddb18f2733be3f0bbab3a17035ab772e752b02fec49b157627ed9ad0a5760f045848c4e6bfa06e0867faa1dd3dc540055eaa03f919cd7ddecf0114e86d671106e443bf004aaa8ddc9ce2209fdd9e088d53a50b03c5212743f129cd120e7787d765ac19782dd9a5e79fa0ad601d88477e17a16e009c342c88000a2d01c3f285721c19afbbf2b9a251389244f16fa3b044bf77913db1c83d745193651ec3fccd691efa9af5e743570600d72e1f4cb81cd5412a3ec20d0c29a7aa05828779e65261848544a31fb1799f3cbd85d04909dddf29c6ef6bedbfb821af1b0f217deec61dc99391ed578d3d8ed1d7ba5a655a68982db1806c81fda920e86501a10225e39776fe69752f74d9984bc47bda9e2f7b026b07ecf70748639eb35976ba97161ca6f404d74a7dff3656106092df4edb73b867f92dabe8ce125cb2188b9b81bed0420aeaf51b9e4f75724f90917265888f3c745fd346e97582638353e5873f095180b7c1fdb818d6ea441d1344243bf71e75eb36d1cb44a47ec97f35254f5633ac149908d3245a168993cbbe6eab997585de8b61176d33133f46fc20716d4d102d05ab38edb04aa19b6f0947fc5daddc3dae01f44d691d7f9ca5aa712dc226e74ecba2ae396f1e5ad91b7ab913f29b354ca223bb9cb661d520af7866cd61079def134627e68d36be0b817fcfa203432a686d6af75552e017f1dda8dac0c373a326c80e6a03a11db610e70fa3d9d8c1c4961af4930ad1a48d48842a667c1f2c4a81fac82b5d96e032b7713e290737d502ae7fc143d7cc9a07e6373963588954d29c7b565ce171c59b750f6ff39d10c1134105af5451ebbfb3c190f7bf7c95f91ba55cfe0387070528814d1734d41b22b627d6abcac0b2432e5d1221a7e3f99a4afb66ceb02d816ba2acd6b421126314a648face9d01fcf1d7e548a4e096dc12aa7c6a124a615217c0ffdc292cc05efb45ad70aab63ca2e171e59c98d66a0ac525b3935a1b7c6b32c3573c5647e13b4a7e65566d00aed5934ae2e925a7cae7f510b758cbc3779f7014365931cd583d14c7d29e8ae755a84574225d24d4ee65f01093775805fd3c96372e02a4d6ea0d8b808867f24d3c10ad475dbafc922b43bf14261aa039362a831e2c7531b036b5190a19abb1a7973b56a864568c3d4a85169b20781363312f59c796b80ef3bdcdd3cd7aca3cd6c9637f7ebc5d746194af46b4bac80408c97150994c0d65739a0ac5742e0054eb0a8e5f68b744969def7b213f5d2bdb83054eb189846d82b48732d51df3636fec5c165f7dff6eef4fbca411f4e843e5c3b8903c774a34e936530c6491e6f0c9f5815ad7aa3483300ea40f585cc65542986e4579dbb5f2afecfaa5f1d3abaeda2be6b10fa19cd6617b97477ef682fe5f4034f8ec1ceebe979453545d7aff42c9d330bab2af5b2289a32a955d31cd7dc768a7a049e0e32ba521228c423dbe957ba56f1aac32ecc883c29910f4ca4c2b163bac5a6b8662d8741084c6890bc649c63cefa80fa3cd94dc0f114e43081d6fd3a834dde95229d4163e409daf8ef88b6f68b611474b953f82dfb73170fa8589244087e7198055cbf15e3a6663dcdfaf5b1eda7e0e991d7663e192b655476ee63ba271fac106d9e56dadc5b47dcfbf1e6fb34faf5697b0bdd0db3ddc05619949b0416e21a1c48d6f528c508dc7630a879837af78440e1831f455dc5c2809eed504510c967358e75bb80429c6b570337210135ab173c6ede7aa83d694e0ed4a6a5f07ad4263bc7850f783deabedb7e1519b613d36c0d165839f2e60660ed9e5018d2b25488ba27b845f59f225eafaa27824040b99123f7d8bf20f2bf7b1f5d108b0e800a1ee036f3310750de38f5a10a93bb5014fa54e6f88804ef879d73064821d4dcc5fbc360d0f52343c260615a6984739407a421bbf5eb904a430ae430650815c955c58655e4a067cdd42b1f96277c66051252e774b525e2ca1f97a89e77fd891396d9c2b0e5f36aa96bbc06ef3209dc2edd893355d6622a822ec5fae37c281a0e2a966ed4fcfa19ea91199702bc62089a4eda06e1201c0f72ba742723b0e9061b8f001900b7db58e6091c0460a43b00edf5bff3a9d8df9978f4b06129c0ef525520c4af834609c21b6bba2e440aa56bb1dfcc0631b6790b427f090d5fbc71543f169ae0b164ec9f23ad4f7e5caaf071e75fcf2c025ab92f3594a82b14ff51092498564c8321d68fca51ddb5d94ab3497a910537ad9c0bea7bc7cda12487fe970bdfd5c93fcf71cd39345e4c6832e555e087f0f076896b28cd98957d3937e00fed99a6b3547547feb80e67e6ce871f5e077418f353dd20caf9dc20cfe2478a362baccbb814fcf62d2e32af530d3bdacc839391159cfea5e47e8e9b3ddcec6c8c290d72acd1973946335d27b5829a72b37b229f50c2cd29f68c01a0c2f094016a860ce7e062a13500b6d8f741211961d7adfb7992f167f5f4844b5e93f3c35f63209a052d91ffb2bcf5c0d1ac5210bb244c4a8940ba6054bda0dcc1d3c2e00ebb4eccfb15dc27de3f141ef53ab6d940eb4cc4567b64d0a94964e52dee6cadef003a4f955da1bedbfbcca1ecab62360087b53cd5c52afdca14f81960b15c7f3a2d1ea1cdcdbcbd1549d53aa34cb73e3d126b78ecec2179c257d39a21fc9d800498aa694218a9bb7e0b4b2b4840a4bc7721c87fbc9d8b13953abd332dc4f75a96a06925554ee784e470a832d1c2da7603db4a2601b1b09c00e6b5cba6b69c2f10b7927e57f1e59121e8a7def0f5a761600194ce2e2da2bc27848a3e41571a8ab03c0940a9f4346235f7cab72136e96cfb067dd8f35b958783ff204d8195b81ea2756d86be2977e4d19f5f40524ec5fca08d40a9cd5a04f42a35ebbbbab5287b2ac94fe3b95e3cb5793e4eba74c39025e9a90928d2dd35f93750f9884618eaa0e05b7b4dde57334029905381e98e93a8adddf5fa423e35815754f07d02156c528855a779eb580b34c0e67fb247a5bc01eaec0ceba8ff8336c857c8df48030828937d2906599d500e18e50523187ea78ef2ecf77995457362ebb4a0f3565d3ff6c69cba1ecb3fbf61a3608b9be9070eaaa311316e5c03ebf26f603876d4f64ad90d0eba20ef4081216a3a1a14180ee88184f03f826fcd7b51baef813d5b292c88704d9a3a8182a3e9bae092f12410df39e9b7b12234fcd2552d2ed4eb87047e74a326b2499108578cb5b232d0a18ed093eb2509fe9c5a281dc94f2dfb7e2f3b3288ca9ab3569ff23e3a5e9212703c4f9b2fa6ecee347b2b66ac0640ef7c645891906fb5f008347f6bfaed29f0c967314c778e57f4dfcfbe2934addbb214dc52f20cce78fa28d33ee83d4d14c12955262877d5a031b9a6b960f261c340860a86cbbd38b8080184266175dd76be19ffdc4914df418082be6dfa587dca3212852b978e2d3b8cd737034e5db7558c9fb893407d7bd88fe3f63c8a769b7aec4d458649d7c2b2ff3b19c0013b449adbc28b3488eb7987a60d11ba43793ed43c10b68fed192f5a819a1888f95c051aca7d00e6a4a938cc56d80c9639247814c0b51b6a76d952dc06711b81b7c6d661a6ad627a814fed4db3fa41a557726b7ed9863dbee04a7da460f082ec4a06702e1df026909b331c98c9e1f85c19c2c49cd46a8bc6ffd838e795e368de615e76bd612666d153980e48a94c9dbc036b1b3baa868286d4c1e415151e57b38fc894ed2d01dad8f2804d7846552cc8691d2809ce7651d050f2c6b85a8ff65b339f411b380417306f74c7618be5367e5db26f65bcd7039fbda48f2c1fd7b5fe978aacfeb4c0a52ed97583287dcb0db85ba24d3558a20b0b1c9625f4c4e8ef2bfd71f64ec19209467136e4ae5bfebf4f89590424e2decbb3c705157fe0435d1fd2297e61edbab84582d911a9efc60d7b73aefcf87027bdf7ac4163579895986e3999b013fdc8c4c60e870bc1380a5d0df117fe4c359cf83b888f090e3cf47c6310918d7f96e86fbf42d18aff142d6bd3a63987ad8a471dae01e9cd561a4b84e217fa54b6c0e449c5afb6895a1b92b6be0b9032624565a4da747a4a57d9b2a42a72b59debdc39571571f9cae3b17046757ddff68f6c5d3c0c61bc1b00cee5476a02c7b03a790ac6edfff6deb5ecd5bb5d0839df30989c5ca8c0de2ab769bf65a1784bdb602f240850164bfc830cef95de3344665f139112983aa7ed7e50510af5f6a8b70f5eaec83482f23656ad6aa2501d5e3436d5cc18d404aaeeecafdf2421c566cfc23de2bb14c7a74695019fb158784ff3b17372e64fd3af159e8027ca5cd82b04899829bbfd742719f33b8fd222e5d5149c60424f0d9ed03a0afd52ca5e4936b1da0fc0d180270116b01b4daebfdd4e66c9904d785cd8722b0b9a2cb56530ab53522b8b2dc2573ab6242f27e2bd068f0e156bdc4ebf9e029290cc37146d84e1f1d810a7e0252a62c7fe521b58fb9cdd3377721af73860ee9e2ad4345c917bed0e138092edd83f7d55e4e2c741612cc76384a404d1c5c538dd749955b41cbb7ff74156fe6daf40ce27d404077c680c948685e6b2aadd11fb6012a264a325a7c8329460ed6a0518871f33d47c1973131eb18585b07e192648aa90e6a4c6d5ef5e7a6c3becfc8748cb0b79d2e65e82d334cc8c99418178b957d4666cb79d48e3244da87219a0bfc457d793698de025ff26605d2ba335d893991cdddc2bbad094db23d62e6a89c043827f9509bca154b74d5a94b9da7499853c81f7f3796d81e95cb053844892fa36ea1b1bd2a8a729142ca4c479e982da03bb924ebac7961b57b6a30bde30a35c47aac3cb9a29450584832e267508e368b5337103f3ce7f688d2a5cca5fe1d93909ebeeb258400703ca039b985b9e40efe30dd46f3066aa585b817d2468eec9817c4e93f9064f13bfadeee13ca7fad9e2298b260087a831ee1daa7f63be3dc81cd6dcdf1182e9d920049d579ef19cf9cbc13488ee191ce71c3ac3592b904b9d7e1005fe9766a101ce0fcf8f12099794bd66738375393788d7cdae95fcb1a29198c4b5dbe0550295d18d4a83613985"}, &(0x7f0000000200)=0x1008) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000040)={r9, 0x1, 0x5}, &(0x7f0000000080)=0x8) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:45:36 executing program 0 (fault-call:2 fault-nth:3): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1790.603362] x86/PAT: syz-executor.5:26264 map pfn RAM range req write-combining for [mem 0x1abc00000-0x1abdfffff], got write-back [ 1790.672865] FAULT_INJECTION: forcing a failure. [ 1790.672865] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.703319] CPU: 0 PID: 26266 Comm: syz-executor.0 Not tainted 4.14.181-syzkaller #0 [ 1790.707801] x86/PAT: syz-executor.5:26267 map pfn RAM range req write-combining for [mem 0x1ad000000-0x1ad1fffff], got write-back [ 1790.711267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1790.711275] Call Trace: [ 1790.711296] dump_stack+0x1b2/0x283 [ 1790.711320] should_fail.cold+0x10a/0x154 [ 1790.711341] should_failslab+0xd6/0x130 [ 1790.711356] __kmalloc+0x2c1/0x400 [ 1790.711372] ? dma_buf_export+0x20b/0xa20 [ 1790.755456] ? lock_downgrade+0x6e0/0x6e0 [ 1790.759656] dma_buf_export+0x20b/0xa20 [ 1790.763668] ion_alloc+0x57d/0x7c0 [ 1790.767238] ? ion_dma_buf_release+0x40/0x40 [ 1790.771715] ? __might_fault+0x177/0x1b0 [ 1790.775801] ion_ioctl+0xef/0x1f8 [ 1790.779454] ? ion_alloc.cold+0x3d/0x3d [ 1790.783511] ? selinux_file_ioctl+0x3f7/0x560 [ 1790.788023] ? ion_alloc.cold+0x3d/0x3d [ 1790.792021] do_vfs_ioctl+0x75a/0xfe0 [ 1790.795890] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1790.801692] ? ioctl_preallocate+0x1a0/0x1a0 [ 1790.806268] ? security_file_ioctl+0x76/0xb0 [ 1790.810721] ? security_file_ioctl+0x83/0xb0 [ 1790.815166] SyS_ioctl+0x7f/0xb0 [ 1790.818552] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1790.822557] do_syscall_64+0x1d5/0x640 [ 1790.826480] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1790.831863] RIP: 0033:0x45ca29 [ 1790.835097] RSP: 002b:00007f2bfad90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1790.843165] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1790.850454] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1790.858268] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 10:45:37 executing program 5: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000100)) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r6, 0xc02064a4, &(0x7f00000000c0)={0x80000001, 0x3, &(0x7f0000000000)=[0x1f, 0x20, 0x4], &(0x7f0000000040)=[0x200, 0x3, 0x9, 0x800, 0xc22, 0x7, 0xd8ab], &(0x7f0000000080)=[0x9, 0x2, 0x1, 0x200]}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) [ 1790.866341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1790.874513] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2bfad916d4 10:45:37 executing program 0 (fault-call:2 fault-nth:4): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1790.977113] FAULT_INJECTION: forcing a failure. [ 1790.977113] name failslab, interval 1, probability 0, space 0, times 0 [ 1791.018776] CPU: 1 PID: 26276 Comm: syz-executor.0 Not tainted 4.14.181-syzkaller #0 [ 1791.026724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1791.036546] Call Trace: [ 1791.039154] dump_stack+0x1b2/0x283 [ 1791.042917] should_fail.cold+0x10a/0x154 [ 1791.047074] should_failslab+0xd6/0x130 [ 1791.051054] kmem_cache_alloc+0x28e/0x3c0 [ 1791.055466] __d_alloc+0x2a/0x9b0 [ 1791.058942] anon_inode_getfile+0x101/0x2f0 [ 1791.063716] ? reverse_path_check_proc.cold+0x20/0x20 [ 1791.069186] ? __lockdep_init_map+0x100/0x560 [ 1791.073793] ? __lockdep_init_map+0x100/0x560 [ 1791.078494] dma_buf_export+0x4c8/0xa20 [ 1791.082480] ion_alloc+0x57d/0x7c0 [ 1791.086215] ? ion_dma_buf_release+0x40/0x40 [ 1791.090992] ? __might_fault+0x177/0x1b0 [ 1791.095765] ion_ioctl+0xef/0x1f8 [ 1791.099400] ? ion_alloc.cold+0x3d/0x3d [ 1791.103391] ? selinux_file_ioctl+0x3f7/0x560 [ 1791.107895] ? ion_alloc.cold+0x3d/0x3d [ 1791.112122] do_vfs_ioctl+0x75a/0xfe0 [ 1791.115940] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1791.121586] ? ioctl_preallocate+0x1a0/0x1a0 [ 1791.126709] ? security_file_ioctl+0x76/0xb0 [ 1791.131156] ? security_file_ioctl+0x83/0xb0 [ 1791.135577] SyS_ioctl+0x7f/0xb0 [ 1791.138956] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1791.142974] do_syscall_64+0x1d5/0x640 [ 1791.146909] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1791.152732] RIP: 0033:0x45ca29 [ 1791.156143] RSP: 002b:00007f2bfad90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1791.164831] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1791.172110] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1791.179757] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1791.187035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1791.194314] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2bfad916d4 10:45:37 executing program 0 (fault-call:2 fault-nth:5): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:37 executing program 5: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x0, 0x1}) 10:45:37 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) pread64(r2, &(0x7f0000000180)=""/170, 0xaa, 0x1) perf_event_open(&(0x7f0000000280)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x400000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0x3, [@remote, @remote, @empty]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) [ 1791.323826] FAULT_INJECTION: forcing a failure. [ 1791.323826] name failslab, interval 1, probability 0, space 0, times 0 [ 1791.368756] CPU: 1 PID: 26296 Comm: syz-executor.0 Not tainted 4.14.181-syzkaller #0 [ 1791.376787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1791.386233] Call Trace: [ 1791.388839] dump_stack+0x1b2/0x283 [ 1791.392856] should_fail.cold+0x10a/0x154 [ 1791.397019] should_failslab+0xd6/0x130 [ 1791.401009] kmem_cache_alloc+0x28e/0x3c0 [ 1791.405166] get_empty_filp+0x86/0x3e0 [ 1791.409068] alloc_file+0x23/0x440 [ 1791.412625] anon_inode_getfile+0x163/0x2f0 [ 1791.416949] ? reverse_path_check_proc.cold+0x20/0x20 [ 1791.422138] ? __lockdep_init_map+0x100/0x560 [ 1791.426643] dma_buf_export+0x4c8/0xa20 [ 1791.430624] ion_alloc+0x57d/0x7c0 [ 1791.434175] ? ion_dma_buf_release+0x40/0x40 [ 1791.438598] ? __might_fault+0x177/0x1b0 [ 1791.442667] ion_ioctl+0xef/0x1f8 [ 1791.446121] ? ion_alloc.cold+0x3d/0x3d [ 1791.450099] ? selinux_file_ioctl+0x3f7/0x560 [ 1791.454592] ? ion_alloc.cold+0x3d/0x3d [ 1791.458575] do_vfs_ioctl+0x75a/0xfe0 [ 1791.462388] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1791.468078] ? ioctl_preallocate+0x1a0/0x1a0 [ 1791.472511] ? security_file_ioctl+0x76/0xb0 [ 1791.476935] ? security_file_ioctl+0x83/0xb0 [ 1791.481357] SyS_ioctl+0x7f/0xb0 [ 1791.484750] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1791.488738] do_syscall_64+0x1d5/0x640 [ 1791.492671] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1791.497865] RIP: 0033:0x45ca29 [ 1791.502014] RSP: 002b:00007f2bfad90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1791.509824] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 10:45:37 executing program 5: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x4829c0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x4, 0x1, 0x1}) [ 1791.517100] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1791.524375] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1791.531646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1791.538927] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2bfad916d4 10:45:37 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0206434, &(0x7f0000000040)={0x8000, 0x0, 0x10001, 0x100000000}) ioctl$DRM_IOCTL_SG_ALLOC(r8, 0xc0106438, &(0x7f0000000080)={0x4, r9}) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) bind$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x801, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @private0, 0x2}}, 0x24) 10:45:37 executing program 3: socket$kcm(0x10, 0x2, 0x10) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd944fbbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b4ee3e9763221cb2c8d76f824f4be5703f465e50e434e2193900c39ab1d9f79d37cc0ce7a000000", 0x73, 0x20000001, 0x0, 0xffb5) r3 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='net/netfilter\x00') lookup_dcookie(0xc23f, &(0x7f00000003c0)=""/89, 0x59) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) sendmsg$kcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a90600999d0000", 0x2e}, {&(0x7f0000000200)="6d44fe1ea2cd9472d13d98f70196718b27defb37fb7537c4397d63bc324650cefbf87e8f29792e1be55a1f732096345a897d0a7b5961900d571eb25ac30950d1430a29d243383157946b1ad9bf62dd3335a0732223c18bd26dcc8394a8d8bc5ffa8defcede4f19561c79383c2b7987166ac48f90bbd0cf18c35e21d0b333428fa5330bd4585c7caa6eebc109c13b70bdd5a45328ed67aef6ce1bb15e89303ed5af3cbb560458c32fa9308714741291a90e0f074f7579117adcc73894ed14551c851f7e75fed2ebd55915", 0xca}], 0x2}, 0x20020081) 10:45:37 executing program 5: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x400000000020a929, 0x17, 0x1}) 10:45:38 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18404011}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0xd, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x240400c1) 10:45:38 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x5fffffffffffd, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat(r2, &(0x7f0000000340)='./file0\x00', 0x42800, 0x10c) ioctl$SOUND_OLD_MIXER_INFO(r3, 0x80304d65, &(0x7f0000000280)) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) sendto$netrom(r6, &(0x7f0000000000)="3263f3d9a5157f610d0cd6387d6767e331d5566fb79f15aed44fb967ab046162d9bdd0b3bb340497087f65cca3a6801aa7e6fae4c13bb1d6e52cfd5eda75e8d4710dd97342b705ec670dc069a33e63efdacbbf602fc77800c649844d37653dce92eb418f1132cc9df908d1c059788397020edc748ab4167ed4457560b9dec39de607f873ed361c0830b549afe6f037fe62f4e8b6c7087db00abafc6d20728bcb6da761fd0a738279a37cede19c20a012ba01bfdb2f41de39605110a202c16f90566c552f0cdce102352153b3a25d376141c78eaf69af4f76c3fb0da5cfa2829898f5adb61581b731f2c1872ff58d93419cd8", 0xf2, 0x80, &(0x7f0000000100)={{0x3, @default, 0x8}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @bcast]}, 0x48) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r9, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r9, 0x40045731, &(0x7f00000002c0)) 10:45:38 executing program 0 (fault-call:2 fault-nth:6): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1791.913301] FAULT_INJECTION: forcing a failure. [ 1791.913301] name failslab, interval 1, probability 0, space 0, times 0 [ 1791.937055] CPU: 1 PID: 26333 Comm: syz-executor.0 Not tainted 4.14.181-syzkaller #0 [ 1791.945211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1791.954752] Call Trace: [ 1791.957493] dump_stack+0x1b2/0x283 [ 1791.961487] should_fail.cold+0x10a/0x154 [ 1791.965652] should_failslab+0xd6/0x130 [ 1791.970485] kmem_cache_alloc+0x28e/0x3c0 [ 1791.974647] selinux_file_alloc_security+0xaf/0x190 [ 1791.979674] security_file_alloc+0x66/0xa0 [ 1791.983916] ? selinux_is_enabled+0x5/0x50 [ 1791.988606] get_empty_filp+0x15c/0x3e0 [ 1791.992586] alloc_file+0x23/0x440 [ 1791.996208] anon_inode_getfile+0x163/0x2f0 [ 1792.000541] ? reverse_path_check_proc.cold+0x20/0x20 [ 1792.005925] ? __lockdep_init_map+0x100/0x560 [ 1792.010439] dma_buf_export+0x4c8/0xa20 [ 1792.014422] ion_alloc+0x57d/0x7c0 [ 1792.018519] ? ion_dma_buf_release+0x40/0x40 [ 1792.022941] ? __might_fault+0x177/0x1b0 [ 1792.027017] ion_ioctl+0xef/0x1f8 [ 1792.030475] ? ion_alloc.cold+0x3d/0x3d [ 1792.034897] ? selinux_file_ioctl+0x3f7/0x560 [ 1792.039395] ? ion_alloc.cold+0x3d/0x3d [ 1792.043380] do_vfs_ioctl+0x75a/0xfe0 [ 1792.047286] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1792.053017] ? ioctl_preallocate+0x1a0/0x1a0 [ 1792.057562] ? security_file_ioctl+0x76/0xb0 [ 1792.061979] ? security_file_ioctl+0x83/0xb0 [ 1792.066581] SyS_ioctl+0x7f/0xb0 [ 1792.069965] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1792.074046] do_syscall_64+0x1d5/0x640 [ 1792.077946] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1792.083139] RIP: 0033:0x45ca29 [ 1792.086336] RSP: 002b:00007f2bfad90c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1792.094078] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1792.101380] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 10:45:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000000)={0x7f, "af2fc9e935b7c54f34db19e8583aa5f2a0c504e552386a6ffd1c076703189bab", 0x400, 0x8, 0x3, 0x2}) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r6, &(0x7f0000000180)='.//ile0\x00', r6, &(0x7f00000007c0)='./file0/f.le.\x00') r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r7, 0x400, 0xffffffff, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="08002abd7000fbdbdf250c000000060028000400080031000700010008000b00040000000500380000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008011}, 0x80) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r7, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044080) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) [ 1792.108652] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1792.116016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1792.123376] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007f2bfad916d4 10:45:38 executing program 5: removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="627406329ebdbe7777b167d3153fa51c8900000028007c6280299e43f05a68cea03579b6f828c0e3369bd0dfef41c721ac42abce9ea31584b3ef0f5c3d03a84ce962da941968e963dcd4d1ba3f6cd53924f59b222a77f9698b85888083ad3403551ed18e603c4e92512caa63b21da327cabbe10833801ee7f055498e47e0db8fa4a285488183b5590c7e8faba4f2887a3b1838cc2a5f087aa67db0da25"]) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:45:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000340)=""/121, &(0x7f0000000240)=0x79) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b20679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0x73, 0x58805, 0x0, 0x0) lseek(r2, 0x80, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) getsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) open(&(0x7f0000000040)='./file0\x00', 0x527441, 0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4014, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:38 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0xe0480) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:45:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(0xffffffffffffffff, 0xc02064a4, &(0x7f0000000700)={0x1ff, 0x3, &(0x7f0000000640)=[0x3, 0x200, 0x9e], &(0x7f0000000680)=[0x9], &(0x7f00000006c0)=[0x31c8, 0x81, 0x7, 0x0, 0xbb09]}) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r4, 0x40184152, &(0x7f0000000600)={0x0, &(0x7f0000000580)=[&(0x7f0000000180)="2b6fb187acb06a81c72f706be42ac3e8457aff00bf756507439ee7c632cf9a220622a1027d8649e55df6a67c0dfd8e91c5c2ec3a481191a7b9d2707fc2e505b7cab14bce4a4e9e32", &(0x7f0000000040)="8ad23bc0d78e0107dd0e7b76dd7e8dce6253ba5ce283721924593c0a8f190d738c64f4", &(0x7f0000000300)="967b1b9e1330775096225f9eeb22054bc13136a4a887228357953b0e9b12fff551ff8d65f052638785b29a7cc4ee8bb101882c70ee5816a83e7f8e16fe0eb56ad8c51cda7d455059675deed8fdf3e3223e00c5aceb731c842acc6667e41f71aa23284ddc99d4f408dcb2733192effa9f12397b0572067c47f5cf681b84fe4a8206b23902684b103cce492ac528763ae56fc5755faa332349fff02c995d3e07c6de9e2e2426dbd9859679bba9d0afd851c1849e0d9d0110f9", &(0x7f0000000200)="b835a095857e59014cb023661ec9f5a049755fdd2b525f188ac077922817075ce5cd841a1a65118f29b7b92114c2a3587b59d73e10bf4836fc9b17044cb4d3fbc869f3628e82f649583c6eebc7585c617894532de65d73609fcc6a67a02d70fa", &(0x7f0000000100)="a68b55", &(0x7f00000003c0)="e76a3ed73ec0fdd1ac80eafa02f415c09da4cafb27b4eb", &(0x7f0000000400)="0e3f4dee89acac5c35a3ac4f0fc13724308c8ac94028277a5e5262794abedf8fe47f9e65ca4b89a1012fe3cb7ad3b7765b44aba332053e32a719d2d70c2dc78f38dae75e47c2521384ffe2829b9e0bf24e8ccdbc7ecdbb6606b076ce50252dbbd99e83e7782b850b1f2de7f81dc4a83b37a7d47fc772ee26a5319c7d51c643c380b44221370fc935d2e5ddd70044551d23961b2ee7", &(0x7f00000004c0)="3406e1a1486dbb9d06e6283361e5d03900cc0c8dc4c00415b089cbecbe40943880", &(0x7f0000000500)="88823f411cb910bf07ab62a35aa3347b06cb628cf985308474d0a221cbe26ed46a5f072618efd298bb723073233a", &(0x7f0000000540)="e034c9cd57d723c5afb51a2e3cfac8923892830eec01e00290377b2258c98a08a6cccf1880587247c5b73c75421638b303f9"]}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000000)={0x1, 0x3, [@multicast, @multicast, @multicast]}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f0000000000)) 10:45:38 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) execveat(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000040)='bridge_slave_1\x00'], &(0x7f0000000300)=[&(0x7f0000000180)='bridge_slave_1\x00', &(0x7f00000001c0)='$-\\$vboxnet1$selinux[&/wlan1selinux\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='bridge_slave_1\x00'], 0x1000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x801, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$read(0xb, r3, &(0x7f0000001480)=""/4107, 0x100b) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$read(0xb, r5, &(0x7f0000001480)=""/4107, 0x100b) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$instantiate(0xc, r3, 0x0, 0x0, r6) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r6) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f00000001c0)={0x4, [[0xff, 0x5f1, 0x7fffffff, 0x9, 0x1000, 0x7, 0x200, 0x9], [0xfffffffc, 0x36, 0xcc9d, 0xfff, 0x9, 0x8, 0xf0fa, 0x8], [0x1, 0x0, 0x9, 0x540, 0xffffffff, 0x20, 0x5, 0xffffffff]], [], [{0x6cf5, 0x7, 0x1, 0x1}, {0x9, 0x101, 0x1, 0x1, 0x1, 0x1}, {0x8b38ea76, 0x8, 0x1, 0x0, 0x0, 0x1}, {0x6, 0xff, 0x1}, {0xf182, 0x3, 0x1, 0x1, 0x1, 0x1}, {0x7fff, 0x4, 0x1, 0x1}, {0xeb3f, 0xd8b6, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x6, 0x1}, {0x450, 0xc2c, 0x0, 0x0, 0x1, 0x1}, {0xff, 0x4, 0x0, 0x0, 0x1}, {0x3000000, 0x0, 0x1, 0x1, 0x1}, {0x0, 0x5, 0x0, 0x1}], [], 0x200}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 10:45:39 executing program 0 (fault-call:2 fault-nth:7): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:39 executing program 5: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) dup3(r0, r2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:45:39 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000000)) 10:45:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[0x1, 0x3]}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) 10:45:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r5, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002080)=@delchain={0x70, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffff}, {0x0, 0xffff}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x70}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000002c0), &(0x7f0000000340)=0x4) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@rand_addr=0x64010100, @multicast2, r5}, 0xc) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4503, 0x4000) ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x4, 0xd8, 0x40, 0x7, 0x13, "7422f4d2799e6a92c618ed414f4540c78174eb"}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d81900000000000000", 0xfffffffffffffe30}], 0x1}, 0x989d) [ 1793.369385] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1793.420139] HTB: quantum of class FFFFFFFF is big. Consider r2q change. 10:45:39 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x440402, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r3, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f00000000c0)='eth0\x00'}, 0x30) ptrace$getregset(0x4204, r5, 0x1, &(0x7f0000000440)={&(0x7f0000000280)=""/213, 0xd5}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={r4}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r1, r2, 0x0, 0xa, &(0x7f0000000040)='-keyring,\x00', r4}, 0x30) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) tkill(r0, 0x1) 10:45:39 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x1, &(0x7f0000000000)={0x6000000000001, 0x9bc4, 0x10001, 0xfffffffffffffffd}) 10:45:39 executing program 4: mq_open(&(0x7f0000000040)='-keyring,\x00', 0x800, 0x100, &(0x7f0000000080)={0xfffffffffffff8a2, 0x0, 0x802}) 10:45:40 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20080, 0x0) socket$pppoe(0x18, 0x1, 0x0) getpeername$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@netrom, @netrom, @default, @null, @bcast, @default, @remote, @default]}, &(0x7f00000000c0)=0x48) 10:45:40 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x179d551b, 0x5, 0x8, &(0x7f0000ffb000/0x1000)=nil, 0x16ea}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x98bc9000) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x220080, 0x0) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000000140)={0x1}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r5, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r5, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$sock_netdev_private(r5, 0x89fa, &(0x7f0000000200)="5289581d8a607cd78f599d1a82af9717650c865bcb2a81b4eb1b2ca60b80158cb8c8e06c902371131f92918202719fcd3bee61ee0007a54fbf5e8f21b1380bc4adc1abf4c9eca0769c8bca4c98d982e16e3298031a4e735372f6d4d855d24b225d86e950b61e82f956ddcd4a8568a58313ff566211ff2f6edcc8341b2fc70446a7d5dc665e8548ce5fcff2b74c3f3acdbc6bf8ff9c9f82ac393fbcc35710c57c4982dbb6ed188a28c1f21eb071521ddb9b45670375e9deb08fe50f1ca510615d4e5681894c68a3c2eafccdd524d4e3dd6ae9488d95776f9c3711b0e393a9f253529e6d69f2db33f639b1634fa54ea0702a0c002dbf") ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r3, 0xc0305302, &(0x7f00000000c0)={0x5, 0x9, 0xfffffffa, 0x20, 0x401, 0x800}) 10:45:40 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f00000000c0)=0xfffffffc, 0x4) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x1f, 0x5, 0x2, 0xffffe0f0, 0x2}) 10:45:40 executing program 5: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x110, 0xffffffffffffffff, 0x5669a000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) fdatasync(r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x8000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:45:40 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x206, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:40 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x1afb5064, 0x1b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0xb0051, r5, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000000)={0x9, 0x3, 0x0, 'queue1\x00', 0xfff}) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000340)={0x0, 0x0, @pic={0xfb, 0x1f, 0x7f, 0x8d, 0x1f, 0x9, 0xc0, 0x81, 0x6, 0x1, 0x69, 0xff, 0xf, 0x1f, 0x4, 0x80}}) accept4$alg(r2, 0x0, 0x0, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000100)={0x20a927, 0x1f, 0x0, r1}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r8, 0x84, 0xc, &(0x7f00000000c0)=0xfffffffd, 0x4) 10:45:40 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) [ 1794.165390] HTB: quantum of class FFFFFFFF is big. Consider r2q change. 10:45:40 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001, 0xffffffffffffffff}) 10:45:40 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@dev, @in6=@ipv4={[], [], @remote}}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f00000000c0)=0xe8) 10:45:40 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000300)='./file0\x00') mkdir(&(0x7f00000000c0)='./file0\x00', 0x15b) mknod$loop(&(0x7f0000000180)='./bus/file1\x00', 0xc000, 0x1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) 10:45:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0717000000000000000016000000050009"], 0x38}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000340)={0x154, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000001}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x611}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd48}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x2c004}, 0x20000011) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x190, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x17c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:40 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x1, 0x0, &(0x7f0000000240)={0x8, 0x9bc7, 0x10001, 0x3}) 10:45:41 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000200)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000280)) sendto$inet(r3, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$FITHAW(r3, 0xc0045878) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty, @multicast1}, 0xc) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000040)={'vxcan1\x00', {0x2, 0x4e24, @remote}}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:41 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r4, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_MRU={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20008}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000bdfd53e8d70600af241e12546de174892ae82034fdde002372a4f0c2bd3044628a5de327604dfbe762083cdb404302519a5e3ad9831e10665f24097262b2e2fe1479488cf702f1f384c7", @ANYRES16=r4, @ANYBLOB="20002dbd7000fddbdf25080000000600010000000000050004000200000008001900ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) shutdown(r7, 0x1) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f00000000c0)={r9}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000280)=r9, 0x4) 10:45:41 executing program 5: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair(0x8, 0x80000, 0x5, &(0x7f00000000c0)={0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0xfffe, @multicast2}, 0x10) shutdown(r2, 0x1) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) setsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000140)=0x3811, 0x4) ioctl$RTC_VL_READ(r6, 0x80047013, &(0x7f0000000040)) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000000c0)={r8}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r8, 0x2}, 0x8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1, 0xffffffffffffffff}) getsockname$ax25(r9, &(0x7f0000000200)={{0x3, @bcast}, [@null, @remote, @default, @default, @null, @bcast, @netrom, @rose]}, &(0x7f0000000080)=0xfffffffffffffd6a) 10:45:42 executing program 5: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x4000010, r2, 0x50f2e000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'team0\x00'}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x80081, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) fsetxattr(r0, &(0x7f0000000180)=@known='trusted.syz\x00', &(0x7f0000000200)='\x00', 0x1, 0x0) sendto$inet(r4, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000000c0)={r6}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x3806, 0x201, 0xffffffff, 0x1, r7}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r6, 0x3}, &(0x7f0000000080)=0x8) 10:45:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r3, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000340)=ANY=[@ANYRES32=r5, @ANYBLOB="186e7bda2658edf5c93d69ddea11a22bece6bf533c2b6d3184e6d7b419e934ecdba492b1831f5fa7ba7a60de2b556110894b2be7d83ce5316ee6733d21342372c3801f909bd5928bf36eea01282f4af5e079574222730b294df67381449b49068af944911f28c4a5d4c80ef1915f5514913321"], &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={r5, 0xf6a, 0x0, 0x9, 0x2}, &(0x7f0000000040)=0x18) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0, 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) waitid(0x1, 0x0, &(0x7f0000000140), 0x20000000, &(0x7f0000000200)) 10:45:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, &(0x7f0000000100)=r5) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x80082102, &(0x7f0000000000)=r5) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0717000000000000000016000000050009"], 0x38}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x194, r6, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6f7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}]}, @TIPC_NLA_BEARER={0x10c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x23}, 0x7}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xbd7, @private0, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x800, @loopback, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x4008094}, 0x40) 10:45:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x203, 0x44110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000000000000}, 0x0, 0x100, 0x0, 0x0, 0x1, 0x4}, r3, 0x9, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:42 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ip6_vti0\x00', 0x8000}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00'}) 10:45:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x4e23, @rand_addr=0x64010101}}) 10:45:43 executing program 5: r0 = socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', r2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, r3, 0x4000) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x32, 0x1}) 10:45:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x4bca62ea, 0x0, 0x4, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:43 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000000)='setgroups\x00') mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f00000000c0)=ANY=[@ANYBLOB="060000080000000001000000000000ffff00000077650000000000000401000800"/71]) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 10:45:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0x28}, 0x10) 10:45:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x800, 0x0) setsockopt$packet_buf(r2, 0x107, 0x16, &(0x7f0000000180)="4f788ad3a2f8ae1d2e7280bee8f270720c7f2d5e67035657b8fea1b973da8cdc9566eb9209f474c0d9383493e66542c7cbfc93ea257c3e04f4b0f728540d048765c03006073992ac52743fcd95f4387a4e155f9a5f309d0dcf9b03aa39bd64af47a836420330cdea2b6e9817b3c252da542ffabd66fb78c5", 0x78) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r5, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x11138e7, 0xfffffffffffffffd}}}, 0x90) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x6, @remote, 0x1000}, {0xa, 0x4e22, 0x2, @empty, 0xffff}, r4}}, 0x48) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x100, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040)={0x3, 0x9}, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:43 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x8) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x600, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000000)=0x6, 0x4) 10:45:43 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4000}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) r5 = fcntl$dupfd(r0, 0x80c, r1) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r6, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r6, 0x1) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f00000000c0)={r8}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x10, 0x205, 0x9, 0x6, r8}, 0x10) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x1, r5}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:43 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in, @in=@private}}, {{@in=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xe8) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) sched_setattr(r2, &(0x7f0000000040)={0x38, 0x0, 0x41, 0x7fff, 0x8bdb, 0xb700000000000000, 0x7, 0x10d9, 0x6, 0x1}, 0x0) 10:45:44 executing program 5: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') 10:45:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10:45:44 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0xffff) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6bc, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) splice(r0, &(0x7f0000000040)=0xfffffffffffff000, r1, &(0x7f0000000180)=0x8, 0x8001, 0x4) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:44 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000200)) ioctl$MON_IOCQ_URB_LEN(r6, 0x9201) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x404, 0x0, 0x0, {0x2, 0x0, 0x2}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000d4) 10:45:44 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000840)='/dev/btrfs-control\x00', 0x80000, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0xffffffff, 0x4) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, r0, 0x2000) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:45:44 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r3 = fcntl$dupfd(r2, 0x0, r1) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r4, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000000c0)={r6}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000000)={0x40, 0xa81d, 0x2, 0x6, 0x52c805e6, 0x3, 0x0, 0x9, r6}, &(0x7f0000000040)=0x20) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000000)=0x10, 0x4) r5 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x2001, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r6, 0x4142, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r5, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 10:45:45 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f0000000000)="d623fe63e0e6d94a0eeafaa63946c9616c410cae28", &(0x7f0000000200)=""/254}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:45 executing program 5: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x410100, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x1ff) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = semget$private(0x0, 0x0, 0x0) semctl$GETNCNT(r4, 0x0, 0xe, 0x0) semctl$GETALL(r4, 0x0, 0xd, &(0x7f00000000c0)=""/22) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r7, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r7, 0x5016, 0x0) r8 = dup(r3) mmap(&(0x7f0000087000/0x1000)=nil, 0x1000, 0x1000003, 0x30051, r8, 0xffffc000) r9 = semget(0x0, 0x2, 0x20) semop(r9, &(0x7f0000000100)=[{0x2, 0xfb5, 0x1000}, {0x1, 0x3f, 0x2000}, {0x2, 0x5, 0x1800}], 0x3) connect$bt_sco(r8, &(0x7f0000000080)={0x1f, @none}, 0x8) 10:45:45 executing program 0: mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x40) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:45 executing program 5: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7fffffff, 0x12000) write$FUSE_IOCTL(r2, &(0x7f0000000080)={0x20, 0xfffffffffffffffe, 0x5, {0x6, 0x4, 0xffffffc0}}, 0x20) r3 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000000)={0x3}) msgget$private(0x0, 0x50) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:45:45 executing program 5: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1, 0xffffffffffffffff}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x100000a, 0x4000010, r1, 0x0) setsockopt$inet6_tcp_TLS_RX(r6, 0x6, 0x2, &(0x7f0000000080)=@gcm_256={{0x304}, "385d453de49bce13", "1b0f44e031d7b2676924ef34bae0c7ce81615da1a74f8706e0a81387185cdd08", "a4ed9864", "8cd0969c5e86465c"}, 0x38) capget(&(0x7f0000000000)={0x19980330, r2}, &(0x7f0000000040)={0x20, 0x106, 0x3f, 0x8000001, 0x9e8}) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r6, 0x4122, 0x0) 10:45:45 executing program 5: openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x42000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40800, 0x80) mmap(&(0x7f00001eb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f00000000c0)=0x20, 0x4) r5 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) recvfrom$x25(r5, &(0x7f0000000000)=""/12, 0xc, 0x40, &(0x7f0000000040)={0x9, @null=' \x00'}, 0x12) 10:45:45 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2368c2, 0x0) mmap(&(0x7f0000066000/0x3000)=nil, 0x3000, 0x0, 0x100010, r0, 0x8fe62000) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0xb1a1761f93108ccf}) 10:45:45 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r3, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r4 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x0, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000000)={r0, r7}) 10:45:45 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snapshot\x00', 0x100, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "349360984dd876ed", "f30c0f634cf64433dcfd18b1112523131f81e19b16985918a8f3cc267ee6041a", "09ce0581", "085648e9d556bb71"}, 0x38) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000600)={0x1f, 0x800, 0x0, 0x7fff}, 0x8) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) sendto$inet(r0, 0x0, 0x0, 0x404c871, &(0x7f0000000080)={0x2, 0x4e26}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) mmap(&(0x7f0000050000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:45:45 executing program 5: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:45:46 executing program 5: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$snddsp(0xffffffffffffffff, &(0x7f0000000000)="eac0618c642647afe883b54497faa265d7250619b0a6853719f46fd34fac68155f2503a6311adbe64ee3c9563cba449eb9eb27b1186d775c415101e23a46a9bd323ac17804a5a4412a06c5a7aa9f0b551ed13c3ac2070bd718c4e952357f7f65ef43b050ed16067c5d35a21797d7e20af5578af18ec047baedfaa1cd66eab2ce9e78004e7c46c8429c4a9de1396020f773438c363a3996600af0fddc7a8cfd12b095e27d2105f1ac9e98bc4b77140724fce306086b", 0xb5) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r2, 0x4112, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:45:46 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x80000) fstat(r0, &(0x7f0000000300)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r3, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000000c0)={r5}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)={r5, 0xfffe, 0xa, [0x800, 0x1, 0x3, 0x6, 0x1, 0x4e, 0x8000, 0x3ff, 0x6, 0x3]}, 0x1c) accept4(r3, &(0x7f0000000180)=@pppoe, &(0x7f0000000200)=0x80, 0x800) 10:45:46 executing program 5: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r5, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r5, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x44) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000080)={r5, r6}) 10:45:46 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0xe0402, 0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xe, 0x0, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="26de964cf009068f6da096f2cfbbe41b14083df33c96e860b5d265a5c55f0e94c72c62a6244fecb97ca56160a221ade70dcbdf261cf2ddc1f69e94e33ca0c712e1de3e01962c86d8c6907f0e742d66ee30275d12b15558142dc66d91e655c1d3c1ca7ca266ec94d34dc247dc19b5856cf1e7c0aaf1e5750db8f24c07d2ef4227d73fc12e996df7906593ea64f24c29edcb8ebe93e4e62a1f9ef85f37d3b24c45dd794512934ad90ef0da95e8e0fd68d4f634458605e26ab52d53dd6a5f1aa3d1ee5483dfbc03d4071dbd86a28e3725897e10a05ec3b5855d69c7", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="69206443d53fff2adeb2f9541a07b9c07aca7e0d000e0143ea78808bf25b607d4ce70216b407896a1d7f5a0f775dd770fb3f25a0af00a610d1988177daa1a2da187e7cb075264077dbbe4ce78d1b25f5df571510d60172ac2ff0f3c4bf3f4c10e8c379798c7176f2c5b9c7d1ff0ec640bb9c81d75be5df8ad3294fad9934b7abc824b59a1c93"], &(0x7f0000000000)=0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r5, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r5, 0x1) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f0000000180)=ANY=[@ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\t\x00'/15], &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000200)={r4, 0x100, 0x96, 0x87, 0x1, 0x45, 0x7fff, 0x6, {r7, @in6={{0xa, 0x4e23, 0x3, @remote, 0x1}}, 0x5, 0x8, 0x7fffffff, 0x0, 0xffffffff}}, &(0x7f0000000140)=0xb0) r8 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) getsockopt$netlink(r8, 0x10e, 0x5, &(0x7f0000000000)=""/15, &(0x7f0000000040)=0xf) 10:45:46 executing program 5: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000007ef10000000000000000000a"], 0x30}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000000), 0x0, 0x24000084) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) semget$private(0x0, 0x2, 0x40) 10:45:46 executing program 5: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x400000000020a926, 0x17, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) fcntl$setsig(r1, 0xa, 0x3f) 10:45:47 executing program 5: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) name_to_handle_at(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x14, 0x10001, "b821c870fe66160f294b07bf"}, &(0x7f0000000080), 0x400) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:45:47 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20512, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2000, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e21}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000)='trusted.overlay.origin\x00', &(0x7f0000000040)='y\x00', 0x2, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:47 executing program 2: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000000)) 10:45:47 executing program 3: r0 = socket$kcm(0x10, 0x7, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0)='ethtool\x00') r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xac, 0x1, 0x1, 0x201, 0x0, 0x0, {0x6, 0x0, 0x6}, [@CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x6, 0xf92, 0x3, 0x2]}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_ZONE={0x6}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @broadcast}}}]}, @CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4e}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7ff}]}, @CTA_MARK={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000080) 10:45:47 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x80000) fstat(r0, &(0x7f0000000300)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r3, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000000c0)={r5}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)={r5, 0xfffe, 0xa, [0x800, 0x1, 0x3, 0x6, 0x1, 0x4e, 0x8000, 0x3ff, 0x6, 0x3]}, 0x1c) accept4(r3, &(0x7f0000000180)=@pppoe, &(0x7f0000000200)=0x80, 0x800) 10:45:47 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm_plock\x00', 0x400, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) write$P9_RREAD(r5, &(0x7f0000000000)={0x21, 0x75, 0x2, {0x16, "439dea3b80e0bf4407e3349656ff8dd0b25f4872c020"}}, 0x21) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000300)={{0x4, 0x4, 0x7fffffff, 0x2, 'syz0\x00', 0xfffffffc}, 0x0, [0x0, 0x10000, 0x0, 0x6, 0x4, 0x8, 0x10000, 0x20, 0x3f, 0x16d, 0x0, 0x4, 0x80000001, 0x101, 0x8, 0x0, 0x8, 0x6, 0x400, 0x900000000000000, 0x8, 0x1, 0x2, 0x2, 0x3, 0x80000000000053b, 0x8000, 0x4, 0x9, 0x5, 0xff3, 0x7, 0x6, 0x2, 0x37, 0x4d, 0x80000000, 0x100, 0x6, 0x1000, 0x5, 0x80000001, 0x0, 0x9, 0x345c, 0x8, 0x3, 0x400, 0x7ca8, 0x100000001, 0x8dd1, 0x9, 0x4, 0x2, 0x7, 0x5, 0x400, 0x3, 0x0, 0xfff, 0x4, 0x7, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x8, 0x6, 0x10000, 0x5, 0x100, 0x0, 0x7, 0x400, 0x0, 0x56, 0x2, 0x5, 0xffff, 0xffffffffffffff0c, 0x9, 0x7d, 0xfb7e, 0x7, 0x1, 0x9, 0x7, 0x81, 0x2, 0x9d, 0x80, 0x765b, 0x7, 0x9, 0x80, 0x2, 0x101, 0x8001, 0x401, 0x8, 0x5, 0x6, 0x8, 0xfffffffffffffffe, 0xfffffffffffff014, 0x8, 0x5, 0x3, 0xa32, 0x5, 0x1f, 0x1, 0x8be, 0x8000, 0xfffffffffffffffc, 0xc52, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffb, 0xffff, 0x7, 0x2, 0x20000000000080, 0x7, 0x5, 0xffffffffffffff94, 0x8, 0x401]}) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) ioctl$VIDIOC_G_CROP(r8, 0xc014563b, &(0x7f0000000040)={0x3, {0x4, 0x3f, 0x9, 0x3ff}}) ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xc279}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x8400, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000100)={0x80000001, 0xb, 0x4, 0x10000, 0x2, {}, {0x3, 0x8, 0x1, 0x3, 0x7, 0x40, "35bd3cd1"}, 0xb63, 0x2, @userptr=0x3, 0x6, 0x0, r2}) 10:45:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup(0xffffffffffffffff) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c080}, 0x20000000) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) [ 1801.904584] Unknown ioctl -1067952623 [ 1801.920408] Unknown ioctl -1067952623 10:45:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) socket$nl_sock_diag(0x10, 0x3, 0x4) 10:45:48 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x10001, 0x2000) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f00000000c0)=""/136, &(0x7f0000000180)=0x88) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000340)={&(0x7f00000002c0)="158e5b04474f543f", 0x8, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f0000000400)={r5, 0x6d, &(0x7f0000000380)=""/109}) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r4, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000280)=0x4) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f0000000040)={0x3f, 0x1, 0x7, 0xfff, 0x200, 0xc1a, 0x40}) 10:45:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r1, 0x110, 0x5, &(0x7f0000000040)=[0x3, 0x2], 0x2) 10:45:48 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='syzkaller0\x00') r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r3, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000001c0)=""/144, &(0x7f0000000040)=0x90) 10:45:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) connect$bt_rfcomm(r4, &(0x7f0000000100)={0x1f, @any, 0x7}, 0xa) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) pivot_root(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='./file0\x00') r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r7, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0xc, 0x0, 0x1}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8040) [ 1802.258797] IPVS: length: 144 != 24 10:45:48 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r7, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r7, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r8 = dup2(0xffffffffffffffff, r7) write$evdev(r8, &(0x7f0000000200)=[{{r5, r6/1000+60000}, 0x17, 0x2, 0x9e}, {{}, 0x16, 0x2, 0x2}, {{0x0, 0xea60}, 0x140fe74536395f2d, 0x4, 0x2}, {{0x0, 0xea60}, 0x11, 0x8001}], 0x60) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r10, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r10, 0xc06864a1, &(0x7f0000000100)={&(0x7f0000000000)=[0x3, 0x8000, 0x10000, 0xb, 0x3fbb, 0x3, 0x8001, 0x22], 0x8, 0xc, 0x9, 0xf8d, 0x2, 0xffff, 0x80000001, {0x0, 0x7, 0x1ff, 0x7, 0x78c5, 0x4, 0x1f, 0x5, 0x9, 0xfffe, 0x7f, 0x3, 0x9, 0x2, "258eb888504b377a2d0f7bf6299a186cd2dd0bbd9375831e39547cfb8b8a8d29"}}) 10:45:49 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:cpu_online_t:s0\x00', 0x22, 0x7) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x20044004) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x4200, 0x0) read$usbfs(r1, &(0x7f0000000140)=""/150, 0x96) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000200)={0x3, 0x1, @stop_pts=0x3}) 10:45:49 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x11138e7, 0xfffffffffffffffd}}}, 0x90) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000000040)={0x9, 0x108, 0xfa00, {r5, 0x3, "7f5876", "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"}}, 0x110) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f0000105000/0x2000)=nil, 0x2000, 0x1000003, 0x30051, r7, 0x61a9000) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c) 10:45:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x4800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:49 executing program 5: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x110, 0xffffffffffffffff, 0x5669a000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) fdatasync(r0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x8000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:45:49 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, r2, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x41}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xaa1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xccb}, @TIPC_NLA_NET_ID={0x8}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x0, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeb7b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffe634}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x0) 10:45:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000040)=0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:49 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r3 = fcntl$dupfd(r1, 0x406, r2) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/4096, 0x1000, 0x8) sendmsg$RDMA_NLDEV_CMD_RES_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x1409, 0x1, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008104}, 0x24001804) 10:45:49 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x260c0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x11138e7, 0xfffffffffffffffd}}}, 0x90) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0x9fff, 0x400, "a342869b352b77622f8ca5947885011d0e3eb57f65dbfd8580731314d8379d0322c8449b5d115c937117c093cc11ca2758e50dc111afa3942df7ffd80b31714709d4f6ad7abeb08d99fbbc0e430fdd6a885f59745eac0f646675dffdb6d875af7982f712612e8d3f7db8d46e016e7d1cfdf8e452bbbacbbebd0cbe5d7c3a408d66bd7936e98d1e07b4ab03f10cc6ab817923dbe0e064d523f20cab63654aed41b0ab7fe81da952c3bc1ca7113866a420d1fbc809eb89d27d1b91f767c03d3608cde5b5542316456d1a72ab3f146bf3ff80647eb7ba2a8c3d22b18fa7271bfcaf42c62353b88ebb09d98d3bbf5d180cfcd073926c156feccadf6e88abada6d53e", 0x4, 0x3f, 0x7, 0x80, 0x1, 0x99}, r2}}, 0x120) mq_open(&(0x7f0000000200)='-keyrin\',\x00', 0xc1, 0x0, &(0x7f0000000240)={0x6400000000040, 0x9bc4, 0x10001}) 10:45:49 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r2 = accept4(r1, &(0x7f0000000080)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @empty}}, &(0x7f0000000000)=0x80, 0x0) sendmsg$can_raw(r2, &(0x7f0000000200)={&(0x7f0000000100), 0x10, &(0x7f00000001c0)={&(0x7f0000000140)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x32, 0x2, 0x0, 0x0, "330bce35086d48eb782a05fec9efa04a18606fbc3711c2540836726c3926636e5b5c2fb5a5a978562585280b384b62b759283947c4df4b2bdf76ed2d5f618cb2"}, 0x48}, 0x1, 0x0, 0x0, 0x40040}, 0x24000000) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x2000d091) 10:45:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'netpci0\x00', 0x400}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000000)={0x0, 0x8000}) 10:45:49 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x13, r2, 0xfffff000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r7, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002080)=@delchain={0x70, 0x28, 0xf31, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0x0, 0xffff}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x70}}, 0x0) r8 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) ioctl$KDGKBENT(r8, 0x4b46, &(0x7f0000000140)={0x46, 0x7f, 0x7f}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000080)=r7) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000000000)={{0x8, 0x3f}, {0xff, 0xd}, 0x1000, 0x5, 0x60}) 10:45:49 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bond0\x00', 0x102}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) bind$rds(r0, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r3, 0x40086432, &(0x7f0000000100)=0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) [ 1803.445028] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1803.509123] HTB: quantum of class FFFFFFFF is big. Consider r2q change. 10:45:49 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) [ 1803.551516] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1803.564451] HTB: quantum of class FFFFFFFF is big. Consider r2q change. 10:45:49 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x424080, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) sendmmsg$nfc_llcp(r5, &(0x7f0000000fc0)=[{&(0x7f0000000040)={0x27, 0x1, 0x2, 0x7, 0x9, 0x3, "7047bb504cfe849e92bb0b2f9c81ec73839a9d989fd6968432a1b3938dfc93aa56729e351c9299f0c1b87b8b4590e84b64e99cc8b92bab99dd0f089ea8ba17", 0x1a}, 0x60, &(0x7f0000000540)=[{&(0x7f00000000c0)="4dc81146a8ba7d0c2707767b81e3cf729ffafd4fdc9e8bf14629dba2092a31088896c5b78f2054713da9be4b152576cfcb556bb91aad52a198ef00a1c8953c30c7fd0b67ce054fa1987a5221ed5cad689bb61b421e4fc63d917d2632be6552266bb3044e81f17b3fb1771932430175af04550944c8a3b9cddec959623cd5cd263126074901c983d60dda4b33ebee65", 0x8f}, {&(0x7f0000000180)="2ef3de58d31e9a2286cbcb451daeaec6ee454ea38ba9ea10055a00f0bffa07b9ebde955fae03ae71b39fa4a314734a7d", 0x30}, {&(0x7f0000000a00)="b5c40508d39fca339946bc7143a60f9b431f1ff5ceae56e2516eb1dec7b7f9b6dd82e50cfdd752f4423e44ff381c002767cf5328103ac9fc9aa175c0566e593a63700a52f53b54c134cde6b11df28561f6c2a355f492700539", 0x59}, {&(0x7f0000000280)="2bfa6823b02013fa22f2d3bc5877246c37ed892e280ed6ae19b8c702a0543de3302d5f4be0482ec5d4e25fb10b70dbd6a5ca0f8355ed9237234b8ba24600ef3f71e38c81c8ce75160ac998eee3e747bcc92c9fe29ee7709d4150a919f2deac5130167852ae7bd4dc6a61e393e697c031a3ac8a9e08118523fc6fda917d00bc792e017a1114d3bf04a7d28bb91c3938d27ff19e84415720ad3864cbbe4343bfda4f44c5a66a22fb09b5599c", 0xab}, {&(0x7f0000000200)="f416a53158b42af8c48616ed4fd1ce891382726193d9d2628063da14e02490c9a929e624d2731b", 0x27}, {&(0x7f0000000340)="f2c294a970689654aed7eb6fdf60c76f5cc95770630a8ebe20a92d9f506cb516f8ceeae8567999fc592298b41d14ffee86bf2df978b272420736338ad886ed67", 0x40}, {&(0x7f0000000380)="0a6309387344763a5f463b89eaacc4280ebdf1a13b68cfc01b5610e5b0b14865fa4fa310b26d29fdb037e97b8ecbcea2fe417c1d81d861a445fd541406ff552d818aaba073676309afea3d902ab4a37511f51717d21273b608a0768c1a8524dff0baee0d3bb3877cfc3e030ed4009afacbd7a6db5e835832829aaa987793c726fdf6c5f783e7a5676e4f96c2d9c8e5b66d57324460a3e580f66d682d62d8baa93ee86779150302dec04fe11306a565b38c624bb04640d7b4b9448566cfe5cc8f20d607e3db6ce79a827870e6220895", 0xcf}, {&(0x7f0000000480)="3ac1f89184a411a005681171264c2d7e3d55c1aa0e0f5c3a819aa8f450a2088279ff65c79f3f4763e402443d294bd7e388b7cd42f8f52d919172ccfc17dfd3b8d5bcd817e78aaeaac303bd0d61892d1690906b6e01157c8c9ab7f44bf46884f01d526694bf98af8ffea07445a85087ea4c28487c40845565104e36f9d21286f9af17d861f19132be", 0x88}], 0x8, 0x0, 0x0, 0x4041}, {&(0x7f00000005c0)={0x27, 0x0, 0x1, 0x1, 0x1f, 0x9, "10d9fb510fc1a2402cb609e53e82c1b087870655bf33042a71ffa94c038374761c372f72424598c4bb4e90d6a8991dc28ea1e7d1d40510767ff7318c1ec5de", 0x2b}, 0x60, &(0x7f00000006c0)=[{&(0x7f0000000a80)="0eda63cd0b6bdbd9981d1e86d354bfa54715113d572b0f339b0f1d6a0e7539557254faf202c23954fe07b1954421709296fb71c65a7812a9e347dd591d4ddba18db29df2156b110a6fd2648f91c1503b4e2a6baf03566a0e7133", 0x5a}], 0x1, &(0x7f0000000700)={0x58, 0x10e, 0x60c, "b0afc335ddbffe8919ac892d74b5c38eed263473a2c83a5d8e2f7fafcb5ddb53780768c9dd758f31225b4e9b50d86d47aa986e0a8a6306066f6417c18c16a8377e"}, 0x58, 0x20008000}, {&(0x7f0000000780)={0x27, 0x4, 0x1, 0x1, 0x80, 0x3, "25b9377143e5eae8a79f82f4c163d695e82d25d8a6ff5dcabda4ac097ee4e44ca43e8bdfeae0a905aa704bced7687d48377a3d8372257a1dd5c86d7c725291", 0x33}, 0x60, &(0x7f00000011c0)=[{&(0x7f0000000800)="41abf2e9a8b9f6be4e997861fee7d8134c5ea0ce8758fcd1c2111b6805ac1649d184bc43dc3c497b14bd9710b22caae93e23e384691e858c97e381f192", 0x3d}, {&(0x7f0000000840)="f3496f0000000000000000", 0xb}, {&(0x7f0000001100)="9fe83c025e57a5b1b99930c7200572b718cf4d4e63765de5d0a7a45e4900f8a75ee91744775ec3cf1691b408bd45c8c562dc6bab6b0b160cb79c76f64c501f26c708e7e809a56985480bfff0be232b164b9c1da6f4cd85d2c61ed257db15f3a5b7630c1e2862a8544425221b19df23d47f395dfbcd29bc1d6688ce08c8b7f41e78b9af8763924397f98977018b6132a12328698a13c71d4b3da439bd000c05e8f505832e0e56ed3988ef57da7cc679b7a060ef7482", 0xb5}], 0x3, &(0x7f00000008c0)={0x108, 0x103, 0x8001, "dae784e9a5ff663e5f38fdefe04bc875d79ac5d32a507f4b8551f22ad12775dd5def4d1f751e479c954b4c0a3a43d949fb9b7105b8faf738a1f49772de652d3e19b05f2bcae213e7cf42e1d8def175b202405cd9a6af504a75cae631c4fe343bbae79f9c0f930af4a7f0cd5e12dab6ecf5322e8fcc644db5e828bcabd707a7c477a6e2615aaf938e0da04497ea10af1075b12512c991e7b11795bcb6bf5810768e9334c8bb4a8cd253baf51342498f3bce7ba6a09c5703e68daf765e1ed62eedc0dbbdfac3a327a422063aeb4ae69eb894e620787b2c0d7a5ea3812123f73244a0c1211e549d30969831bde7362af167717b9f1019ae4ecb"}, 0x108, 0x4000010}, {&(0x7f0000000c00)={0x27, 0x1, 0x0, 0x704d06f56cc07e5c, 0x1f, 0x1, "ec1304901ce69386e7cdc1b1af06df98d8e475b7ba3d9943586dced08b1dcce470464449887a0693275b610fef00bfd2e5595c8e610c662b75912d820e1951", 0x28}, 0x60, &(0x7f0000000c40), 0x0, &(0x7f0000000c80)={0xc8, 0x117, 0x6, "db63d691305532a27999e269cf658fb989cb1e9fbe55377fb9f0e87633ac4432f395f2c320649c5c13ed1073ad762094364af55dd1679ed5973f99e72fc78758b70a9e90720e7de0226a14c349eb8ef78a80ef5e67fefe06c97fa6722880ae8add183d7da933e158303431219099a4540b95a52260e7a294be22e3527b992f5ac8594319481335f567ea75f043944ec2ac7dac1ef3fb58b24d0610eff2a7e9784afa8592bac5e5b144c3729a233265de26516b97df8d84"}, 0xc8, 0x40}, {&(0x7f0000000e00)={0x27, 0x1, 0x0, 0x6, 0x8, 0x9, "38f54216dddba4e44dea41899d8b05c95194f99bceb28dda80d6e99ceaef8c84fe09cfdccaf071f089b8568db8d4cf1615185eaac3d12d7c5b648a6be31643", 0x25}, 0x60, &(0x7f0000000880)=[{&(0x7f0000000640)="55599473e4a22b6671855d3ae386b437192aa6a5b93ea175f787d8d403e7d56a06a63f27caca37ae635cba8720065527238dafc1ea7dbe2cbf7f543c50b36a06e7e2e6d46ada6ec78e7a1261efe674f7323b67f0b98e9fb66a7167b3701ec5e07420afc396aadd72ddafa9312aa02e746cecb78a223184b908e9b2", 0x7b}, {&(0x7f0000000b00)="6131b97b64144ad40ca7f55f84e7680cda006abef427896b68973a1a5e214a42b3ee56dc6f4672188fbcca9ad2e09d413e626f717512715840ca512d09d373732feba93bf58ea5aff20d6ccf049155974ad5aec89284ba9321c8b42df2ffcbc1d2e2dbba1b0716a6fa39c5cc15f74d5928a94d10b4dd953df8f5d41665752f07860edce74e3581becf1be6e96222c87a8d18a27772b0533c07f0ac6aa170db458e1345639f5002ac0fa8242bdf4035a22c715a19c653f83510841e9c58df5801eaa9b6d79d704627cadc71790905c3d7065c", 0xd2}], 0x2, &(0x7f0000000f40)={0x60, 0x191, 0x8000, "d6ec1f2e90fb6c019367e3550cdc507db67d513604e7d262b5a80a676bac5ea503d1e0080018745b1fe96a270ca90ef5a634391a72ec01152d0c4fcc55194bfcc3f94bf524fd12348448fd62a162"}, 0x60, 0x40080}], 0x5, 0x4004044) mq_open(&(0x7f0000000000)='-keyring,\x00', 0x2, 0x154, &(0x7f0000000d80)={0x6000000000000, 0x3f, 0x10001, 0x4}) 10:45:50 executing program 4: ioctl$KVM_SET_ONE_REG(0xffffffffffffffff, 0x4010aeac, &(0x7f0000000000)={0x1c0, 0x5}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 10:45:50 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x206, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:50 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x2, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x40000000010001}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x1) 10:45:50 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) prctl$PR_SET_TSC(0x1a, 0x3) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth0\x00', 0x700}) 10:45:50 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000100)="44785e48cd5f2700d6563c", 0xb) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000200)={0x2, 0x1, {0xffffffffffffffff, 0x1, 0x400, 0x2, 0x59000000}, 0x2}) ioctl$TIOCSCTTY(r3, 0x540e, 0x0) r4 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10:45:50 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc2, 0x10001}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000000)={0x3, 0x20343059, 0x0, 0x6, 0x0, @discrete={0x10000, 0x2}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r3, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) fcntl$addseals(r3, 0x409, 0xc) 10:45:51 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) 10:45:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) execveat(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000040)='bridge_slave_1\x00'], &(0x7f0000000300)=[&(0x7f0000000180)='bridge_slave_1\x00', &(0x7f00000001c0)='$-\\$vboxnet1$selinux[&/wlan1selinux\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='bridge_slave_1\x00'], 0x1000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:51 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) 10:45:51 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) connect$rose(r2, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x6000, 0x0) select(0x40, &(0x7f0000000000)={0x1, 0x7fff, 0x5, 0x9, 0x476, 0xfffffffffffffff9, 0x2, 0x2}, &(0x7f0000000040)={0x7f, 0xec4, 0xe6ad, 0x800, 0xff, 0x0, 0x6}, &(0x7f0000000080)={0x1, 0x7ff, 0xffff, 0x1, 0x10000, 0x168d, 0xfff, 0x8000}, &(0x7f00000000c0)={0x77359400}) 10:45:51 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000)) write$binfmt_misc(r0, &(0x7f0000000300)={'syz1', "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"}, 0x1004) 10:45:51 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) execveat(r4, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000040)='bridge_slave_1\x00'], &(0x7f0000000300)=[&(0x7f0000000180)='bridge_slave_1\x00', &(0x7f00000001c0)='$-\\$vboxnet1$selinux[&/wlan1selinux\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='bridge_slave_1\x00'], 0x1000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:52 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000000)={0x6000000000000, 0x9bc4, 0x10001}) 10:45:52 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x10001, 0x2, &(0x7f0000000240)=[{&(0x7f0000000100)="bb7edd9db20b98dd3d5614fa8604607295e817913608a926a3ce912b", 0x1c, 0x1}, {&(0x7f0000000180)="5030559b1aa51b63861e9196dadda51ab232ba2e45a274c2198a7007da24f7c567e5e5e6dd88c94f2b588aeb9e3994f62b945ca27f17388246f245e58b39edfde112eea785bdb50d4e883bf4982ce6c91965c65ea8ff54b4e8cb6e1144742a06ee9dc62f948fabd37c234b570d53e5f200da29f9ba8a72d86b1e6357057079d8a49837cbc04a35de888168b51e99a538ae09a7b2e54db56eeed86336d364a1024a13576756dde7493b391765", 0xac, 0x4}], 0x8000, &(0x7f0000000300)='/dev/net/tun\x00') 10:45:52 executing program 5: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) connect$rose(r2, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x6000, 0x0) select(0x40, &(0x7f0000000000)={0x1, 0x7fff, 0x5, 0x9, 0x476, 0xfffffffffffffff9, 0x2, 0x2}, &(0x7f0000000040)={0x7f, 0xec4, 0xe6ad, 0x800, 0xff, 0x0, 0x6}, &(0x7f0000000080)={0x1, 0x7ff, 0xffff, 0x1, 0x10000, 0x168d, 0xfff, 0x8000}, &(0x7f00000000c0)={0x77359400}) 10:45:52 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$read(0xb, r2, &(0x7f0000001480)=""/4107, 0x100b) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$read(0xb, r4, &(0x7f0000001480)=""/4107, 0x100b) r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r4) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000380)='y\x00', 0x2, 0x0) keyctl$instantiate(0xc, r2, 0x0, 0x0, r5) r6 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, r6) r8 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000480)="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", 0x107, r7) r9 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r8, r9, r8}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$describe(0x6, r8, &(0x7f0000000000)=""/63, 0x3f) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x200, 0x0) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f0000000080)=0xec6) 10:45:52 executing program 5: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) connect$rose(r2, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x6000, 0x0) select(0x40, &(0x7f0000000000)={0x1, 0x7fff, 0x5, 0x9, 0x476, 0xfffffffffffffff9, 0x2, 0x2}, &(0x7f0000000040)={0x7f, 0xec4, 0xe6ad, 0x800, 0xff, 0x0, 0x6}, &(0x7f0000000080)={0x1, 0x7ff, 0xffff, 0x1, 0x10000, 0x168d, 0xfff, 0x8000}, &(0x7f00000000c0)={0x77359400}) 10:45:53 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 10:45:53 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r3 = dup3(0xffffffffffffffff, r2, 0x80000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r4, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="1f000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000000c0)={r6}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000180)={r6, @in={{0x2, 0x4e20, @private=0xa010102}}}, &(0x7f0000000240)=0x84) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:53 executing program 5: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) connect$rose(r2, &(0x7f0000000100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x6000, 0x0) select(0x40, &(0x7f0000000000)={0x1, 0x7fff, 0x5, 0x9, 0x476, 0xfffffffffffffff9, 0x2, 0x2}, &(0x7f0000000040)={0x7f, 0xec4, 0xe6ad, 0x800, 0xff, 0x0, 0x6}, &(0x7f0000000080)={0x1, 0x7ff, 0xffff, 0x1, 0x10000, 0x168d, 0xfff, 0x8000}, &(0x7f00000000c0)={0x77359400}) 10:45:53 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x10001, 0x2, &(0x7f0000000240)=[{&(0x7f0000000100)="bb7edd9db20b98dd3d5614fa8604607295e817913608a926a3ce912b", 0x1c, 0x1}, {&(0x7f0000000180)="5030559b1aa51b63861e9196dadda51ab232ba2e45a274c2198a7007da24f7c567e5e5e6dd88c94f2b588aeb9e3994f62b945ca27f17388246f245e58b39edfde112eea785bdb50d4e883bf4982ce6c91965c65ea8ff54b4e8cb6e1144742a06ee9dc62f948fabd37c234b570d53e5f200da29f9ba8a72d86b1e6357057079d8a49837cbc04a35de888168b51e99a538ae09a7b2e54db56eeed86336d364a1024a13576756dde7493b391765", 0xac, 0x4}], 0x8000, &(0x7f0000000300)='/dev/net/tun\x00') [ 1807.461396] print_req_error: I/O error, dev loop5, sector 0 10:45:53 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000, 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000340)="247dc779159e78c97368499093d98d5dcbe497348bab1837344f5369d452ec2d12a333e3615aa0f7301074140001feb69a80bb3acafd7654667e9699e56b697c89821400de0200aa8d2a8e626971afd6d02189cdd8ae3c5a815c7071f37d985a7ee678efd31b676361566adedcb045747ef356e715602f3d3759cefa207055e903555843173b87ca84732186948ee5302d73b3feb1f3b5c526438ebc82311729756c7e8a35ccf15ec3fb78d31dc634", 0xaf, 0x24004820, &(0x7f0000030ff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)={r3}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r3, @in={{0x2, 0x4e22, @local}}}, 0x84) socket$kcm(0x10, 0x7, 0x10) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$BLKROSET(r6, 0x125d, &(0x7f0000000000)=0x4) 10:45:53 executing program 5 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1807.701530] FAULT_INJECTION: forcing a failure. [ 1807.701530] name failslab, interval 1, probability 0, space 0, times 0 [ 1807.724967] CPU: 0 PID: 27414 Comm: syz-executor.5 Not tainted 4.14.181-syzkaller #0 [ 1807.732889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1807.742286] Call Trace: [ 1807.744895] dump_stack+0x1b2/0x283 [ 1807.748554] should_fail.cold+0x10a/0x154 [ 1807.752735] should_failslab+0xd6/0x130 [ 1807.756724] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 1807.761437] ion_alloc+0x16a/0x7c0 [ 1807.765007] ? ion_dma_buf_release+0x40/0x40 [ 1807.769439] ? __might_fault+0x177/0x1b0 [ 1807.773546] ion_ioctl+0xef/0x1f8 [ 1807.777012] ? ion_alloc.cold+0x3d/0x3d [ 1807.781007] ? selinux_file_ioctl+0x3f7/0x560 [ 1807.785518] ? ion_alloc.cold+0x3d/0x3d [ 1807.789508] do_vfs_ioctl+0x75a/0xfe0 [ 1807.793347] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1807.799021] ? ioctl_preallocate+0x1a0/0x1a0 [ 1807.803462] ? security_file_ioctl+0x76/0xb0 [ 1807.808060] ? security_file_ioctl+0x83/0xb0 [ 1807.812493] SyS_ioctl+0x7f/0xb0 [ 1807.815913] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1807.820014] do_syscall_64+0x1d5/0x640 [ 1807.823938] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1807.829190] RIP: 0033:0x45ca29 [ 1807.832417] RSP: 002b:00007fcf08d3dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1807.840146] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 10:45:54 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xfffffffffffffc62, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="55000002", @ANYRES16=r0, @ANYBLOB="00032abd7000fedbdf2506000000080007000000000014000600fe8000000000000000000000000000bb09000100544950430000000008000700ac1414aa08000c000000000008000c0002000000080007000a010100"], 0x5c}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x74, r0, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, [], 0x6}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x74}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x40010, r7, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000140)=""/70, &(0x7f0000000340)=""/228, &(0x7f0000000440)=""/4096, 0x5000}) r8 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) accept4$llc(r9, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x80000) r10 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r10, 0x0) mq_getsetattr(r10, &(0x7f0000000000)={0x9, 0x1, 0xaee, 0x100000000}, &(0x7f0000000040)) [ 1807.847427] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1807.854710] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1807.862015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1807.869305] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007fcf08d3e6d4 10:45:54 executing program 5 (fault-call:2 fault-nth:1): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:54 executing program 4: mq_open(&(0x7f0000000000)='$|\xd7\x9b\x880`\xc3\x01-', 0x40, 0x0, &(0x7f0000000240)={0x2000000000005, 0x1, 0x107fd}) [ 1807.974771] FAULT_INJECTION: forcing a failure. [ 1807.974771] name failslab, interval 1, probability 0, space 0, times 0 10:45:54 executing program 4: socket$inet6(0xa, 0x6, 0x7fff) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x410842, 0x0) sendmsg$SOCK_DESTROY(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"/567], 0x1e4}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) [ 1808.033312] CPU: 1 PID: 27422 Comm: syz-executor.5 Not tainted 4.14.181-syzkaller #0 [ 1808.041220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1808.050685] Call Trace: [ 1808.053297] dump_stack+0x1b2/0x283 [ 1808.056942] should_fail.cold+0x10a/0x154 [ 1808.061105] should_failslab+0xd6/0x130 [ 1808.065198] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 1808.069891] ion_system_heap_allocate+0x342/0x8c0 [ 1808.074752] ? ion_system_contig_heap_create+0x130/0x130 [ 1808.080313] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1808.085163] ion_alloc+0x1e9/0x7c0 [ 1808.088762] ? ion_dma_buf_release+0x40/0x40 [ 1808.093181] ? __might_fault+0x177/0x1b0 [ 1808.097250] ion_ioctl+0xef/0x1f8 [ 1808.100709] ? ion_alloc.cold+0x3d/0x3d [ 1808.104694] ? selinux_file_ioctl+0x3f7/0x560 [ 1808.109191] ? ion_alloc.cold+0x3d/0x3d [ 1808.113176] do_vfs_ioctl+0x75a/0xfe0 [ 1808.116984] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1808.122714] ? ioctl_preallocate+0x1a0/0x1a0 [ 1808.127137] ? security_file_ioctl+0x76/0xb0 [ 1808.131607] ? security_file_ioctl+0x83/0xb0 [ 1808.136018] SyS_ioctl+0x7f/0xb0 [ 1808.139398] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1808.143393] do_syscall_64+0x1d5/0x640 [ 1808.147299] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1808.153531] RIP: 0033:0x45ca29 [ 1808.156723] RSP: 002b:00007fcf08d3dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1808.164443] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1808.172444] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1808.179717] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1808.186996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1808.194529] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007fcf08d3e6d4 10:45:54 executing program 4: mq_open(&(0x7f0000000040)='(keyringv\xc2', 0x2, 0x0, &(0x7f0000000000)={0x6000000000000, 0x9bc4, 0x10001}) 10:45:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x0, 0x0, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008840}, 0x20040041) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000140)={'bridge_slave_1\x00', 0x400}) 10:45:54 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, 0x0, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="08002abd7000fbdbdf250c000000060028000400080031000700010008000b00040000000500380000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008011}, 0x80) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0xa04, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1e74}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008801}, 0x2004c006) r4 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000340)={[0x400, 0x8, 0x6, 0x4c09, 0x101, 0x8000, 0x800, 0x6, 0x3, 0x401, 0x81, 0x200, 0x6, 0xffffffff, 0x1d9, 0x8, 0x1, 0x5, 0x6, 0x93b, 0xffffffff, 0x6, 0xda70, 0x5, 0x4, 0x1, 0x8, 0xffff, 0x6, 0x7b9, 0x1c00, 0x8, 0x81, 0x7ff, 0xd9a1, 0x400, 0x401, 0x7ad, 0x0, 0x6, 0x5, 0x1, 0x5, 0x7f, 0x5, 0x7, 0x8, 0x74e9374a, 0x5, 0x56, 0x8, 0x401, 0x7, 0x2, 0x1, 0xfffffffa, 0x1, 0x81, 0x0, 0x29025c36, 0x4, 0x25, 0xfffffffc, 0x9, 0x0, 0x7, 0x5, 0x0, 0x1, 0x98, 0x10000, 0x3, 0x9, 0x3ff, 0x7, 0x0, 0x2, 0x1e, 0x91, 0x40, 0x7, 0x6, 0x1, 0x80000000, 0x6, 0x9, 0x5, 0x7, 0x1, 0x4, 0x3c, 0x8f0, 0x2, 0x0, 0x10000, 0x0, 0x5, 0x81, 0x3, 0xfffff800, 0x7, 0xc5, 0x40, 0x9, 0x6a607060, 0x7, 0x3719, 0x5, 0x20, 0xa9cb, 0x200, 0x6, 0x128, 0x0, 0x3, 0x80000000, 0x0, 0x7fff, 0xffff10ed, 0x2, 0x3, 0x2, 0x74, 0x3, 0x1ff, 0x3, 0xb4d, 0x71, 0x6, 0x5, 0x401, 0x4, 0x9, 0x0, 0xc5, 0x9, 0x2, 0xae, 0x4a, 0xf5, 0x9, 0x3, 0x3, 0x400, 0x3f, 0xc1, 0xa0e, 0x4, 0x3d7, 0x80000001, 0x1f, 0x8, 0x4, 0x1f5f, 0x1, 0x7, 0x8, 0x8, 0x9, 0xfffffffa, 0x10000, 0x3, 0x4, 0x7, 0x3, 0x80000000, 0x1, 0x2, 0x20, 0x3f, 0x8, 0xd9c7, 0x9, 0x6, 0x8, 0x0, 0x5d, 0x1, 0x20, 0x6, 0x1, 0x7, 0x3ff, 0xfffffffa, 0x6, 0xfffeffff, 0x6, 0x40, 0x4, 0x0, 0x6, 0x3, 0xffffffff, 0x7, 0xfffffff9, 0x7f, 0x80, 0x100, 0x5fe, 0x8, 0x40000, 0x8, 0x7c, 0x0, 0x5, 0x1, 0x1, 0x10000, 0x8, 0x6, 0x2, 0x2, 0x80, 0xd2af, 0x3, 0x0, 0x800, 0x8, 0x4, 0x800, 0x8, 0x2, 0x8, 0x1, 0x2db, 0x978, 0x0, 0x6, 0x7, 0x4, 0x0, 0x0, 0x7, 0x2, 0x10000, 0x1, 0x6, 0x315, 0x0, 0xff, 0x7, 0x5, 0x101, 0x1, 0x7, 0x2, 0xc9, 0xffffffff, 0x1ff, 0x3a000, 0x100, 0x87df, 0x0, 0x6, 0x0, 0x81, 0x2, 0x9703, 0x9, 0xfff, 0x9, 0x3, 0x8, 0x2, 0x4, 0x4, 0x20, 0x0, 0x10000, 0xa3b, 0x2, 0x0, 0x0, 0x4b8, 0x4, 0x0, 0xfffffffc, 0x6, 0x4, 0x2000, 0x100, 0x3ff, 0x5, 0x3f, 0x6, 0x1, 0x0, 0x81, 0x2, 0x20, 0x229, 0x6, 0x1f, 0xfffffff7, 0x0, 0x6, 0x401, 0x7, 0x5, 0x5, 0x0, 0x0, 0x8001, 0x5, 0x4, 0xa05, 0xf1ec, 0x6, 0x5, 0x9, 0x8, 0x6, 0x100, 0xfffff0c1, 0x9, 0x1f, 0x80, 0x5, 0x0, 0x1, 0x1, 0x3, 0x9, 0xffffffff, 0x1ff, 0xfffffff9, 0xe7f0, 0x3, 0x4, 0x1, 0x7, 0x80, 0x0, 0x7, 0xfffffffc, 0x3, 0x3, 0x1000, 0x0, 0x0, 0x80000000, 0x101, 0x6, 0x20, 0x4, 0x7, 0x9, 0x0, 0x6, 0x3, 0x2, 0x61595695, 0x3, 0x7fff, 0x5626fccd, 0x0, 0xe3, 0x1f, 0x1, 0x5, 0x1, 0x5, 0x8, 0x5, 0x400, 0x6, 0x4, 0x100, 0x7, 0xfad946c, 0x80, 0x2, 0x6, 0x32c98ada, 0x3, 0x800, 0x8, 0x9, 0xad, 0xff, 0x3, 0x1f0, 0x7, 0x2, 0x2, 0x6, 0x2, 0x80, 0x4, 0x1f, 0x4, 0x3b, 0x8, 0x4, 0x8001, 0xc3, 0x80, 0xfffffff8, 0x4, 0x6, 0x0, 0x0, 0xfff, 0x3b, 0x6, 0x31, 0x1, 0x7f, 0xffffffff, 0x800, 0x10000, 0x19, 0x9, 0x9, 0x9, 0x9, 0x7, 0x5, 0x7, 0x7, 0x100, 0xffffffff, 0x7, 0x9, 0x8000000, 0x0, 0x1f, 0x6, 0x8, 0x40, 0xd4, 0x3, 0xff, 0x8, 0x7c4f, 0x2fa, 0x80000001, 0xfff, 0x2, 0x0, 0x5, 0x6, 0x5, 0x9cc8, 0x3, 0x401, 0x1ff, 0x5, 0xee3, 0x7, 0x1, 0x3, 0x101, 0xdda4, 0x8, 0xf7, 0xfffff3d6, 0x6, 0x1, 0x8, 0x80000000, 0x3f, 0xd8, 0x7, 0x9, 0x800, 0xfffffc00, 0x2e, 0x0, 0x4, 0x8, 0x9, 0x9, 0x81, 0x200, 0x7, 0xbc11, 0xe05, 0x6, 0x0, 0x2, 0x9, 0x7, 0x7, 0x3, 0x8000, 0x7, 0x4, 0x7, 0x400, 0x6, 0x2, 0x7f, 0xb4b, 0x3, 0x0, 0x0, 0x8, 0x4, 0x9, 0x2, 0x219f, 0x20, 0x1, 0xffffffff, 0x2, 0x90, 0x6, 0x7, 0x7f, 0xff, 0x0, 0x57d, 0x20, 0x3ff, 0xea5d, 0x3, 0x6, 0x7f, 0x3ff, 0x40, 0xe1c, 0x5, 0x4, 0x7, 0x40, 0xe5, 0xc2, 0x652, 0x6c0dddf6, 0x8, 0x7, 0x93000000, 0x6, 0x2, 0xfffffffe, 0x3, 0xffff0001, 0xffffffff, 0x782e, 0xfffff801, 0x6, 0xfffffff9, 0x1000, 0x6, 0x5152e759, 0x6, 0x7fffffff, 0x7, 0xfffffff9, 0x1, 0xfffffffc, 0x5, 0x9, 0x4afe, 0x9c61, 0xffff, 0xae8, 0x7fff, 0x8001, 0x1000000, 0x0, 0x7, 0x8, 0x2, 0x2, 0x3, 0xffffffff, 0x7, 0x1, 0x80000000, 0x10001, 0xffffffff, 0x3, 0x9, 0x5, 0x2, 0x5, 0x2, 0x76, 0x7, 0xde2, 0x4, 0x3, 0xfffff801, 0x7, 0x6, 0x1, 0x2, 0x1ff, 0x4, 0x5, 0x5, 0xd1d, 0x2f4, 0xe6, 0xfffffeff, 0x5, 0xf4, 0x1, 0x7, 0x640, 0x8, 0x8, 0x7f, 0x5, 0x4, 0x4, 0x8, 0xcfb1, 0x1, 0x1, 0xfff, 0x3f, 0x5, 0x3, 0x2, 0xd2d, 0x7, 0x477e, 0x1000, 0x8000, 0x3, 0x9, 0x40, 0x9, 0x5, 0x581b, 0x3, 0x81, 0xdc, 0x513, 0x7, 0x10000, 0x7, 0x4, 0xb2aa, 0xffffff70, 0xc6, 0x7, 0xffffffff, 0x8, 0x8000, 0x400, 0x5, 0x37e1, 0xc000, 0xfd, 0xaa4, 0x0, 0x20, 0x9, 0x9, 0xddf, 0xfe6, 0x4, 0x5000000, 0x80, 0x749, 0xffff, 0x5d52, 0x7f, 0x0, 0x1000, 0x4, 0x9, 0xe812, 0x63f, 0x10000, 0x9, 0x1, 0xfffff801, 0x9, 0x8, 0x0, 0x800, 0x8, 0x7, 0xff, 0x1, 0x9, 0x5, 0x1, 0x7ff, 0x9, 0x101, 0x3, 0x8001, 0x9, 0x80, 0x20, 0x7fffffff, 0xfffffffc, 0x8, 0x81, 0x5, 0x1, 0x2, 0x4, 0x8000, 0x0, 0x8000, 0xffffffff, 0xfffffff9, 0x4, 0x1, 0xffffff01, 0x997f, 0x80, 0xeece, 0x1, 0x1, 0x3ff, 0x80000000, 0x36e, 0x20, 0xd67, 0x80000001, 0x80000000, 0x9b, 0x7, 0x20, 0x6, 0x3, 0x3f, 0x8001, 0x7ff, 0x2, 0x77d, 0x400, 0x57, 0x51bf, 0x927b, 0x10000, 0x200, 0x5, 0x7, 0xff, 0x8000, 0x3, 0x4, 0x1f, 0x6, 0x7, 0x81, 0x4, 0x7, 0x1, 0x8, 0x2000, 0x5, 0x81, 0x80000000, 0x2, 0x2, 0x7, 0x3b0bd1c4, 0x7, 0x6, 0x8d3c, 0x9, 0x601, 0x9, 0xfffff000, 0xffff0001, 0x2, 0xb7b, 0x2, 0x2, 0x80000001, 0xa6cf, 0x3, 0x7d, 0x80000000, 0x2, 0x4, 0x1ff, 0x5, 0x20, 0x6d, 0x5, 0x3, 0x5, 0x2, 0x7ff, 0x3, 0x3, 0x6, 0x7, 0x0, 0x10000, 0x81, 0x1, 0x6, 0x2, 0x96, 0x2, 0xe9bc, 0x3, 0x1, 0x101, 0x9, 0x8001, 0x7fffffff, 0x6, 0x5, 0x5, 0x80000000, 0xffff, 0x0, 0x401, 0x0, 0x0, 0x2, 0x3, 0x5, 0x10000, 0x401, 0x5, 0x7fffffff, 0xe7, 0x0, 0x9, 0x7, 0x4, 0x5, 0xc000, 0x1, 0x1f, 0x8, 0x7fff, 0x3, 0x8b, 0xfffffff7, 0x8, 0x4, 0x80000000, 0xfffffffb, 0x1, 0x2, 0xfffffff7, 0x0, 0x401, 0x80, 0x5, 0x1642, 0x0, 0x4, 0x36a6, 0x0, 0x37cc0092, 0x8000, 0x5, 0x4d7, 0x7fffffff, 0x3, 0x0, 0x257f387d, 0x1, 0x4, 0x0, 0x40, 0x200, 0x80000001, 0x4, 0x5, 0x3, 0xfffffe00, 0xdd0, 0x7, 0xee, 0x1, 0x3, 0x80000000, 0xd66, 0x40, 0x0, 0x9, 0x9, 0x2, 0x1f, 0x4, 0x9, 0x9, 0x4, 0xfb5, 0xfffffff8, 0x5, 0x1, 0x8001, 0x0, 0x0, 0x1, 0x6, 0x3f, 0x4e, 0x80000000, 0x0, 0x4, 0x83, 0x80000000, 0x7fff, 0x118f5cac, 0x9, 0x8, 0x1000, 0xd7d, 0x1, 0x904, 0x3c, 0x10000, 0x0, 0x81, 0x40, 0x9, 0x2, 0x5, 0x101, 0x200, 0x7, 0xda, 0x7, 0x3, 0x8, 0x7fff, 0x3ff, 0x8, 0x2, 0x2, 0x2c4, 0x6a8, 0x7fff, 0xe0000000, 0x7, 0xdb29, 0x1, 0x6, 0x52, 0x400, 0x1, 0x2, 0x4dc43713, 0x2, 0xffff, 0x3, 0x80000000, 0x0, 0x6, 0x10000, 0x9, 0x7, 0x9, 0x4, 0x5, 0x1, 0x7, 0x0, 0x10001, 0x4, 0x7, 0x5, 0x200, 0x7, 0x222, 0x7f, 0xfffffb95, 0xfffffff7, 0x6, 0xfffffffa, 0x7, 0x2, 0x8000, 0x10001, 0x7f, 0x5, 0x3, 0x8, 0x4, 0x3, 0x800, 0x5, 0x2, 0x7fff, 0x3ff, 0x0, 0x6, 0x0, 0x200, 0x7ff, 0xb7ed, 0x0, 0xb444, 0xe, 0xec3, 0x5, 0x8, 0xf1dd, 0x81, 0x7, 0x2, 0x3a, 0x3, 0x7f, 0x4, 0x7, 0x5, 0x3, 0x10001, 0x7, 0x7ff, 0x8000, 0xffff, 0x2, 0x0, 0x5, 0x4, 0x4, 0x9, 0x400, 0x0, 0x4, 0x40, 0x1, 0x40]}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x3, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x40}, 0x40840) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r9, 0x0) read$rfkill(r9, &(0x7f0000000000), 0x8) 10:45:54 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'veth1_vlan\x00', 0x10}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x102}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) write$selinux_attr(r4, &(0x7f0000000000)='system_u:object_r:update_modules_exec_t:s0\x00', 0x2b) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9000, 0xfffffffffffffc, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10:45:54 executing program 5 (fault-call:2 fault-nth:2): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:54 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x6a, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$read(0xb, r3, &(0x7f0000001480)=""/4107, 0x100b) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000400)={0x9, 0x5, 0x8, 0x4, 0x6, "42922ee1bbfe508b42b8126954bd9ba1ef8c99"}) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r4, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r4, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) getsockname(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000380)=0x80) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$read(0xb, r6, &(0x7f0000001480)=""/4107, 0x100b) r7 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r6) keyctl$instantiate(0xc, r3, 0x0, 0x0, r7) keyctl$instantiate(0xc, r0, &(0x7f0000000000)=ANY=[@ANYBLOB='load ecryptfs trusted:posix_acl_accessproc*em0-*& 0000000000000?054647 c\x00'], 0x49, r3) [ 1808.694731] FAULT_INJECTION: forcing a failure. [ 1808.694731] name failslab, interval 1, probability 0, space 0, times 0 [ 1808.730244] CPU: 0 PID: 27493 Comm: syz-executor.5 Not tainted 4.14.181-syzkaller #0 [ 1808.738257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1808.747636] Call Trace: [ 1808.750591] dump_stack+0x1b2/0x283 [ 1808.754250] should_fail.cold+0x10a/0x154 [ 1808.758423] should_failslab+0xd6/0x130 [ 1808.762414] __kmalloc+0x2c1/0x400 [ 1808.765967] ? sg_kmalloc+0x26/0x60 [ 1808.769798] sg_kmalloc+0x26/0x60 [ 1808.773268] __sg_alloc_table+0x25c/0x3a0 [ 1808.777469] ? sg_free_table+0x210/0x210 [ 1808.781738] sg_alloc_table+0x36/0x230 [ 1808.785651] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1808.790518] ion_system_heap_allocate+0x365/0x8c0 [ 1808.796949] ? ion_system_contig_heap_create+0x130/0x130 [ 1808.802421] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1808.807285] ion_alloc+0x1e9/0x7c0 [ 1808.810852] ? ion_dma_buf_release+0x40/0x40 [ 1808.815808] ? __might_fault+0x177/0x1b0 [ 1808.819890] ion_ioctl+0xef/0x1f8 [ 1808.823357] ? ion_alloc.cold+0x3d/0x3d [ 1808.827486] ? selinux_file_ioctl+0x3f7/0x560 [ 1808.832239] ? ion_alloc.cold+0x3d/0x3d [ 1808.836249] do_vfs_ioctl+0x75a/0xfe0 [ 1808.840071] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1808.845755] ? ioctl_preallocate+0x1a0/0x1a0 [ 1808.850212] ? security_file_ioctl+0x76/0xb0 [ 1808.855016] ? security_file_ioctl+0x83/0xb0 [ 1808.859450] SyS_ioctl+0x7f/0xb0 [ 1808.862839] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1808.866845] do_syscall_64+0x1d5/0x640 [ 1808.870765] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1808.876062] RIP: 0033:0x45ca29 [ 1808.879263] RSP: 002b:00007fcf08d3dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1808.886992] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1808.894367] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1808.902002] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1808.910457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1808.918296] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007fcf08d3e6d4 10:45:55 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x20010, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r4, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r4, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 10:45:55 executing program 2 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:55 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x7, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000200)) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xe000c5d880219c7d, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={r5, 0x0, 0xff, 0x2, 0x6, 0x101, 0x1000, 0x3, 0x80, 0x68833042, 0x7, 0x1f}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={r5, 0x2, 0x8, 0x800, 0x2, 0xffffffff, 0x10000, 0xb155, 0x2, 0xfe, 0x2cb3, 0x10001}) 10:45:55 executing program 4: remap_file_pages(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000007, 0x8, 0x20000) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) 10:45:55 executing program 5 (fault-call:2 fault-nth:3): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1809.664415] FAULT_INJECTION: forcing a failure. [ 1809.664415] name failslab, interval 1, probability 0, space 0, times 0 [ 1809.667934] FAULT_INJECTION: forcing a failure. [ 1809.667934] name failslab, interval 1, probability 0, space 0, times 0 [ 1809.687235] CPU: 0 PID: 27508 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0 [ 1809.695256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1809.705065] Call Trace: [ 1809.707677] dump_stack+0x1b2/0x283 [ 1809.711341] should_fail.cold+0x10a/0x154 [ 1809.715509] should_failslab+0xd6/0x130 [ 1809.719706] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 1809.724392] ion_alloc+0x16a/0x7c0 [ 1809.727955] ? ion_dma_buf_release+0x40/0x40 [ 1809.732382] ? __might_fault+0x177/0x1b0 [ 1809.736470] ion_ioctl+0xef/0x1f8 [ 1809.739938] ? ion_alloc.cold+0x3d/0x3d [ 1809.743931] ? selinux_file_ioctl+0x3f7/0x560 [ 1809.748450] ? ion_alloc.cold+0x3d/0x3d [ 1809.752455] do_vfs_ioctl+0x75a/0xfe0 [ 1809.756263] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1809.761893] ? ioctl_preallocate+0x1a0/0x1a0 [ 1809.766324] ? security_file_ioctl+0x76/0xb0 [ 1809.770845] ? security_file_ioctl+0x83/0xb0 [ 1809.775261] SyS_ioctl+0x7f/0xb0 [ 1809.778626] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1809.782616] do_syscall_64+0x1d5/0x640 [ 1809.786524] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1809.796418] RIP: 0033:0x45ca29 [ 1809.799624] RSP: 002b:00007fd45a75ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1809.807367] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1809.814650] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1809.822027] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1809.829423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1809.836788] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007fd45a75b6d4 [ 1809.882020] CPU: 1 PID: 27511 Comm: syz-executor.5 Not tainted 4.14.181-syzkaller #0 [ 1809.890111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1809.899471] Call Trace: [ 1809.902073] dump_stack+0x1b2/0x283 [ 1809.905814] should_fail.cold+0x10a/0x154 [ 1809.910505] should_failslab+0xd6/0x130 [ 1809.914576] __kmalloc+0x2c1/0x400 [ 1809.918210] ? dma_buf_export+0x20b/0xa20 [ 1809.922550] ? lock_downgrade+0x6e0/0x6e0 [ 1809.926881] dma_buf_export+0x20b/0xa20 [ 1809.931046] ion_alloc+0x57d/0x7c0 [ 1809.934603] ? ion_dma_buf_release+0x40/0x40 [ 1809.939804] ? __might_fault+0x177/0x1b0 [ 1809.943873] ion_ioctl+0xef/0x1f8 [ 1809.947936] ? ion_alloc.cold+0x3d/0x3d [ 1809.951921] ? selinux_file_ioctl+0x3f7/0x560 [ 1809.956423] ? ion_alloc.cold+0x3d/0x3d [ 1809.960585] do_vfs_ioctl+0x75a/0xfe0 [ 1809.964396] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1809.970031] ? ioctl_preallocate+0x1a0/0x1a0 [ 1809.974463] ? security_file_ioctl+0x76/0xb0 [ 1809.978876] ? security_file_ioctl+0x83/0xb0 [ 1809.983477] SyS_ioctl+0x7f/0xb0 [ 1809.986847] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1809.990860] do_syscall_64+0x1d5/0x640 [ 1809.994759] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1809.999951] RIP: 0033:0x45ca29 [ 1810.003145] RSP: 002b:00007fcf08d3dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1810.010886] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1810.018163] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1810.025462] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1810.032861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1810.040242] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007fcf08d3e6d4 10:45:56 executing program 2 (fault-call:2 fault-nth:1): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:56 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$TIOCNXCL(r3, 0x540d) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:56 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r1 = dup(r0) sendto$x25(r1, &(0x7f0000000280)="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", 0x1000, 0x8000, &(0x7f0000000000)={0x9, @remote={[], 0x3}}, 0x12) 10:45:56 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2d, 'io'}, {0x0, 'io'}, {0x2b, 'cpu'}]}, 0xd) [ 1810.161502] FAULT_INJECTION: forcing a failure. [ 1810.161502] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.226450] CPU: 0 PID: 27522 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0 [ 1810.234467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1810.243955] Call Trace: [ 1810.246569] dump_stack+0x1b2/0x283 [ 1810.250231] should_fail.cold+0x10a/0x154 [ 1810.254408] should_failslab+0xd6/0x130 [ 1810.258399] kmem_cache_alloc_trace+0x2b7/0x3f0 [ 1810.263103] ion_system_heap_allocate+0x342/0x8c0 [ 1810.267976] ? ion_system_contig_heap_create+0x130/0x130 [ 1810.275791] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1810.280662] ion_alloc+0x1e9/0x7c0 [ 1810.284232] ? ion_dma_buf_release+0x40/0x40 [ 1810.288805] ? __might_fault+0x177/0x1b0 [ 1810.292992] ion_ioctl+0xef/0x1f8 [ 1810.296464] ? ion_alloc.cold+0x3d/0x3d [ 1810.300457] ? selinux_file_ioctl+0x3f7/0x560 [ 1810.305479] ? ion_alloc.cold+0x3d/0x3d [ 1810.309532] do_vfs_ioctl+0x75a/0xfe0 [ 1810.313350] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1810.319088] ? ioctl_preallocate+0x1a0/0x1a0 [ 1810.323627] ? security_file_ioctl+0x76/0xb0 [ 1810.328322] ? security_file_ioctl+0x83/0xb0 [ 1810.333071] SyS_ioctl+0x7f/0xb0 [ 1810.336463] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1810.340470] do_syscall_64+0x1d5/0x640 [ 1810.344475] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1810.349792] RIP: 0033:0x45ca29 [ 1810.352984] RSP: 002b:00007fd45a75ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1810.360984] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1810.368275] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 10:45:56 executing program 0: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xd13c, 0x0, 0x3}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:56 executing program 4: r0 = mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) ioctl$DRM_IOCTL_MODE_SETGAMMA(0xffffffffffffffff, 0xc02064a5, &(0x7f00000000c0)={0x101, 0x3, &(0x7f0000000000)=[0x9, 0x5ca8, 0x9], &(0x7f0000000040)=[0x9, 0x7, 0x2, 0x9, 0x7fff], &(0x7f0000000080)=[0x7, 0x3, 0x8, 0x0, 0x8, 0x6, 0xd6, 0x2ab]}) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 10:45:56 executing program 5 (fault-call:2 fault-nth:4): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1810.375563] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1810.382938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1810.390227] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007fd45a75b6d4 [ 1810.470793] FAULT_INJECTION: forcing a failure. [ 1810.470793] name failslab, interval 1, probability 0, space 0, times 0 [ 1810.533853] CPU: 1 PID: 27537 Comm: syz-executor.5 Not tainted 4.14.181-syzkaller #0 [ 1810.541852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1810.551251] Call Trace: [ 1810.553852] dump_stack+0x1b2/0x283 [ 1810.557582] should_fail.cold+0x10a/0x154 [ 1810.561746] should_failslab+0xd6/0x130 [ 1810.565729] kmem_cache_alloc+0x28e/0x3c0 [ 1810.570063] __d_alloc+0x2a/0x9b0 [ 1810.573549] anon_inode_getfile+0x101/0x2f0 [ 1810.577878] ? reverse_path_check_proc.cold+0x20/0x20 [ 1810.583073] ? __lockdep_init_map+0x100/0x560 [ 1810.587600] ? __lockdep_init_map+0x100/0x560 [ 1810.592272] dma_buf_export+0x4c8/0xa20 [ 1810.596327] ion_alloc+0x57d/0x7c0 [ 1810.599856] ? ion_dma_buf_release+0x40/0x40 [ 1810.604797] ? __might_fault+0x177/0x1b0 [ 1810.608845] ion_ioctl+0xef/0x1f8 [ 1810.612367] ? ion_alloc.cold+0x3d/0x3d [ 1810.616355] ? selinux_file_ioctl+0x3f7/0x560 [ 1810.621276] ? ion_alloc.cold+0x3d/0x3d [ 1810.625260] do_vfs_ioctl+0x75a/0xfe0 [ 1810.629253] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1810.634861] ? ioctl_preallocate+0x1a0/0x1a0 [ 1810.639262] ? security_file_ioctl+0x76/0xb0 [ 1810.643666] ? security_file_ioctl+0x83/0xb0 [ 1810.648059] SyS_ioctl+0x7f/0xb0 [ 1810.651414] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1810.655372] do_syscall_64+0x1d5/0x640 [ 1810.659271] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1810.664474] RIP: 0033:0x45ca29 [ 1810.667742] RSP: 002b:00007fcf08d3dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1810.675458] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1810.682720] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1810.689984] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1810.697234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1810.704485] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007fcf08d3e6d4 10:45:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000040)={0x0, 0x1, 0x6}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000080)) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x7609, 0x6, 0x4, 0x20000000, 0xc550, {0x77359400}, {0x4, 0xc, 0x8, 0x0, 0x9, 0x3, "e8fa304f"}, 0x9, 0x0, @userptr=0x4, 0xfffffbff, 0x0, r1}) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000040)={0x0, 0x1, 0x6}) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x81204101, &(0x7f0000000080)) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)={0x2c, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x5, 0x2, 0x0, 0x0, 0xc2, 0x43, "84b439ed"}, 0x5, 0x6, @userptr=0x6, 0x80000000, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x100000001, 0x100) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0xe0fd, 0x3, 0x4, 0x80000000, 0x1, {0x77359400}, {0x3, 0xc, 0x1, 0x6f, 0x9, 0x3, "75e09ec2"}, 0x7, 0x3, @planes=&(0x7f00000000c0)={0x6, 0x1, @fd=r4, 0x1}, 0x20, 0x0, r5}) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x60) umount2(&(0x7f0000000540)='./file0\x00', 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0xa0001) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000100)={0x0, 0xb709, 0x800000000000}) 10:45:57 executing program 4: mq_open(&(0x7f0000000000)='\x85q\xc1+6%\x94_\x17\xd5l\x9e6*\x85\xd21{\xea\xe6`\f\xf3W\xd5|`\x0e\xfe\xbf\xb3\x03\v\xb5\x9a\x95\x02\xe9\xaa\xc4\xf7\xd4\x1b\xaf\x9e\t\x13O\xd4}\x1d\xda\x1c\xe4\x02/\xf5S\xa9x \xf2\xfc\xdd\xcd\'\xdc\x8e\xbd?\x8f\x01\xd6C\xa9\xc9\x06}\xc8\xc0\xa8H~\x15\xf6\x9b\xf4=\x03\xbc\xb8\xd9\x81\x9e\th\xb5\xf5zYF\xf3#3\x83\x04\xa9\x95y\n&Oe\x1b\x05M\xe0\xec\xa3\xac\x112w\x93\b\xa2 w\\\xdel2', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0xffffffffffffffff, 0xfffffffffffffffe}) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x24800) write$P9_ROPEN(r0, &(0x7f0000000180)={0x18, 0x71, 0x1, {{0x8, 0x0, 0x1}}}, 0x18) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1}) 10:45:57 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x7, 0xc, 0x0, 0xffffffffffffffff}) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/qat_adf_ctl\x00', 0x240000, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="38000ada40c3533179000040211b93fe96ff00212f1c87959b159494c8617a63924af9eb4f6067d4f1786f456fc1071100a9afdaefe0e5e653cb5428de4732ec2de07524a78a9f31d7e8d10bce7c4c8c238b27fdd4a74c0aea9c1c8129312b0d45a799e00d8b3e8e6a9389f97f96", @ANYRES16=r4, @ANYBLOB="0717000000000000000016000000050009"], 0x38}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000340)={0xb4, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x200}]}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff6c62}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}]}]}]}, 0xb4}}, 0x8080) r5 = dup(r2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r6, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ptrace$cont(0x7, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x4, &(0x7f0000000200)=0x6, &(0x7f0000000240)=0x2) sendto$inet(r6, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f0000000100)={0xa8, @local, 0x4e21, 0x0, 'nq\x00', 0x0, 0x1ff, 0x61}, 0x2c) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x27}}], 0x10) 10:45:57 executing program 5 (fault-call:2 fault-nth:5): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:57 executing program 2 (fault-call:2 fault-nth:2): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1811.435520] FAULT_INJECTION: forcing a failure. [ 1811.435520] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.447626] FAULT_INJECTION: forcing a failure. [ 1811.447626] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.471952] CPU: 1 PID: 27558 Comm: syz-executor.5 Not tainted 4.14.181-syzkaller #0 [ 1811.480060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1811.489419] Call Trace: [ 1811.492017] dump_stack+0x1b2/0x283 [ 1811.496695] should_fail.cold+0x10a/0x154 [ 1811.499101] print_req_error: I/O error, dev loop3, sector 0 [ 1811.500860] should_failslab+0xd6/0x130 [ 1811.500874] kmem_cache_alloc+0x28e/0x3c0 [ 1811.500887] get_empty_filp+0x86/0x3e0 [ 1811.500898] alloc_file+0x23/0x440 [ 1811.500915] anon_inode_getfile+0x163/0x2f0 [ 1811.506912] print_req_error: I/O error, dev loop3, sector 0 [ 1811.510583] ? reverse_path_check_proc.cold+0x20/0x20 [ 1811.510594] ? __lockdep_init_map+0x100/0x560 [ 1811.510614] dma_buf_export+0x4c8/0xa20 [ 1811.510628] ion_alloc+0x57d/0x7c0 [ 1811.510640] ? ion_dma_buf_release+0x40/0x40 [ 1811.510655] ? __might_fault+0x177/0x1b0 [ 1811.510667] ion_ioctl+0xef/0x1f8 [ 1811.510677] ? ion_alloc.cold+0x3d/0x3d [ 1811.510691] ? selinux_file_ioctl+0x3f7/0x560 [ 1811.514833] Buffer I/O error on dev loop3, logical block 0, async page read [ 1811.518707] ? ion_alloc.cold+0x3d/0x3d [ 1811.518720] do_vfs_ioctl+0x75a/0xfe0 [ 1811.518732] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1811.529851] print_req_error: I/O error, dev loop3, sector 0 [ 1811.532369] ? ioctl_preallocate+0x1a0/0x1a0 [ 1811.532399] ? security_file_ioctl+0x76/0xb0 [ 1811.532408] ? security_file_ioctl+0x83/0xb0 [ 1811.532419] SyS_ioctl+0x7f/0xb0 [ 1811.537622] Buffer I/O error on dev loop3, logical block 0, async page read [ 1811.542080] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1811.542093] do_syscall_64+0x1d5/0x640 [ 1811.542109] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1811.542119] RIP: 0033:0x45ca29 [ 1811.546364] print_req_error: I/O error, dev loop3, sector 0 [ 1811.549673] RSP: 002b:00007fcf08d3dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1811.549685] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1811.549690] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1811.549696] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1811.549702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1811.549708] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007fcf08d3e6d4 [ 1811.554654] CPU: 1 PID: 27557 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0 [ 1811.558346] Buffer I/O error on dev loop3, logical block 0, async page read [ 1811.561758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1811.561762] Call Trace: [ 1811.561781] dump_stack+0x1b2/0x283 [ 1811.561799] should_fail.cold+0x10a/0x154 [ 1811.561815] should_failslab+0xd6/0x130 [ 1811.561826] __kmalloc+0x2c1/0x400 [ 1811.561835] ? sg_kmalloc+0x26/0x60 [ 1811.561849] sg_kmalloc+0x26/0x60 [ 1811.561861] __sg_alloc_table+0x25c/0x3a0 [ 1811.561872] ? sg_free_table+0x210/0x210 [ 1811.561884] sg_alloc_table+0x36/0x230 [ 1811.561892] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1811.561905] ion_system_heap_allocate+0x365/0x8c0 [ 1811.561921] ? ion_system_contig_heap_create+0x130/0x130 [ 1811.561931] ? kmem_cache_alloc_trace+0x389/0x3f0 [ 1811.561944] ion_alloc+0x1e9/0x7c0 [ 1811.561959] ? ion_dma_buf_release+0x40/0x40 [ 1811.561974] ? __might_fault+0x177/0x1b0 10:45:58 executing program 2 (fault-call:2 fault-nth:3): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1811.561987] ion_ioctl+0xef/0x1f8 [ 1811.561996] ? ion_alloc.cold+0x3d/0x3d [ 1811.562009] ? selinux_file_ioctl+0x3f7/0x560 [ 1811.562018] ? ion_alloc.cold+0x3d/0x3d [ 1811.568564] print_req_error: I/O error, dev loop3, sector 0 [ 1811.570484] do_vfs_ioctl+0x75a/0xfe0 [ 1811.570498] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1811.570512] ? ioctl_preallocate+0x1a0/0x1a0 [ 1811.570535] ? security_file_ioctl+0x76/0xb0 [ 1811.570544] ? security_file_ioctl+0x83/0xb0 [ 1811.570554] SyS_ioctl+0x7f/0xb0 [ 1811.570564] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1811.577674] Buffer I/O error on dev loop3, logical block 0, async page read [ 1811.581630] do_syscall_64+0x1d5/0x640 [ 1811.581647] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1811.581655] RIP: 0033:0x45ca29 [ 1811.586910] IPVS: set_ctl: invalid protocol: 168 172.20.20.170:20001 [ 1811.591047] RSP: 002b:00007fd45a75ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1811.591060] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1811.591066] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1811.591071] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1811.591077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1811.591083] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007fd45a75b6d4 [ 1811.664775] print_req_error: I/O error, dev loop3, sector 0 [ 1811.840204] FAULT_INJECTION: forcing a failure. [ 1811.840204] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.842978] Buffer I/O error on dev loop3, logical block 0, async page read [ 1811.891846] CPU: 0 PID: 27570 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0 [ 1811.900230] print_req_error: I/O error, dev loop3, sector 0 [ 1811.906708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1811.914111] Buffer I/O error on dev loop3, logical block 0, async page read [ 1811.919702] Call Trace: [ 1811.919727] dump_stack+0x1b2/0x283 [ 1811.919749] should_fail.cold+0x10a/0x154 [ 1811.919770] should_failslab+0xd6/0x130 [ 1811.919784] __kmalloc+0x2c1/0x400 [ 1811.931231] print_req_error: I/O error, dev loop3, sector 24 [ 1811.938124] ? dma_buf_export+0x20b/0xa20 [ 1811.946228] Buffer I/O error on dev loop3, logical block 3, async page read [ 1811.951675] ? lock_downgrade+0x6e0/0x6e0 [ 1811.951695] dma_buf_export+0x20b/0xa20 [ 1811.951712] ion_alloc+0x57d/0x7c0 [ 1811.951733] ? ion_dma_buf_release+0x40/0x40 [ 1812.019946] ? __might_fault+0x177/0x1b0 [ 1812.024027] ion_ioctl+0xef/0x1f8 [ 1812.027492] ? ion_alloc.cold+0x3d/0x3d [ 1812.031492] ? selinux_file_ioctl+0x3f7/0x560 [ 1812.036000] ? ion_alloc.cold+0x3d/0x3d [ 1812.039990] do_vfs_ioctl+0x75a/0xfe0 [ 1812.043894] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1812.049546] ? ioctl_preallocate+0x1a0/0x1a0 [ 1812.053990] ? security_file_ioctl+0x76/0xb0 [ 1812.058929] ? security_file_ioctl+0x83/0xb0 [ 1812.063356] SyS_ioctl+0x7f/0xb0 [ 1812.066731] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1812.070716] do_syscall_64+0x1d5/0x640 [ 1812.074625] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1812.079819] RIP: 0033:0x45ca29 [ 1812.083013] RSP: 002b:00007fd45a75ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1812.090746] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1812.098111] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1812.105391] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1812.112671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1812.121427] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007fd45a75b6d4 10:45:58 executing program 2 (fault-call:2 fault-nth:4): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:58 executing program 5 (fault-call:2 fault-nth:6): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:58 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f00000001c0), &(0x7f0000000200)=0x4) mq_open(&(0x7f0000000000)='\x00\xeb2R$3_\xe1\x00\x00\xca\xfc\r\xa3\x04\x935,V\xb7\xbfM\x03e\x80\x86\xc4nP\x13\\\x02\"r!\xcb\x19}!o\xcd\x85f\x9a{ \x1ao\xe4X\xed\xd5\t\x99\x0e\xc8w\xed\xf9\x06\xcfx\xe4f \x8c\x134\b\xf7H\xa1p>\xd6\xb3\n\x85\xe0\x19\xff<\x9e\xf3\xdf\xbe\x05\x83ky\xdfqsX1\x99\xfdnY\xf8\\\x0e\xe1=5\n\xd5\xb1\xbd|&\xce\x89\x18\xdb\xd5\x02\xbbS\xb2\xea\x83fT\xb9\xba.M\xd8\xbd\'\xe9:\xf8\x98|\xa9H=\x8c\x7f\n\x89xM+\xd4\x10\xa0)\xcd\xb0\x875\xd5a\x14\xf6\t\x8b-\x91\xb1\x1f\xbcJ)l\"\xb0\xc7\xfe\xbc\x10xjA\x9f\x13\xa3{]\x1a\x1c2\xa6\r}n\xdf\xeao\xf5^I\x8a\xcc-\x00(g\xe0F\x96I|\xe1\xd70d\x9b\x00\xd8E\x9e\xc4\xc4\x12\x1e\xc5\xaa\xa3\xb5\xff:\xb19:\xc2\xd1\xe4\x8f\x13\xa1J$\x82\xe0\xd3\xd9\f3\xb2zW\xf2_\x80\xb8-vl\x9a\x81!\x00\x00\x00\x00\x00\x004!\xdc\x86|\x94\xa0\x13(\x91\x86:K\xdfb\a\xf8\\\xe6\xcb\xaaP8=\x81\xd0\xa5\x8bo\xfcV9B\xd9\xce\xae\x19\xb3\x9d\x00;o\xcc-N\x80\x9cdQtQ\xc6\x98\x1aU\x80\xb6\xc5{\'%\xba\x1d\xb2\xa5Ds\x11\xa8\xa9g\xf1\x03\xd5\x88\x12_\xbe\xdel\x9c\xa5\xe1\x89\xd96-\xbcF\x00\x00\x00\x00\x00\x00\x00?\b\xf8~\xb7\xd1\xbe2\xc3\xa0\x80\xda\x0f\xbf9?97\x04w\xc0\a\x00\x00\x00\xf3\xdf\xa4\xa8\v\xe2\xa2\x87~\x8d\xd3m\x89\xe4\xe7\xee\x8a\xd7\xcfWD\xc1\xce\xd5\x02\xf1yU\xc76qS\x9e\xf5\xfaj\xb9\xffn\xb4\xe6\xfe\xa3g\x95\x95\x94[H\x14\x1b\x05a:k', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x4, 0x1ff}) r3 = gettid() ptrace$setopts(0x4200, r3, 0x0, 0x0) tkill(0x0, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) ptrace$getsig(0x4202, r3, 0x380, &(0x7f0000000280)) 10:45:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xd5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00a}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x101000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1812.272126] FAULT_INJECTION: forcing a failure. [ 1812.272126] name failslab, interval 1, probability 0, space 0, times 0 [ 1812.283828] FAULT_INJECTION: forcing a failure. [ 1812.283828] name failslab, interval 1, probability 0, space 0, times 0 [ 1812.324749] CPU: 1 PID: 27581 Comm: syz-executor.5 Not tainted 4.14.181-syzkaller #0 [ 1812.332659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1812.342045] Call Trace: [ 1812.344655] dump_stack+0x1b2/0x283 [ 1812.348303] should_fail.cold+0x10a/0x154 [ 1812.352464] should_failslab+0xd6/0x130 [ 1812.356450] kmem_cache_alloc+0x28e/0x3c0 [ 1812.360611] selinux_file_alloc_security+0xaf/0x190 [ 1812.365644] security_file_alloc+0x66/0xa0 [ 1812.369906] ? selinux_is_enabled+0x5/0x50 [ 1812.374153] get_empty_filp+0x15c/0x3e0 [ 1812.378129] alloc_file+0x23/0x440 [ 1812.381682] anon_inode_getfile+0x163/0x2f0 [ 1812.386014] ? reverse_path_check_proc.cold+0x20/0x20 [ 1812.391292] ? __lockdep_init_map+0x100/0x560 [ 1812.395943] dma_buf_export+0x4c8/0xa20 [ 1812.399934] ion_alloc+0x57d/0x7c0 [ 1812.403533] ? ion_dma_buf_release+0x40/0x40 [ 1812.407993] ? __might_fault+0x177/0x1b0 [ 1812.412066] ion_ioctl+0xef/0x1f8 [ 1812.415609] ? ion_alloc.cold+0x3d/0x3d [ 1812.419766] ? selinux_file_ioctl+0x3f7/0x560 [ 1812.424521] ? ion_alloc.cold+0x3d/0x3d [ 1812.428499] do_vfs_ioctl+0x75a/0xfe0 [ 1812.432305] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1812.437945] ? ioctl_preallocate+0x1a0/0x1a0 [ 1812.442366] ? security_file_ioctl+0x76/0xb0 [ 1812.447649] ? security_file_ioctl+0x83/0xb0 [ 1812.452068] SyS_ioctl+0x7f/0xb0 [ 1812.455786] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1812.459775] do_syscall_64+0x1d5/0x640 [ 1812.463673] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1812.468900] RIP: 0033:0x45ca29 [ 1812.472092] RSP: 002b:00007fcf08d3dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1812.479804] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1812.487650] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1812.494932] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1812.502204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1812.509825] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007fcf08d3e6d4 [ 1812.528665] CPU: 1 PID: 27582 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0 [ 1812.536732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1812.546085] Call Trace: [ 1812.548684] dump_stack+0x1b2/0x283 [ 1812.552325] should_fail.cold+0x10a/0x154 [ 1812.556565] should_failslab+0xd6/0x130 [ 1812.560545] kmem_cache_alloc+0x28e/0x3c0 [ 1812.564696] __d_alloc+0x2a/0x9b0 [ 1812.568557] anon_inode_getfile+0x101/0x2f0 [ 1812.572882] ? reverse_path_check_proc.cold+0x20/0x20 [ 1812.578072] ? __lockdep_init_map+0x100/0x560 [ 1812.582570] ? __lockdep_init_map+0x100/0x560 [ 1812.587071] dma_buf_export+0x4c8/0xa20 [ 1812.591059] ion_alloc+0x57d/0x7c0 [ 1812.594609] ? ion_dma_buf_release+0x40/0x40 [ 1812.599032] ? __might_fault+0x177/0x1b0 [ 1812.603318] ion_ioctl+0xef/0x1f8 [ 1812.606778] ? ion_alloc.cold+0x3d/0x3d [ 1812.610759] ? selinux_file_ioctl+0x3f7/0x560 [ 1812.615602] ? ion_alloc.cold+0x3d/0x3d [ 1812.619611] do_vfs_ioctl+0x75a/0xfe0 [ 1812.623419] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1812.629136] ? ioctl_preallocate+0x1a0/0x1a0 [ 1812.633561] ? security_file_ioctl+0x76/0xb0 [ 1812.637975] ? security_file_ioctl+0x83/0xb0 [ 1812.642481] SyS_ioctl+0x7f/0xb0 [ 1812.645855] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1812.649837] do_syscall_64+0x1d5/0x640 [ 1812.653740] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1812.658965] RIP: 0033:0x45ca29 [ 1812.662686] RSP: 002b:00007fd45a75ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1812.670489] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 10:45:59 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000100)="b8b0e97d50f3d5947d91ee718522f41d0f8d73a40cea31bcec86f39acc6a829f1d18f86d9e146c71219214e9b3c0b15a2c0a7116f2ab6dde912f00ef683fa09872c5", 0x42) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1812.678104] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1812.685387] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1812.693274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1812.700640] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007fd45a75b6d4 10:45:59 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xd5, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x7, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:59 executing program 5 (fault-call:2 fault-nth:7): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) sendto$l2tp(r2, &(0x7f0000000340)="f7e89e16a810098a4aa121529af473d310590e507e40f718980212452ddc4bcb1103bc76ca98878bcea2078a04168ca7e34c3e6bb2031a8e3717ec9aa6a1a02f3276f4f504a494f1b5f3b0b4f0f450413ed72b7e75601b848dfe402fe48665df724630041b922887b2cb6550236a457fbe6c30ec6c40130a3ee221514506ef14f046ce074a320da8cc3ae1a3256334f8c52daa7e426cf52346b5bbcf1319034a6325bf3d11d08a237aa324ce8edb703ca54b6ee63c729d9709d59604518c22bf0d2e6c867618c1683a0d80caf77ff554c71be83f246672d7ee0d2bd842d4f0c4edc1d505673a1f2670d414b2b73756a1cb8eb789876043d5255a1457e5954298eb268e9af90a639496896ed58bf89022ea7bebe307a4caa05997c64229bf75da8617f0a1ff6394dac07f71d6cae401d9c780378ffce741c4f98536a43358205abd6bd1a4b9b791a8d7401b28c4e071435b39f7b2f9c55dc5390b1bc7ef68019b29fb25d01ad88a61ffec118f6a908e9724dc712538f2919ac05c13cb3078b4fbd518322a85b243e35f6a8d21d101eddef750391a771621af2ec401893898f3da88765979945fdf81a7d6d82465918a77ef3e949006f32a1fa8123208e5d39f67e89cf2300bff874a188984914b08318f72e9d612ad8bbe6ec911aeeb1fefdc627901a60a875cc450e84e11dd7cc2587739f83adaa834f7eef8f679a6c65da3897e2195138cb964353ef960a19b371d1717010535f4e0920f7277817c33c532750c9b414490cbc2dd44bbc271a4a8241af216aa8bf43e4764ab70e6f6553306bf2d7e8216749363250fe4d99dc8d28f186fb8fd610452e4300d2db88347b1ad692cf950a0c20350a8665b5db5bc623b11f4384ca41012f0236411323f6bb65ca09ae1533bbebf7d5f3cc8e718e2bd1f97471383e52da0407bfa4c0434c272301f54ec453ebf0b07d6a3de78f27e88da31b2b3f5cfdab0e46d80e806bcabcb70fcbe1f42b0222e7bddea0d6355722b535dd318895f711f09c62c3adac9983b1c22d640f02045ba348ba9abb4d34f53e7a1902480e8777d7f0a06a31d25f7800dbc9cf8364caa325771911cc40882369a48d5ec08d18629506d0ad5fdb12ebef72b4684877c4eb549cc1df34279fc2819f990f4db66ab03a2b1eb70940445956c12dcc71b12c61465b839bf229d2dacd4d14de5070a77b7688880243bbe330a6b7b3efe53f66b68e77bb97c03447bd7d397e517dc58448da3a93f2d9d8675313dc129e5d94b07a5ecb1a2d5e7fc246c8f2421d2704f23ff8477e5736c1a700217dd0319b73d9cbe4918bb1674c91434b58b594c9e3f031dd041e2bea6685a8023042dd88310a76511e3599177704d396295d930457ba2b4c83c3afdd993cd2626287506420e11b5026830b95baccb851914720f5b6837666a624faa34ec6c422e7018ea9d144856ff27e1dec883b681f7fcfa31883c3fd551ff84c324aadc219d82e5c71d13d10e7368f68f6648ba5f4d69141d9634070d2412ddcbde6169d88b93fb37ff63c36f548bfffd4d11c79d0ca50a16a2c446bd025daeb266e8fbd03653f3e2f994c3dbeca782e0c5d7f65022837c433348d7fd785af33bf9370aae4cdf33275c6d24076be865029e422f994c2fd8d470ce8a4f09972188cc3d2f2a2bbda2a3e8e4e38724945bbe1034ecff1b8795007abc8f81ee56467499bc7ac19de185aaec614253c5379c3f7463ca9591183c797c9322988875f58bd1e227aadafd762c6c033b201305042115bc50edbe6e3cf9eb6faf5130fdb435ed1d1efba56e01b84d1a733f3d0d41c89cb3754774e0230db978c42cc47f0fe79b734e277eb51b3de1ab6abbb33c0de71997d52f7f709a6e268f32dad4a0a3d159ff84d78124a9053ddbef3b98cdbd929f2db5517a1bb77c1f76e143795a2f1d224591d459a99e40624cf69e2f947a72bae91f95190b40fbb47fbd1348f77c7f91f496ed7c690703bf82fd20ca954d35b5f65f23a8ddd40e8e0871c7b95658f907e4d89bab28f7f4e636e2ef0742574326f9ea03fc79a2aaad5f9c4b10a4b8977c433f587b5985e9f7e62477fda8d34ab815934e5983f9620231eee6fd05653ac6e9950857bbfd16c584380f4a2a4bdd87f54fb6cefbcfe77b9002c098f878713c85be68cac288f337882ef869eb1429fe0251d487ffba9ff7513844811fcce830f633994ca1b8a71e61ddd6101d118658e8adb1bd57e561b9845f33f7ed39e77be7bdfc58f577dc7c38453543055afe7d24849debf433056d7542599ee778f27f0c70e3c19205549067cde06a5a39f7a0d9c788d054da267da222489db4579e1c970bbd17fed35d0e868d317c3f86e3c84c53e35791869e38c78f2233a8612b971ecfeab6a414d3725177c552b953a60bce81e541b63f99b82cf4e54db5f5be2c21ca2057ef5c9b3e703b89f392847e6f739462dbf79db931cee39cd1f1e4cc81c2c4e02d8caa56d0273959ce6207047df582e137308f6ee450d342a66bb3171ab6207b73719fb7cc5e172754f4b789a52985d9f060c302afc6091d4fb060ade578c4efb60ca9a70039a5fd7c1d5f404bfb8cc4b1891b353b40fa654b05a8e2697f9388ae34845164f4a57338fc0f4fa3ccd47c6b94ef624c2c897533f83b481c9c202a0cedac811fe1b47f66e0b015a5f454e4c4e5a0bfcd5593915f7941d46bef01453eec92bcd2e75dd584ab9b7036f2c78b2eb26cfaed416062d11f10e0e34c23d5080196c479270327eff03a00594c7049066d2034495394f12081d676ec9ca2db8edff7a1e5afca2479c728b0a84cb7e32c97ea101bfb83838070121672056111cbe2fb5d3b2feead321e2699c3e0e66dbe029b395e41eef2af275c0ee855912e0a2e2575a4c740db85feafd91104ba1cf4161b4c1768aa27cc0d8b34cde58100337549bae8d43d07c522fa18c379c61e72af6facd8ee1fa203e1582529e003e480af9fe1ba744f449097e230d8b83562837e1cffe167b53d6cb16d4cd561349e3ef38826ea7b25f3614722394a6e71a82ac78ca3d25725359e32c8e00cd88ea0867d8cbe20aa2ba3ae70009abd19a1bf9d234d4b40321a55c2be921657f4ef1f80a58fe9323277a4672b1d8e0468ea0fc93c06043abc80a20f68e3b90dca3031db0bc2b19b1733ff4c59797750b324722f6806744407f868d8d0664547b309cee200f5f996a82d00c30754da63c6e9b8a252803324ca512255934abeb892cb9c11d2d50d8ad60740ab03ce67dd693ad2e549c7dea299ac8d917abddcfbdb25110b50b259bd52f19eba518bfba761475df8d02f7b89cc710ff8aaef7bdb8759f4ab1d063fd31148ee050ae5d51bacc23b150f1e84318eb7f6af43affde7f834a8d32336e85ef98f0932233a13755b3b24ff02f638edf49874a3c1f507b20f5d27b5d36e8ddd7855a153fe7313db999d3f29a1b3c8fe1a1077a95752691950a150f32175b240e5a65351d20d36e32c705ab47008dc16bca8ab9ca2733a2b2592f6fc76bd26e5ee3be782bf7d89ae61aff4167bca8f062fa892788e2ee46751f8635fc224d85ca2dc7d1473419c380e3f37814ffae23bf70afe1fd3e73727869cf1ba3916fa5a28f241129094a40a28dbd10a32061f611fc827c2827aba037f45c9b1dcebad8e6dbd2655b92b6528b2bf52a8f661cd5541d6720ecc68fe000973133ff32d6aaa787aa32d1f44b25bc1f418f746566480c104f8166219cd2baddbcc6a3a85c34b71693cf55f1cc002a11428bfef6f4e5109205b16be5707f8f75c6e9a48bcdf0c2bfc5e979ddab881792dd0d72480477cfd1b5983ac249df4df7d1eefc9826d3c4e5fa00e8b882b224eb324ce1021571af5231204be1ee39817cbaf4e3c96f2573bb009f2bedcbea89ccdbcbe891a907e0b24da1a4aa089623c013572a239eb3a31d357037928ebfd08109687ac0d650b77f79f3ba78a9990272ebfdd10392d15b29c722a3d61ec9f1296662dc03d50b6dbca02a9f64aa16e3a5ab6ddcde3a236941e14813bf9ca6d28f27531b75130b586d695f7bcfe72193281a1529deff8758241997963a6cbc5eac11565c0275235fc9acf3677ddfc44275e06ebcc54e13b8702b0fce5caf637657fc0163219275cf8fffbb7b33b179b27b3207971492da043a7daaca2b9ff694054543fc9c445ab7d3af4088619b540db6ed8eedd635459c4ec206468813f4ab61a932d0d4db4fcf3450ee3be886f2356f7874705f88050a9ff56363ed1933ed33ccab1447484e7f0b054cbe8c68fcd05c483902c16f708d3ac78d88d5e7c22ff7c2bd7256b38064aa87caf56e3413c9f5904b8fc5f4d4bb1ca487149dd6dc60182e230e5ec4feabd5d39149e778c12320992dcebe7233ff2c34cc2267ff8031e2f7031a85de9d1de2797a3af20611b668b51375690aed29203ea0938593681586902f14d802af07f81616d619ace5162db7c4e7cbb827a273eac5fca1ce7251ff86938f2ebb50003afc432769fce767c2e319d02e0a794191e54b4e21964ca5a795b16db3e9f6f77b5b6a714a1ba08dc5493486c336fbd252067144c39757734f3651f4442e4165ebc02837d35acec258384cdb2d0992566303b6e007e8a10387fb676b7534a89710515148e46ca8a9a42d6136e2381afe44e47f1a5a04708fbd69ba7117492f5232d2f24fc2a525ba01d6cf55a93a78765eab70737810590efc32714d95479436fc4cf07902c758591b0d11ec7d8448b9ac750f8f15c1f28e0efc71bf67b652e64ccdd9662b0e1350453a1136b93971ba4362a10cc9b1e6a2cfd12fe44bc9c25c9313e9194d2e95eaf1846132a7a96dc8cf2ab9ece4d3ae0e7c8083d8ccd725e4529e7a3a96c8b227fd6d5361b94214a1e1731002c410df668f160e9ef32952d6aaf1510b35532964bfcccf905d4b322b1112f1a4ee067a4caf2b95470bf686c57f557dff1497e9cd53ade3273267d6c180eb8e74d746d126ce69ab7e7da2d922461e8eea9181ab2c358f928bfe5f48e314cb2b8cd8eaf0bdeee81a0d8b4cffeead957ce0b5be12277d3c4790b65cd57e1449198a53c740975334b7a430e8f9bcc74ce7690a6a45c88760b2d0d5aa52342c5fb0dd8236a48c15c6215934bc0353bee9338be802a25ec6380f432ee8439dbdca46af4ded2e1b2302bc77ea499e2c320e580f30ed7bdc330b50f5d92074df012a3886e0298ebe191482c007a65543ac50649155b606de97aa5f324af0d642191eb0e22a26fa952f0087d9405650071b5bbe1208d5d7482ba28b7799d04283155b84e69ead78b004ded197a2fc433a3127e90b41c31c97f4641360ff23a90aa045521fbd96f9e953e73d01d2926801bdd402f871bebe9419d849c978e6e46b07915cb070de2752c1f6fd4665f546b43e8f3c75a87968c5f7237eed44771f41f52eda40780d21516ddf209bbef7b2c13e3c80ece52289a8dfa01fe4bdc34f6cc07e2cff41bb6dddc3fedc38058e4162858d98954a3ae058b986fd03914fba48483e038d9068925fb880a9168c5e3a8660b01a095473973ff1f25855a262bffcd7b281c01f99ec781eb458f63d7d67612bf1933b4e487299cb2b010044406ff1b8abdf8a63483405cb1969c6f89dd7130fe284ebf04d874fdf30373112b200a369cc6877c3ff7897295b86d7315c3ce5a70e64d20534886a447601894100c51254fb04ddeeffd19928883cd0381507fba92a7ff8d86fcef746b758e643f7345984ddd6d70951253dba28673cf2cbcd9f5c68ac9213aa42d72f81974a8", 0x1000, 0x0, &(0x7f0000000040)={0x2, 0x0, @empty, 0x3}, 0x10) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x20a927, 0x1f, 0x1}) 10:45:59 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000280)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x10, 0x0, @in6={0xa, 0x4e23, 0x9, @mcast2, 0xc9}}}, 0x90) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0x2, 0xe20, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000380)={0x90, 0xffff, "8b60734748b0f2840d428d227bd43ac1f4cc7dd7041bf1955a77ea139bafac962c1eb2b1b51ce78908bb1b74bfd3cad8bfdb65e5351afa8c35de05580babe0bd8e85cf4cf3f04c0d2af284a91cd72ff36cbb0ee83d67b934b0f500c99012dc5d9a4498c43c71493841ba9a50bdafb69288709811c59124339b46de83820562201bbe82347420f944"}, 0x20c01) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r4}}, 0xc) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0xa0000, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap$snddsp_status(&(0x7f0000128000/0x3000)=nil, 0x1000, 0x3000008, 0x2010, r2, 0x82000000) mmap(&(0x7f00000ed000/0x2000)=nil, 0x2000, 0x1000007, 0x4911, r7, 0xffffe000) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000180)=0x3f, 0x4) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r7, 0x5386, &(0x7f0000000000)) 10:45:59 executing program 2 (fault-call:2 fault-nth:5): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:45:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(0xffffffffffffffff, 0xc0206416, &(0x7f00000002c0)={0x3f, 0x3, 0x56, 0x8, 0xd, 0x7}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507010000004000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r7, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="700000002800310f000000000000200000000040a45c8ccae240bb8b5d9550ea31e759b8d6719d305b97cb1ffe1a3ed5cb26", @ANYRES32=r7, @ANYBLOB="ffff00000000ffff0000000006000500000000000b0001006367726f757000003800020034000100300000000b0001006374696e666f000004000280040006000c00070000000000000000000c0008000000000000000000"], 0x70}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000640)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3, 0x2, 0x2, 0x8, 0x200, 0x100}, &(0x7f0000000680)=0x20) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x2fc, 0x12, 0x8, 0x70bd28, 0x25dfdbfe, {0x18, 0x6, 0x80, 0x7f, {0x4e22, 0x4e24, [0x7, 0x81, 0x7, 0x10001], [0xb26, 0x6, 0x3, 0x6], r7, [0x4, 0x2]}, 0x6}, [@INET_DIAG_REQ_BYTECODE={0xf5, 0x1, "df080d2844510ea4e30c41d9adddf457630884c3bd693ddc6180028d7818ebb84ab27824f03db1832c3f0233eb83ec33f04e3c52a6c8c40f9c7101b7b5628b4d10b94c80a8feb501a87ff135fd8760f6ebea4b9fea30c01d0cef85b1dde39c473d703ba6df6f5d95923d9bd341650b4c10961b400f50b5ddf3614b00a84c8d990ec2795d3793fc9c8486ab99909cb5121e244b798ecc99073c9a001e79f94ae77c5e4bd20fbd233fbce37acfa60eb0c4ab51ca9f74d639bea79bd89bcb5e498c8a75520eba319bcd2d439d60c9e16cfe6f4064d9271cf14677b3c60f4778640b0eeab86b3fdfbbe68b9514d52f9ca0158a"}, @INET_DIAG_REQ_BYTECODE={0xed, 0x1, "ba545f61aa53e8c269ab8f48c16e21f84c265b0fea8a60e7db3f3525d95b30820ef419fc1276845c917083d88fc91c1c12754fda598033756c9b2186241786e25907070ac1b59ee270bc2efc7e88f71a95450fb13f950e53d390bc8adf192c1e2d8a9deac99f33e5db1a60bb38f5120528c06fd6ff915bf5f82042e6fd57560b38303d6fffba74660acd2f7d968c2586762b237f81874607e02f493d5a19c7d3d2535a591d868311918932216b6a4a43fe2abb89ad1e1d5a5a0167833471d2736b1526a62018bfd7630c98e7342ca836faafe3e8d528e490803d3b8db06e411959b93d9cbd6ad3ab96"}, @INET_DIAG_REQ_BYTECODE={0xc5, 0x1, "bd0fe18b36ad662863e752a4c3c17f22fd0037b7578508e55d1570eafda15e290d4bb51796de9d4a406038bec3a7b03c6e1cba2a3deeac5089fa9a55a8b457ff4f23bf0213545955fedc5936c214b64288f78d6a9fa0ff640c5febae14ec6d48a604680cefc92f21d4a924e35dd65a4b2852873e8a1fcdc6ff33db9de5cf3128d1013acc7698a6938a49e39e2379a232ee66a9c3fd4f177d143fab9966d63b09da377733715a82a6a756580a82245f503522e72dda35e4139317997cc9e659cec8"}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x40}, 0x20008080) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, r8, 0x80100, 0xffffffffffffffff, 0x3) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1813.606316] FAULT_INJECTION: forcing a failure. [ 1813.606316] name failslab, interval 1, probability 0, space 0, times 0 [ 1813.676225] CPU: 1 PID: 27617 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0 [ 1813.684145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1813.685316] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1813.693504] Call Trace: [ 1813.693530] dump_stack+0x1b2/0x283 [ 1813.693548] should_fail.cold+0x10a/0x154 [ 1813.693562] should_failslab+0xd6/0x130 [ 1813.693572] kmem_cache_alloc+0x28e/0x3c0 [ 1813.693583] get_empty_filp+0x86/0x3e0 [ 1813.693595] alloc_file+0x23/0x440 [ 1813.728774] anon_inode_getfile+0x163/0x2f0 [ 1813.735798] ? reverse_path_check_proc.cold+0x20/0x20 [ 1813.741086] ? __lockdep_init_map+0x100/0x560 [ 1813.745599] dma_buf_export+0x4c8/0xa20 [ 1813.749590] ion_alloc+0x57d/0x7c0 [ 1813.751514] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1813.753346] ? ion_dma_buf_release+0x40/0x40 [ 1813.753364] ? __might_fault+0x177/0x1b0 [ 1813.753378] ion_ioctl+0xef/0x1f8 [ 1813.774501] ? ion_alloc.cold+0x3d/0x3d [ 1813.775478] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1813.778484] ? selinux_file_ioctl+0x3f7/0x560 [ 1813.778494] ? ion_alloc.cold+0x3d/0x3d [ 1813.778507] do_vfs_ioctl+0x75a/0xfe0 [ 1813.799369] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1813.805003] ? ioctl_preallocate+0x1a0/0x1a0 [ 1813.809459] ? security_file_ioctl+0x76/0xb0 [ 1813.813876] ? security_file_ioctl+0x83/0xb0 [ 1813.818318] SyS_ioctl+0x7f/0xb0 [ 1813.821692] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1813.825699] do_syscall_64+0x1d5/0x640 [ 1813.829696] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1813.834928] RIP: 0033:0x45ca29 [ 1813.838252] RSP: 002b:00007fd45a75ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1813.846146] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1813.853597] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 1813.860971] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1813.868424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 10:46:00 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000100)={0x6, 0x0, 0x4, 0x44102, 0x3, {0x0, 0x2710}, {0x4, 0x8, 0x4, 0x4, 0xff, 0x3f, "7b22ab3c"}, 0x1, 0x1, @offset=0x22983759, 0x5, 0x0, 0xffffffffffffffff}) getsockopt$inet6_tcp_buf(r4, 0x6, 0x21, &(0x7f00000001c0)=""/56, &(0x7f0000000200)=0x38) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x383602, 0x0) ioctl$TIOCGWINSZ(r5, 0x5413, &(0x7f00000000c0)) syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = socket(0x3c, 0x5, 0x9) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r7, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r7, 0x1) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f00000000c0)={r9}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000240)={r9, 0x9c, "af261deee1c4272e51e288c774fabc2324d851b23b3437ffa71eb5f0a5b5a23fc3c4f50602a6f240ec4927cad1e718862343f2fc1a2d52564d21e11335ad80f7a63d463e0629b285ea92cd48a961f3032806ce8aaf440db6c863d767e6616c62b0c36bf55e8f03a6f58ed691c722258f037bce00b6b620033fd5e69c5a73aa9509d75f4053d76528788decc4923d8ee08f49282e9a5a1a49c628e17d"}, &(0x7f0000000340)=0xa4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 10:46:00 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x101e00, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000140)={0x9, 0x36, 0x1, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1, 0x0, r6}) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r9 = dup(r8) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000040)) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r9, 0x0) ioctl$LOOP_CTL_GET_FREE(r9, 0x4c82) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000000)=0x3) [ 1813.875699] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007fd45a75b6d4 10:46:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) socket$vsock_dgram(0x28, 0x2, 0x0) mmap(&(0x7f0000011000/0x200000)=nil, 0x200000, 0x200000e, 0x30, 0xffffffffffffffff, 0xe056d000) ioctl$TIOCEXCL(r3, 0x540c) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a924, 0x1f}) 10:46:00 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x80, &(0x7f0000000240)={0x8, 0x9bc4, 0xfffe}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r2, 0x202002) keyctl$chown(0x4, r2, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r6, 0x202002) keyctl$chown(0x4, r6, r4, r5) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x802491, &(0x7f0000000340)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}, 0x2c, {[{@access_client='access=client'}, {@version_L='version=9p2000.L'}, {@noextend='noextend'}], [{@obj_role={'obj_role', 0x3d, '/dev/ion\x00'}}, {@uid_lt={'uid<'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ion\x00'}}, {@pcr={'pcr', 0x3d, 0x14}}, {@euid_eq={'euid', 0x3d, r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ion\x00'}}, {@obj_type={'obj_type', 0x3d, '/dev/ion\x00'}}]}}) r7 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r7, 0x0) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r10, 0x0) setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000000280)=ANY=[@ANYRESHEX=r3, @ANYRES16=r3, @ANYRES64], 0x310) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x3, 0x8}, &(0x7f00000000c0)=0x90) 10:46:00 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) fsetxattr(r1, &(0x7f0000000000)=@random={'os2.', 'ppp0wlan1vmnet1!\x00'}, &(0x7f0000000040)='/dev/ion\x00', 0x9, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) r5 = msgget$private(0x0, 0x0) msgsnd(r5, &(0x7f0000000000)={0x2}, 0x2000, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) msgrcv(r5, &(0x7f0000001340)={0x0, ""/4096}, 0x1008, 0x3, 0x3800) msgctl$IPC_INFO(r5, 0x3, &(0x7f0000000380)=""/20) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x3, 0x8, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1c}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x80f3}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 10:46:00 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000000)=0x9) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) 10:46:00 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0xfffffffe, 0x4) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f00000000c0)) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x10600, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r7, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000340)=""/213) getsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000040)={@private0}, &(0x7f0000000080)=0x14) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000000)='md5sumuser\x00', 0xb) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) 10:46:00 executing program 2 (fault-call:2 fault-nth:6): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1814.398012] FAULT_INJECTION: forcing a failure. [ 1814.398012] name failslab, interval 1, probability 0, space 0, times 0 [ 1814.424240] CPU: 1 PID: 27663 Comm: syz-executor.2 Not tainted 4.14.181-syzkaller #0 [ 1814.432157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1814.441604] Call Trace: [ 1814.444231] dump_stack+0x1b2/0x283 [ 1814.447872] should_fail.cold+0x10a/0x154 [ 1814.452034] should_failslab+0xd6/0x130 [ 1814.456100] kmem_cache_alloc+0x28e/0x3c0 [ 1814.460430] selinux_file_alloc_security+0xaf/0x190 [ 1814.465476] security_file_alloc+0x66/0xa0 [ 1814.469717] ? selinux_is_enabled+0x5/0x50 [ 1814.474058] get_empty_filp+0x15c/0x3e0 [ 1814.478040] alloc_file+0x23/0x440 [ 1814.481677] anon_inode_getfile+0x163/0x2f0 [ 1814.486013] ? reverse_path_check_proc.cold+0x20/0x20 [ 1814.491217] ? __lockdep_init_map+0x100/0x560 [ 1814.495902] dma_buf_export+0x4c8/0xa20 [ 1814.499883] ion_alloc+0x57d/0x7c0 [ 1814.503524] ? ion_dma_buf_release+0x40/0x40 [ 1814.507945] ? __might_fault+0x177/0x1b0 [ 1814.512015] ion_ioctl+0xef/0x1f8 [ 1814.515470] ? ion_alloc.cold+0x3d/0x3d [ 1814.519449] ? selinux_file_ioctl+0x3f7/0x560 [ 1814.523942] ? ion_alloc.cold+0x3d/0x3d [ 1814.527955] do_vfs_ioctl+0x75a/0xfe0 [ 1814.531766] ? selinux_parse_skb.constprop.0+0x16c0/0x16c0 [ 1814.537400] ? ioctl_preallocate+0x1a0/0x1a0 [ 1814.541838] ? security_file_ioctl+0x76/0xb0 [ 1814.546256] ? security_file_ioctl+0x83/0xb0 [ 1814.550673] SyS_ioctl+0x7f/0xb0 [ 1814.554128] ? do_vfs_ioctl+0xfe0/0xfe0 [ 1814.558452] do_syscall_64+0x1d5/0x640 [ 1814.562348] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1814.567540] RIP: 0033:0x45ca29 [ 1814.570753] RSP: 002b:00007fd45a75ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1814.578470] RAX: ffffffffffffffda RBX: 00000000004e6940 RCX: 000000000045ca29 [ 1814.585747] RDX: 00000000200001c0 RSI: 00000000c0184900 RDI: 0000000000000004 10:46:00 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) r3 = dup(0xffffffffffffffff) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000)) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) epoll_pwait(r3, &(0x7f0000000040)=[{}, {}], 0x2, 0x6, &(0x7f0000000280)={[0xc]}, 0x8) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000002c0)={0x400000000020a929, 0x2}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a91f, 0x1f, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f00000e4000/0x1000)=nil, 0x1000, 0x719292fb58743631, 0x2010, r2, 0x1000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r9, 0xc01064bd, &(0x7f0000000200)={&(0x7f00000000c0)="7f080528a6bbbebc8ba303aaf4c32baf346c2a4a6468c3ed67b900fe3ce0ecde3e32bd2b5ee7d97d9800ea0fb54022fc1d92f9502efa384331d85da13d29270d657195dcb9d9c06d7fbf31c03fae5fcc1f9df130aef74952e5100f9a02b76d75a8bdb0f34efc36d7ded3f010ef3101bf9164211f74d65f79d762291131d4720008b08ec8313df7bcaf678be8a8d3b39c24f077f3835dbd5d5daf35284c0402a91fe523adb9613d531ae3cc918cacff8d978f8c24a8659b4ecfde7040218e2101eab8ba98ae0e470e4badb50e0096c7780e68a4efc17f98f97f", 0xd9}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000240)) [ 1814.593024] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1814.600560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 1814.607922] R13: 000000000000036c R14: 00000000004c5fcd R15: 00007fd45a75b6d4 10:46:00 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x806) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000300)={@remote, @multicast2, 0x0}, &(0x7f0000000340)=0xc) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000080)) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000480)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private2, 0x4e22, 0x552, 0x4e23, 0x3, 0xa, 0x80, 0xa0, 0x33, r2, r6}, {0x8, 0x7fffffff, 0x50dae26f, 0x9, 0x6, 0x8000, 0x6, 0x8}, {0x42, 0x2d7f6442, 0x5, 0x7}, 0xfffffffc, 0x6e6bba, 0x2, 0x0, 0x1}, {{@in=@multicast2, 0x4d2, 0x2b}, 0xa, @in6=@mcast2, 0x3507, 0x4, 0x7, 0xff, 0x200, 0x10001, 0xf78}}, 0xe8) mq_open(&(0x7f0000000200)='-kgyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r9, 0x0) read$rfkill(r9, &(0x7f0000000040), 0x8) 10:46:01 executing program 2 (fault-call:2 fault-nth:7): perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x34, @none, 0x4}, 0xe) 10:46:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r3, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(0x0, 0x8) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r4, 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) dup(r5) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0}, 0x340, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ptrace$setregset(0x4205, r2, 0x4, &(0x7f0000000040)={&(0x7f0000000200)="4a8a17273222b5b176ce8dfcebb8d01a2382bc6dbf49fe05328434261fa476cfdbe96180ce0e5ce1366b52cc4d9c7b2057ea41b6ee81ab97a159abcc825d425f918c60e76add924c6e0c28f6d8f0b28fcb1dd19e9f5c40bee5decf4f39007eac0b27fd4ac4ccf8aeb20801cbefd3866c94b1adad40ff5414b1c617472385588c02019348279dd2d861b28ca46164ff2ba81392325809536a8eb81673444eb546f32bac7cba", 0xa5}) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x7, 0x2000) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x5, 0x0, [], [{0x0, 0x101, 0x0, 0x1, 0x2, 0x5}, {0x2, 0x2, 0x5, 0x6d9eb3eb, 0x10001, 0x7}], [[], [], [], [], []]}) 10:46:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x6a, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r1, r2, r1}, &(0x7f00000000c0)=""/74, 0x4a, 0x0) r3 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r7, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r7, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000480)={0x8, 0x8, 0x4, 0x81032000, 0x40, {0x0, 0x2710}, {0x0, 0x0, 0x9, 0x62, 0x7, 0x4, "4f77bcbc"}, 0x74f6cd91, 0x1, @planes=&(0x7f0000000180)={0x0, 0x5, @fd=r6, 0xa0c}, 0x8eb9, 0x0, r7}) ioctl$SOUND_MIXER_WRITE_RECSRC(r8, 0xc0044dff, &(0x7f0000000500)=0x3) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r2, 0xf4, 0xcf}, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)="88800cf75fd123adc66f81f2185fb9966aab7067335474038924186238cd268b59f0d1a25d77058a97f928a73a046de5d54782fda4fd85abe84b75d7bcb29158d0e75998343c3c03b0a712d0b0f4a758a06a2e737d9b58fd75f07d0aa44ee91e9c9dcd0efea1d8c71dd4197e091c95182a7697bb17efbdd14c0713d2dd1282426e2c5ba534a50fee12e96c694653d52c2dc2385a659903e3cda9342aa2e6f5f078631f9423a35a978c34eb40c0ef2f47134577785bb85275febee4c4e060175b80254a9b6d1400be7208084e1874bc4e055b58a857215560531a35c0390c638c6625f745b6a9956ff53d4aa8f0d113b9d533a43d", &(0x7f0000000340)="1e7655a3dc12b6f23df50dd54d5740f2beba72bd5c1e54c128852c9026422dfcb759b5fe84dc823b8e84de6c2c27c1c3116816bb09b351d8e9bb811b0a4ee74028a7289784efa7d1d7f9140eae864ad55d6bdae4e707c77f57cabd90362a4a561db32150967a54c034b1e9c563534951979918417736d14fadcd8ec09a38de323a5d7e362a492b9240f0b14f531a3af98928ba2affb61ce7ea8f3e5cce265f5df58ab15772d01dd0839cba98eb748394a49bdd9faa189e06e11dbbb44715293e1c808fb0da8052c300c53e75e4b14e") ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:02 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x8000, 0x400001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r5, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002abd7000fbdbdf250c000000060028000400080031000700010008000b00040000000500380000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008011}, 0x80) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MARK={0x8}]}, 0x38}}, 0x48004) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)={r3}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040)=r3, 0x4) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x2e, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) 10:46:02 executing program 2: getpid() sched_setattr(0x0, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ttyS3\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write(r1, &(0x7f0000000000)="a58317fc4a3d9758755c00bfef4fc670549c7ae426bd35b7a0b04b9f9d0f1dc0867f5ee9bf66b3d98636ccf021bae8324c", 0x31) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000100)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:02 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="e8d29c85ff752ab197cb5d67a3322c925db0563a37bf97a79e0f935ea4099fb587829c420cf02dc60f74f6188aead0d0e7db6831888d0282a5092e483d146b1f5693308c7cf0d484cece96d2243819051b19804347ae07ed94f2fadae425e0b565e3a1b4dbc653b2997c99eb8f1816acf67b", 0x72}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r4, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000000c0)={r6}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={r6, @in6={{0xa, 0x4e21, 0x1f, @private2, 0x3}}, 0x1, 0x3}, &(0x7f0000000200)=0x90) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000)='wireguard\x00') 10:46:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0) write$P9_RWALK(r1, &(0x7f0000000040)={0x3d, 0x6f, 0x1, {0x4, [{0x2, 0x0, 0x6}, {0x20, 0x2, 0x8}, {0xc2, 0x3, 0x8}, {0x4, 0x0, 0x3}]}}, 0x3d) 10:46:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f00000002c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x202002) keyctl$chown(0x4, r5, r3, r4) r6 = geteuid() r7 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f0000000440)={0x0, @nfc={0x27, 0x1, 0x2, 0x7}, @phonet={0x23, 0xfb, 0x6a, 0x2}, @l2={0x1f, 0x40, @none, 0x1}, 0x101, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)='batadv_slave_1\x00', 0x7, 0x1000, 0xfc01}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r10, 0x202002) keyctl$chown(0x4, r10, r8, r9) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_xen(&(0x7f0000000000)='syz\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0xc00, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=xen,noextend,loose,msize=0x0000000000000008,access=', @ANYRESDEC=r3, @ANYBLOB=',privport,access=', @ANYRESDEC=r6, @ANYBLOB=',uname=/dev/ion\x00,version=9p2000.u,version=9p2000.L,fowner=', @ANYRESDEC=r8, @ANYBLOB="2c657a13ff21343331245581585db500a87569643e", @ANYRESDEC=r11, @ANYBLOB=',obj_role=/dev/ion\x00,\x00']) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x181000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r2, &(0x7f0000000100)="e8", 0x1, 0x5, &(0x7f000052a000)={0x2, 0x4e21, @empty}, 0x10) shutdown(r2, 0x1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000000c0)={r4}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={r4, 0x9}, &(0x7f0000000100)=0x8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000140)=@v2={0x2, @aes128, 0x3, [], "3ae69a44cf98d1f94c53dc0d65082e73"}) 10:46:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x7fff}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x40, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="1593000000001000bc0011"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x2, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x401}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x3f}, @NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x5}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x401}]}, 0x34}}, 0x40) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x3, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8001) [ 1817.122035] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 10:46:03 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xfffffffffffffff7, 0x80) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000040)={0x2, r3, 0x1}) 10:46:03 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0xffffe000) write$P9_RXATTRWALK(r5, &(0x7f0000000000)={0xf, 0x1f, 0x1, 0x7}, 0xf) dup(0xffffffffffffffff) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r9, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000000c0)={0x400000000020a929, 0x3}) 10:46:03 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14b81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:03 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x500000, 0x0) 10:46:04 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="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", 0x148}, {&(0x7f00000000c0)="7affca6165f40138e6a20c4cda5e7e1d6b58227cd99c0f2b870c5ae933507df73093952323e36828a678e73e4760b4c89ad66d0c98b0d3b869e90617173701be62aeaeda47e89f0b3a5b90a6f97fdb41f3933bf66cbbda808e7b2f096f5b", 0x5e}, {&(0x7f00000001c0)="60248bd14fbf1c9c374f7d11c44ddf1c5a483ca7cfdbe8c68942cbc85a640ffc2367b9dcb1d4df8ad245d49debbf08000000000000000ee9da3d05515304b4c9452e1782e6a13271614e8fc636f235bc7f7d8865bc3acde38320f6bc7cb260cd62377621a1e907f9210ec045d6d413fc10485c3113e4f540dd995ab7311104e3b8b5ec946ed8cb29f8dca736f93d5d68a066f7aa5c585c18f945e8ef37f454", 0x9f}, {&(0x7f0000000280)="17687c0c68b47a5ebbb4fe0e79750598e0809c78fa3e6d976a09cb493b65150fd489f70c4698bfacb8eae63595a88b7ca6e7c9a5404cf4a3030e0d33dcac40e9fe1904b01079b58ea1ff99b6c99bc668512cc527f3c13fa14a50c4d713bab065cf37f615252cf38b1738a34d81712a6025677200b7564f52fcc1e54865e6d73c19d83470729887692dcb99d408e0021922aea7d3004075eb83", 0x99}], 0x4}, 0x40000dc) 10:46:04 executing program 4: mq_open(&(0x7f0000000000)='-keyring,\x00\xde\xd3F\x03?\x13\x00\x19kR\xea\xf3\x89\xc7\x01\xd1\x03/)c\xe6qR\xac\x9b?\xc0\xac\xf1aG\xe04\xe2d*\x81N\x12\xa1J\xba\xf9d!H1\xea\xb2Ib\\\x8cG\xd8g\x9f\x06W7mi\x9d\xa5i3\xaa+8\x87\xde\x83\x90\xa0\x0e\xeb\a\xbc=\x1f\x8a\xdb\xb8\x8e\f\xa8`\x193\xbcK\xc3Pa\xe5\n4\x12\xa9O/0\xe6\xfb\x0e/\xa5_!t*JE\x83\x81\xab\x9e\x1c\xb9gU\xeb(\xa8#\x8bbk\xc1U\xfc\x81\xaf\x1a\xf0\xee4\xbb\a\xbc\xeb\x19\xc1\v\x9d3\xef\x91\xfc,\xfe&\xf9[\f\als\xf3\xa1`\x8d\xd0>\xd7\xa0q\x05-\xa1\x94K\x04\xf7T\a\x89\xad]\xc6\xda\x85,Z\x99\xc5\x1d\xc2z\x8f\xe9\x01\x8d\xbb\xdb\xf95\xb4$\xc5&\xa9\xfd\x86\xc5\x8c1', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc6, 0x10001, 0x100}) 10:46:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x400000) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:04 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x20000, 0x0) getsockname$l2tp6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x20) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[0x6, 0x4]}) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r7, 0x0) ioctl$KVM_NMI(r7, 0xae9a) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x202002) keyctl$chown(0x4, r7, r5, r6) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r11 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r11, 0x202002) keyctl$chown(0x4, r11, r9, r10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)="b549c468077b6ee206ccc421dda007e8fd0a8de483f50a8d98b433c11c18da8f3740ffef76217cf4c4ee34b08d0a5598a2a3ae61c2d96c5b954b94aa82b21c596db3b7c3e58cdc9cab0a5013a47c8112185dd693b59a018b498f23ece7928e068a88b52fc0cb587cd838e0d119169bb18300ff23793cdb515b5c1a1fee776713d0d768af69e05c7e91588e638fddd6423aebe7109a505ecad379a76ee48b2b147ffc01efd48e1be1645679837de15d9d4280cb2b93c72489aaaf5c22ca8f4c192e0646cb05eb1d", 0xc7}, {&(0x7f0000000180)="af5e5ae4ff20fbf00715e92fb6661dc95134b151ef2e7e4f2327f35b562b4556080b512d1b9c5f", 0x27}], 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="1000000000000000010000000100000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="14000000000000000100000001000000df4f53bd796f4e695c1504e816a40dcd18a651b1530f03a76f55089fbe6f67978fdb1a464f4c1ffecb85a3c9c419ffd53b1ae1d176632ffd1d34e0683f4ff3cdd204779e5c7da849e31dae24b1ddf6a3383b3173e13b8e10bf788813c52c167cbc0ca75b14ac1898d2514b7d0eb96b71faa1ab6177179cf69053657431f31b14bfd397588703fe9e7b91bc8a84dafe88b263c5bedd48004612c6297ce70cc6088dd5b97d86582cd2e5ed08e2d2201f95d056f0e3b6aead9dd365f63088f3d59d9d087e9d30073b81591d62b55504c1c10822b76bec0d73b71149f335b663282759bb3492e8905ef59edc83c9779ce48f5f6487c593e29e5e1d9a", @ANYRES32=r3, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x20000051}, {&(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)="db3c634af7d532995c01b267b3a6b0e2ba4fcca5742797ad606f8a07d2339e88b20fa5e5d976cc870bac07c11cf9d4e528918d39c6263a07b6fe0a363052a396d473ad2aa1ce3c7af13393b32388211ff20d7cf4d1fb478b2ae3a121", 0x5c}, {&(0x7f0000000680)="247cdec1b79c5dfcf1c7230e82f2ce7d5f3bdafc7c1f4b48c1a803d4ada0d95c95142d2776db1c47631d8f234b5c9e87a2519bd25bb7bb6ce60ba03593c4120a5ad861286119a0d34491056e09d7d74377a755dfd0ee302524ed0b87fee86291c02b4f167cd6e8", 0x67}, {&(0x7f0000000700)="d6376817d9bffebca1e59176a430c8d8092e7c9052fd93e692c47750aea8e46a47f8e47656d14dcbac1a175fba2aed719fb10a056362cab3cc33919b2d2b46738593880a467ca68f6b661551a0a13cf243912fa776d16df8b46ab6ab86503073e86ece8709986655699e4d80", 0x6c}], 0x4, 0x0, 0x0, 0x40000}, {&(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000840)="df2aaa7ad6678fb313120dcf8242daca6675be912ce83dfdf7b63a5cf7745cd6113e39c8a4ef9b3873252a2069d08334b3b26f46a1be1a43bcdaeea6bf3845d22d30a301521c523626e71098cdde7c64039029f8a4b5d693cb975dd247f005f51fe76001389af20aa68f67bbcdd0bbf0533f65c37a8ab652f7ccb1115646b9222564f93e453cd03bed533bf2f1557366df0b25e3e3edd3058dcb97f2cb312f48ee5a4e9577fd8389e712c454c961674ca4bac6e1b11885035b47b2107aeff9cf1e96141f0d43b98f32fd7b252b", 0xcd}, {&(0x7f0000000940)="9f2aed6330e331378339081a90a0da120bb63badc592c41194bb3332de82dd32ce3be09173ff4c3b873b8b783fc95685ad1e10221cf6aa7e2640b213b97815c43492d05b5d90b75c588839a57ce3b264d138a85d1adff8e3e3d02c06e3032063972e380eaecd8028713a4c652720cf8d6ae40512dc7532c76d5da92a20b06cd88650b8c521452acf2bf8e35823f7c11e856064901d2093984a67f559c30f13137711b6de607475ef86c6dbaf7c76d4909df418c1588eb7dec8d3e8f97574d5dc6e810281e196d8a296a50fa8d8fdf6a9f9a31e2f3ebb4ffc66a76b6a375c379d52", 0xe1}, {&(0x7f0000000a40)="0d1e52625ad542ea78b66def4a8c1c58a1dc689c7f3230516de6c53038356fd31dc9e49f20a9a1abee0336e45d2f7deaf71676f6afd3e7b1fffbe7d3f7810d0cfb903ede28f4765e2050218e3cd49e425c27cc7fcd2268b6beb34fea0db7648dc8ac61119377e1544fabbba7f3dc09a1c955452112040e89d5efcb2033594140c470499630639b6b0ab1cfbab60465f2d6d6", 0x92}], 0x3, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5, r10}}}], 0x20, 0x10040010}], 0x3, 0x4410) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) dup(0xffffffffffffffff) r12 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r12, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:04 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xd08f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) accept$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xc0, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKSTATE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0xc0}}, 0x4) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r7, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r7, 0x1) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f00000000c0)={r9}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000000)={0x6, 0x2, 0x8200, 0x1000, 0xe201, 0xffff, 0x80000001, 0x9, r9}, 0x20) 10:46:04 executing program 4: mq_open(&(0x7f0000000000)='-keyri.g,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x5, 0xfb0}) 10:46:04 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000180)={&(0x7f0000000000)="ae", &(0x7f0000000100)=""/93, &(0x7f0000000040)="da3cb7d767ff65fc8653bde0b698fd93a75a4541753e34", &(0x7f0000000200)="89dbe7bd8d5cea90d3444abd37436d29a0b209ec37885894aa03cf355d04e588a4fc507db6f230b1d361fef3722c66a02ae0811e96cf581a0b2f521b19ba098a0432a6cb1a08d082e6a117af9a3e36fe582e9fcd0cb21838835188b75b978d5bd6cf465b9497fc3ae937ddb179fb2b3dd5ea89b62e9d82afac25f8798cebe95ab16ad43ac4821de67e688093c69e8c097436e58896bd86f15f9a2c5cae6f09bcce880842df69c16006035cba4ed8a9050c7066b0de8ad93ed0", 0x80000001, r3}, 0x38) rt_sigtimedwait(&(0x7f00000002c0)={[0x6]}, 0x0, &(0x7f0000000340)={0x0, 0x3938700}, 0x8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:04 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x2000009, 0x50, r3, 0x0) ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f0000000000)=0x3ff) 10:46:04 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000000)=r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, 0x0) dup(0xffffffffffffffff) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r9 = dup(r8) r10 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x11, r10, 0x4004000) ioctl$TCGETS2(r9, 0x802c542a, &(0x7f0000000040)) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:04 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000040)=0x4) 10:46:04 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x210000, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x10010, r2, 0x0) 10:46:04 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80900b0000d90163190405000ff4d819a9060015ac8b00", 0x21}], 0x1}, 0x0) 10:46:04 executing program 0: syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:04 executing program 4: semget$private(0x0, 0x2, 0x140) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) 10:46:04 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) write(r0, &(0x7f0000000000)="8619a2cf5fb2697105758f729c19b9bb03401764e362b00fd351d21ad93fa204de3a66870c240c86d32064449c30078b8aa648f6f4750c2d53edbd34ba135f5d70b75003a00af15a3db6ef2f96ae6a35dc090d499c707730d62e040699e2cb7ba375612a1bcfac5354b365b7d1611e502e1519b2c940f125b233ae801eb118664f0a789b5ebae574eeb9610ba52f46af1e68d1a43283d6fcf712185a3e78e97f5b4b38e4bf40d213f23d1bd5968f1fe2922935", 0xb3) getrlimit(0x6, &(0x7f00000000c0)) openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) r3 = dup(0xffffffffffffffff) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) r5 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x300, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004090}, 0x20000890) 10:46:04 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x20}}, r3, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x1, @null, @netrom={'nr', 0x0}, 0x78, 'syz1\x00', @bcast, 0xfffff801, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r7, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r7, 0x1) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f00000000c0)={r9}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000180)={r9, 0xcd3, 0x7, 0x8}, &(0x7f0000000200)=0x10) 10:46:05 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18411, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x197900, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) pread64(r2, &(0x7f0000000200)=""/247, 0xf7, 0x100000001) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000000)={0x400, 0x40, 0x401, 0x7fff, 0x10000}) 10:46:05 executing program 1: mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001400)={&(0x7f0000000340)="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", &(0x7f0000000200)=""/236, &(0x7f0000000180)="b8ee1dffd186faa0ce2d05dcd1927afe37c8c47ecc094257", &(0x7f0000001340)="0f0334911f1e9b2291069fa9add3050efb7758dff35235ba19bd848b7fe242dda73c87cf10ebd336c5aa8ccd399986014649962e8c6a04bebf6a0ca350e2da84e7c7ad2666ae64d4a3ab1b36e26d5d2eb3bb040355420f3bdbfb6d62ae961db945babeac12767f8864ab8f17756b73a75bee917f6f897dbe6e8b8939bb352fa9e86befd992c2a444", 0x1}, 0x38) r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xa0300, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x9, 0xb, 0x4, 0x80000, 0x6, {r2, r3/1000+60000}, {0x4, 0x0, 0x8, 0x3, 0x4e, 0x8, "f4f160dd"}, 0x5, 0x3, @offset, 0x200, 0x0, r1}) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, 0x0) dup(0xffffffffffffffff) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) ioctl$EVIOCGSND(r8, 0x8040451a, &(0x7f0000000100)=""/126) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:05 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) 10:46:05 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r4, &(0x7f0000000240)="9f75687727cb1ba835bf9f58c80b2f", 0xf, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000000c0)={r6}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={r6, @in={{0x2, 0x4e22, @multicast2}}, 0x60, 0xf0c, 0x10001, 0x80000000, 0x4, 0x3, 0x6}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000040)={r7}, &(0x7f0000000200)=0x8) 10:46:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000080), &(0x7f0000000380)='.', 0x0, 0x5010, 0x0) mount(&(0x7f0000000340), &(0x7f0000000340)='.', 0x0, 0x15190, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:05 executing program 4: mq_open(&(0x7f0000000400)='-keyring,\x00Ha5\xba#\xe6\xc6\xaf\x13\xc2\x9cV\xa2\x99xv\x88\xeda*\xb8|\v\xebc.\x8a\x04\x00\x00\x00\x00\x00\x00\x00EX\xcf!\xe54\xc5?/\xe00\xc4\xc2\xd5!k}\xd2\xc5\xc7\x88F\xb4\x8a\xdf\xee[\xdfb\x18\a\xb3\x7f\x98]\xce\xf9\x87\xb9\xdb\xea\x99\x0ejI\"V\t\xdd\x1c\x19:\x1b\xd0I\xe8\xa3d\xabVy\xc1\xa2s1\x14\xbanl\x9co6\xc3n\xf6\xd7\xf08B\xf6\xf9W\xa7E\xbd\x03\x1f\x00\a\xc2M\x8aHBa/\xe3\xd59\xd9x8$\x182\x8d\xb9\x9f\xa6\xda\xaf\xd3\x03\\\x1e9\xcd\xb4v_\x9c\xe3\xb614\x9eL_\\\xd4r\xe1\x00\x00\x00^Cq3\xe3\x91c{#jx.\xd5}\xd8\xe0\xf1lh\x83\xf9\xc4\x95\xf9o*b\xdc\xcc\x9c\xef\xb7\xd18\xae\v\xb1%\n5\x90*\xcfh:\x0ff-kd\xc8R\xe0\xaf\xc8<\x18+\x89\xe8\xeb/f\x87\xe9\f-\xbd\x13\xcb\x0eb-\xc82\xbc4\xf2/\xceJ\aEy\xcb_\xb6\x7f\xcf\xceo\x1c\xd55\x19\xc6\xed\t\x03\xb0\xd2^\x19\xd6\xc0\xb9\xef\x8e\xca\x8b~\xe3\xf7\xc8\a|a\x8c`\xbb\xa3\x99j\xb3\xf5L\xd7$P\x80\xf6\x9f ~\x9f\xa6H\x84,\x0eU\x91q\xbe\xd8\x98\x92\xb3\x1b\xf4', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9b84, 0x10001}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000003c0)) sendto$inet(r6, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r6, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) sendto$inet(r6, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) pipe2(&(0x7f0000000280), 0x80800) sendto$inet(r5, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000040)={0x5, 0x1, 0x4, 0x7e001, 0x5, {r0, r1/1000+10000}, {0x3, 0x0, 0x1, 0xf9, 0x3, 0x9, "4971d46d"}, 0x2ce, 0x1, @fd=r4, 0x8, 0x0, r5}) getpeername$llc(r7, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000100)=0x10) 10:46:05 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000000)={0x1, 0x35315241, 0x6, 0x0, 0x2, @stepwise={{0x200, 0xffffffff}, {0x80, 0x6}, {0x100, 0x3f}}}) 10:46:05 executing program 1: r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x12, r0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000000), 0x4) r2 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, 0x0) dup(0xffffffffffffffff) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:05 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:05 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r3, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4141}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000}, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000000c0)={r5}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x89d1, 0x4bc, 0x8, 0x8, 0x7d1c, 0x5, 0x1f, 0x100, r5}, 0x20) 10:46:05 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e030, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x5}, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x840103, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000280)='fou\x00') bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r2 = fcntl$dupfd(r1, 0x406, r0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a92b, 0x1d, 0x0, r5}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r7, 0x0) ioctl$KDENABIO(r7, 0x4b36) sendto$l2tp(r7, &(0x7f0000000200)="ae36ad60b3074837382668fb1e75754b882d3e2d0f49916ada5933a875e1e63cac25b2155ba6aa811b664e39ef641eb43eed1de6d27f87475d0c432219ae400d69cd83824b82143d26ca5ea1abb858c43a353801e306ea3e2ba785e085a338dafae54907f0256234b30c808f4725da71172bcee220", 0x75, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, 0x2}, 0x10) 10:46:05 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x64082, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f00000000c0)=0x7f) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000080)=0x78) mmap(&(0x7f0000c03000/0x3000)=nil, 0x3000, 0x1000003, 0x40010, r0, 0x0) openat$ion(0xffffffffffffff9c, 0x0, 0x206603, 0x0) r1 = dup(0xffffffffffffffff) mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x1000003, 0x30051, r1, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x469181, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000000000)={0x20, 0x0, 0x3, {0xcfa2, 0x4, 0xab71, 0x6}}, 0x20) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) dup(0xffffffffffffffff) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x2422c2, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x22, 0x1d, 0x1}) 10:46:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4b, &(0x7f0000000000)=0x9, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3394}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:05 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000100)={0x420a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x2000) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000)=0x4, 0xfef4) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4}, 0x6e) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30053, r6, 0x2e012000) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x40040) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, 0x0) dup(0xffffffffffffffff) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x2020000000000, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x440080, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:06 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x4e22, @broadcast}}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:06 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x200}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r7, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r7, 0x1) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f00000000c0)={r9}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000000)={r9, 0x101}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000100)={r10, 0x93, "759f52f3677c176b0f020b6b2485388f065b798ea59177017400c5396bd07b304de27cd12c0eaeb6c02d95221d387a775b22a5d4bb7d13cb36098e5a16b55adfec1367f6d601bee693a4b0764ab5a1d16edefa4207fa08afc58801a25810f07e8b28a2db7942cd9202730ed7c4a16780dbc6bd5d933bcd32c51566906c2a68b8cfed1d56af33b2da462c75a58bc0f5cca81b12"}, &(0x7f0000000200)=0x9b) 10:46:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x480000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, 0x0) dup(0xffffffffffffffff) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10b, 0x2}) 10:46:06 executing program 4: mq_open(&(0x7f0000000040)='m\xf8\x96#\xe9=\x13\xa1\xff\xb9\xb0\xb6d29I\xe1f\x97kEm\x00', 0x80, 0x8, &(0x7f0000000240)={0x6000000000000, 0x3, 0x7, 0xfffffffffffffdfe}) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1a5401, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x109000, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x40080) 10:46:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_GET_FPEMU(0x9, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x500000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:06 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) perf_event_open(&(0x7f0000000200)={0x4, 0x70, 0x0, 0x4, 0x81, 0x7, 0x0, 0x401, 0x0, 0x8, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x0, @perf_config_ext={0xd509, 0xffffffff}, 0x40000, 0x80, 0x101, 0xe, 0x27, 0x4225, 0x3}, 0x0, 0x5, r4, 0x0) r5 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) ioctl$VIDIOC_PREPARE_BUF(r5, 0xc058565d, &(0x7f0000000000)={0xb00, 0x7, 0x4, 0x20000, 0x3, {}, {0x3, 0x0, 0x81, 0x0, 0x1, 0xcc, "c0eb17e7"}, 0x4, 0x2, @userptr, 0x8001, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000140)={r7, 0x24}) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x61bd02, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000000)={0x0, 0x1, 0x4, 0x800, 0x3ff, {0x77359400}, {0x3, 0xc, 0x0, 0x1, 0x40, 0x52, "f14bfafc"}, 0xff, 0x2, @fd=r5, 0x4}) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x1010, r8, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x400000000020a927, 0x17, 0x1, r8}) 10:46:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000000)=""/226) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x8010, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, 0x0) dup(0xffffffffffffffff) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000340)={0x1b0, r7, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0xfffffff9}, @NL80211_ATTR_TX_RATES={0x16c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x70, 0x3, [@NL80211_TXRATE_HT={0x22, 0x2, "0a3f6f6f889d3628f9d99de4398ed4959732d9cbdd87dc11462a4d63eaba"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xcd, 0x1000, 0xff, 0x9a5, 0x9, 0x3, 0x1]}}, @NL80211_TXRATE_HT={0x23, 0x2, "1cf2ebc58f1eaedddc3332d5220c4a2d54ec4ef5fd79cb89f6254b49367449"}, @NL80211_TXRATE_LEGACY={0xd, 0x1, "068e0a8192c3024fc8"}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, [@NL80211_TXRATE_HT={0x48, 0x2, "9e2f26671e450259c07ca41d0fc56c850bb432d281b312dfa1c19a8937f79bdaf3dd4a9709f7098668eb94a5d84d4faf88623e6db4973bd84aef786e558419f829ab8930"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x14, 0x6, 0xd9, 0x9, 0x401, 0x4, 0x5]}}, @NL80211_TXRATE_HT={0x16, 0x2, "4f9257890bc63b2444baffea8e0b7a273230"}, @NL80211_TXRATE_LEGACY={0xe, 0x1, "afb23cec5b596c2df5d0"}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x14, 0x2, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x44, 0x3, [@NL80211_TXRATE_LEGACY={0x18, 0x1, "a244c4fc9c26147ca569a07ebcd8c9f926101f8c"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x100, 0xfff, 0x200, 0x7, 0x400, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x85, 0x8, 0x9, 0x1, 0xdaca, 0x0, 0xff65]}}]}]}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0d}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:46:06 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) dup(0xffffffffffffffff) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000000)) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:07 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x400, 0x1f, 0x0, r3}) dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, 0x0) dup(0xffffffffffffffff) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:07 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4010a, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9c56}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1, 0x3, 0xb7, 0x1, 0x0, 0x0, 0x8180, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x9}, 0x2019, 0x200, 0x9, 0x1, 0x9, 0x54}, 0x0, 0x10, 0xffffffffffffffff, 0x2) 10:46:07 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x10002, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:07 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x6, 0x0, 0x0, 0x20000100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0x3}, 0x0, 0x800000, 0x0, 0x2, 0x40000000000, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r7, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="60bad6219490073188a22a4d28eb2c0241a796c386b47cfc6806cfe42864baabfdafa3440d4e1ae31643e958ef15e95b9bcc2e83d680147e1520021fc5b8c276b4ce45f6a18d5e0b9182ad57f1a8973a891e1b89b211476ba70c09b599c6b9a28054e7882ab291891c697b62d2c0c185774a6f4a1f3e74f6f2230d0459ee934f7f599113951cd923c08f021fd9f9d0b33069c7c608426be14f5ba5a3c06503fb5e2bf4165aee3057208a327b84cb0dc9c23fd1c40a7f0ac4357de5e00a0b15932bcac13349cf833eb719b841dc29bb455f6a684490", 0xd5, 0xf34cfa8a35683e33, &(0x7f0000000040)={0x2, 0xfffe, @local}, 0x10) sendto$inet(r4, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000b182923c98c54c26c40b30858c6cf68afa7dd27e7d49b0d3e77087b1f929670b0e4048ccceea992f98f3f7728e600db9bcf8d9cb97094af7c2e2efb84bd2136fa7c3e0eefcc063ec20f132a18311f9cb422179aedd71aa6261f9db07f1e33b366f649329656682db6d9f122545a9c1676818cba32ff63dba27248a2bd000000000000009df7f556591ab7014bdcfebf4a3e54dd3f1ce10b1575d78115d2e3fde5362f", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000000c0)={r8}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000000)={r8, 0x8000, 0x7ff, 0x3f, 0x46, 0x8000}, 0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001640)=0x14) sendmsg$can_raw(r3, &(0x7f0000001780)={&(0x7f0000001680)={0x1d, r4}, 0x10, &(0x7f0000001740)={&(0x7f00000016c0)=@canfd={{0x2, 0x1, 0x1, 0x1}, 0x19, 0x1, 0x0, 0x0, "da1b18a822151a6100d2c0ce090bfe523b61df3d88586f3b6dc9aacd79d8075ae9629c2511e90ea2295613448ce4b3237ca8ddd0f37994747dd606f53e10bdb6"}, 0x48}, 0x1, 0x0, 0x0, 0x4000060}, 0x8081) 10:46:07 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4083, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0xa927, 0x1f}) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x8001, 0x0, 0x1, r3}) 10:46:07 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r2, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="08002abd7000fbdbdf250c000000060028000400080031000700010008000b00040000000500380000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008011}, 0x80) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6f}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) 10:46:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000000)={0x1, 0x3}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:07 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) r4 = dup(0xffffffffffffffff) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000080)={0xa00000, 0x1, 0x7f, r1, 0x0, &(0x7f0000000040)={0x9a0904, 0x4, [], @p_u16=&(0x7f0000000000)=0xfff}}) lsetxattr$trusted_overlay_nlink(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L+', 0x4}, 0x16, 0x1) ioctl$VFIO_CHECK_EXTENSION(r6, 0x3b65, 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r9, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002080)=@delchain={0x70, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xffff}, {0x0, 0xffff}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x70}}, 0x0) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r9}, 0x10) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:07 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2090a, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x0, 0x0, r2, 0x0) ioctl$KDGKBTYPE(r2, 0x4b33, &(0x7f0000000100)) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x90) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000000040)={0x7, 'macvtap0\x00', {0x131bf5db}, 0x20}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000000)={0x40, 0x200}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:07 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r3 = dup2(r2, r1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x38, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_REG_RULES={0xc, 0x22, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x42}, 0x800) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0x9, 0x4) 10:46:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000180)='.//ile0\x00', r4, &(0x7f00000007c0)='./file0/f.le.\x00') r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r5, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f00000002c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08355000040008003100070008004e00040000000500380000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x80) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7b0}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x4) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r10, 0x0) getpeername$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1e}) [ 1821.192066] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 10:46:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) getsockopt$inet6_dccp_int(r3, 0x21, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:07 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r4, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r4, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) fcntl$getown(r4, 0x9) 10:46:07 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) ioctl$SIOCAX25NOUID(r4, 0x89e3, &(0x7f0000000000)) r5 = dup(r1) ioctl$SCSI_IOCTL_GET_IDLUN(r4, 0x5382, &(0x7f0000000040)) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x13, r5, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x4200, 0x0) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x800, 0x0, &(0x7f0000000240)={0x6000000000004, 0x9bc4, 0x10001}) 10:46:07 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = semget$private(0x0, 0x0, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, 0x0) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f0000000200)=""/206) 10:46:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:07 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x81, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) 10:46:07 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:07 executing program 4: mq_open(&(0x7f0000000040)='\xdb\x05\'+\xc3M,\xedc\x10\x84\xf8\x1cC\x0e\xc2\xf5%\xf5\x025H0}D\xd5\xbc\xda\x8cJwQ\x1b\xb9v\xb4\xa47e\x89v\xd3\x9fgE\xd6\vZ\x16<\xecq\x1d\xf0\xc7\xe2\xb8\x82\v0b\x80i8\xb5\xff\xd7aP\xcb\\t\xd5\xd2\xe1\xb51\xc0\x9fV3\xd9B\x82\xad\xbf\xfdI\x1c\xb26\xee(@\xa0\xa9\"\xea\x87\xb8\r^', 0x80, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xc0, &(0x7f0000002880)="d715611873a103e248659e49cefb0e85ab4fc8ecfc8860918899c9445f117fa43a761b3c44adb526a84f3113cdd6fc97944f853670b298be7489457a196405d6ceefe1ec8a14f7da90617352fd62643d3e4c6c049860f181108e2ddcaae3b734aaebb0f41a28ba84b7b9498d2db1aedc6fd1df2eea417ba681599664effe6f886924445159", 0x85) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) sched_getattr(r0, &(0x7f0000000140)={0x38}, 0x38, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) tkill(r0, 0x21) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x2518, 0x1b, 0x400, 0x70bd2a, 0x25dfdbfb, {0xe}, [@nested={0x430, 0x5a, 0x0, 0x1, [@generic="2412f71ead0b48e11b24804615829e023be6b1fa835e3d83d4fc0efb7d9c9ee0500acb56de678bb826f5ff283c658b53f4db362f7cf6669a3f45c2b794add453fe420fffa2b98239281119c3d0af9c2ce93036a1eb2c7d1ed58fba69196b610da5243de9fdef7d576f2b357b9c9cc66e188f4a83092a03be2501045e008c6d0b6c59de5372644a0976ed2645d9ebc2d7284ea1c787612b4a43232db04881e4f06854facc699cda21b0e29a034869fdbb139a7e047e95376aa1523a98beb9d962be9114a8db6f0fd8fce600e1a193df697811ec2d2b1b9ff1e2990d732ae69f2b7fe122", @generic="ced1338a79e72fa7a3179fe744738ee7642d80179691d885a1a82fe31a59fb6b81d529d461bb4a3ed0b94c8a1552585a2861d72896d65b5446c0174d5783de81e49036e7d71718a8cd6c732cc578646f767483d6c50394d26d999ec1e23272391fe8c5e48cb59378a30c5cb1d3e0c95cecd07386ad1cbea84f493068e2b56fa653c820e24da39e66580e5f5c137fdac4dd7dbb41", @generic="a8122419a231df884bf3b166a5592fcb4511cc4fcc2cc0b8625e7067467cd710c215cd7df15f9b6d659721ec84ec546f5146fa91db57add6c607ef6cb34b68cf6df937", @typed={0xc, 0x73, 0x0, 0x0, @str='devlink\x00'}, @typed={0xf7, 0x2b, 0x0, 0x0, @binary="5aa5aa2a578aa0e663fda5bf9399622345974b922675849ff81197c08f4cd80d0c1572c3a7131f831253b448731dc25f3ef9c26275e18341eacf99b195b80f4092b883aee7687b87fc5d4058d6e52cf38e9a8b63867881b1ac015d7995b24b30753310ea3678075527899a35a429e7378d8f0ad3dee8060efa005b888abe09b0c35bc81f53d081ec123d07f5f3cdc39e5daa8a2fe1626614ad2a27c52fddcb403c47a8192bb3f2e6657d0373ba696e8ccefb060050d1add5efe632f7285deedc9f990f0e5ecccf793b9c8781800a4d86adeffffeb3934bc7eb846cb1a6ee06bfd15fec1fcfc4549c531e761ba12ee70496dc12"}, @generic="edb405abeeebbfbcc3aa4099be14322346858056eddd40b631cef9cb1f120112ad40c8ed43e1e40736009f8df3de207a1ac17a5b9294410ac7290d42ab92b4ba7df407820bdc7b39a0b853771ebdf350c2cb80b1775aa31ffc30959a15939726ee40da66490f1393ba196d8658d7167f7e34e8f27ce1f3d38cd3f72ea906efb95409b2cc35016cd835beeeee37e47190d02a2fea450848817ca75235a629dc", @generic="308bca2818e41dc2d7876541e7f83d600f9c46f673", @generic="d5dea317615dda00da38befe41f9689ac7e38244e7f5d7ac1783def06780acf5c0e23f952b650c0f0e2f9cc8f5d6f61f67e16803f11ab4a54efe498c6c17dfbe49324e9f197ad1d9b74dc7729017bbf6b5f7c708209f51535a5edab931d08812776c5a77779093adccfd2efea05683afbf58678c77983399c4b541b3322a01c8dbf73ac9a527698674c5c362023b416524d8c347c144be2484f2b55a94ba1f5b24f644f7f902e4f27484066ab449ca26881f3afcf794cbadd373"]}, @generic="3fe20af7d027173fc434ca8aee0846507b0b4d2c19426e9c7ccf8f953f669a9834cf7278ce412a81bfe8fa859b00042a8fbbb02e253955cceb15b8beb6b26f8148500916eee856b6f5c1e776", @typed={0x6, 0x51, 0x0, 0x0, @str='\xa5\x00'}, @typed={0xc, 0x33, 0x0, 0x0, @u64=0x3}, @typed={0x8, 0x5b, 0x0, 0x0, @u32=0x2}, @generic="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", @generic="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", @typed={0x6a, 0x34, 0x0, 0x0, @str='\xdb\x05\'+\xc3M,\xedc\x10\x84\xf8\x1cC\x0e\xc2\xf5%\xf5\x025H0}D\xd5\xbc\xda\x8cJwQ\x1b\xb9v\xb4\xa47e\x89v\xd3\x9fgE\xd6\vZ\x16<\xecq\x1d\xf0\xc7\xe2\xb8\x82\v0b\x80i8\xb5\xff\xd7aP\xcb\\t\xd5\xd2\xe1\xb51\xc0\x9fV3\xd9B\x82\xad\xbf\xfdI\x1c\xb26\xee(@\xa0\xa9\"\xea\x87\xb8\r^'}]}, 0x2518}, 0x1, 0x0, 0x0, 0x8000}, 0x4800) 10:46:08 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r2, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000000c0)={r4}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={r4, 0x8, 0x1, [0x7]}, &(0x7f0000000040)=0xa) 10:46:08 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r7, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000040), 0x4) sendto$inet(r4, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r4, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000000c0)={r9}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000000)={r9, 0x8001}, 0x8) 10:46:08 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f0000000340)) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000000), &(0x7f0000000040)=0x4) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r7, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000180)={0x2, 0x3, &(0x7f0000000080)=[0x57f, 0x6, 0x81], &(0x7f00000000c0)=[0xffff, 0xea5], &(0x7f0000000100)=[0x7, 0x8, 0xff, 0x9, 0x200, 0x101, 0x8000, 0x1ff, 0x1ff], &(0x7f0000000140)=[0x8, 0xeef0, 0x400, 0x5], 0x0, 0x401}) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, 0x0) dup(0xffffffffffffffff) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:08 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000040)=0x1000) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:08 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x4, 0x42c40) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x109001, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x1000, 0x3, 0x9], 0x3, 0x0, 0x0, r4}) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:08 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x101400, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) dup(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x202002) keyctl$chown(0x4, r7, r5, r6) mount$9p_virtio(&(0x7f0000000000)='syz\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x230000, &(0x7f0000000340)=ANY=[@ANYBLOB='t2ans=virtio,osize=0\x00000000000000009c,euid>', @ANYRESDEC=r5, @ANYBLOB="652c7375626a5f747970653d2f6465762f696f6e002ca1d1ecb3545ec20000000000000000000f55c3e79f0acb7c9244fab1ab46d423ca6aeb7d90d11cd5aa1391d7069c636c0a8bcc7954b6f4ad4b11df16ce77e74a9eed600947ef37ada2826e9d4f4a616b3eb2db67322fed43bfc6c92616cd926208faf95377b6374521f7cf3397c597cf29d6530eef48c6e872bbeef0186ad2aca43c1223b16d9466e22374964100429d59f229ea2226a4fed3d4828def6e8337758149698709f511a548925760c59e2de920fbb9ae64367c1200e155d8b26bdbafc12fa8725946983208bc8a8e7a0ac8cb4b2b4a90c21c18771070f3b91ca7"]) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000a0601160000000000000000070000010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4004004) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) fstat(0xffffffffffffffff, &(0x7f0000000280)) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) [ 1822.664263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=28079 comm=syz-executor.1 10:46:09 executing program 4: r0 = mq_open(&(0x7f0000000040)='V?\xbd\x04OX\xf9\xa0\xe3\xa2\xbb\xb6\xa6\x01x\v\xe7\xd5\x16\xc9m\xd5\x19LM\x15\xe1PY\xea\xef\xf2\xf6\x02kxu\xd9=K=lZ\xaa\xa1\xf0Z\xe3\xd1\ro\xacA7\x00b>\x8bJqX\xc9\xed\x88\x15\x89J\xd9N\xa8\xd1V?@\x18l\xb3~%w\xb8\x11b\xf1U7\xd59\xaf\xd0\xb7\x8b\xbew]\xa0\x82>H\xf4d\xcf;\f\r\x92\r%\x8f\x98\xed\xb1\xfa\x87\t', 0x40, 0x0, &(0x7f0000000000)={0x6000000000000, 0x9bc4, 0x10001}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$VT_WAITACTIVE(r1, 0x5607) write$binfmt_aout(r0, &(0x7f00000000c0)={{0x107, 0xc8, 0x40, 0x14, 0x15c, 0x10000, 0x102, 0xca4}, "cc8574f7b4757a6e6fd48fb809a9ab1357137073ca0701c408d7dd3cc49139abfd197652f5dc7aed7b7cc72425b572b92e7b57f4d48eccf13141bafc1a299a4ea4509e3eb965e2e5b29567d7c3a33be16a1ec41b15cf69daf27a18d9ef5c2ca28a05e8f127b8b81070885d2d7c50d7ef00e8ff884bd353d7d24d86f61dc9a72544292e2d7ce48cc7e469909497f2ae4affd4aabf07948cdb3a4d425bd2b08e4a59e6b8b98424ce1d431dcf1c8454d0d0cdc0949ac86b1489a951f4aa9924b42d39bb592ad2e50da841fad1d8e42e3b6409626e2592634a6ce0", [[], [], [], [], [], [], [], [], [], []]}, 0xaf9) 10:46:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000100)) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000000)={0xe7, 0x0, 0x3}) [ 1822.744250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=28079 comm=syz-executor.1 10:46:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x589840, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, 0x0) dup(0xffffffffffffffff) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000080)={0x90, @tick=0x1, 0x77, {0x8, 0x1}, 0x5, 0x1, 0x3f}) r8 = syz_open_dev$vcsa(&(0x7f0000001380)='/dev/vcsa#\x00', 0x7, 0x480) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000013c0)=[@in6={0xa, 0x4e20, 0x400, @local, 0x8b}, @in6={0xa, 0x4e22, 0x2, @private2, 0x6}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x58) 10:46:09 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000000)=""/250) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) 10:46:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x2, 0x11}) 10:46:09 executing program 4: mq_open(&(0x7f0000000200)='-keyr#\x15\x8a\xe7i', 0x40, 0x80, &(0x7f0000000000)={0x600000000000d, 0x6, 0x10001, 0x619}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50015}, 0x40) 10:46:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$RNDZAPENTCNT(r6, 0x5204, &(0x7f0000000000)=0x6) 10:46:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x101000, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) 10:46:09 executing program 4: r0 = mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x80, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) fcntl$notify(r0, 0x402, 0x24) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) mq_getsetattr(r3, &(0x7f0000000000)={0x5, 0xabf1, 0x80000000, 0x2cf}, 0x0) 10:46:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0717000000000000000016000000050009"], 0x38}}, 0x0) sendmsg$TIPC_NL_NET_GET(r6, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r7, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x828}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x34}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x800) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000000)={0x3, 0x4, 0x27, 0x3, 0x0, 0x6}) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r10, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r10, 0x84, 0x15, &(0x7f0000000240)={0x4}, 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x7ff, 0x1f}) 10:46:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) getsockopt$netlink(r3, 0x10e, 0x5, &(0x7f0000000200)=""/207, &(0x7f0000000000)=0xcf) 10:46:09 executing program 1: sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000000000a0", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r4, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002080)=@delchain={0x70, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xffff}, {0x0, 0xffff}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x70}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00', r4}) r5 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, 0x0) dup(0xffffffffffffffff) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:09 executing program 4: mq_open(&(0x7f0000000200)='\x00', 0x800, 0x1, &(0x7f0000000240)={0x6000000000001, 0x1f, 0x1}) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ptrace$poke(0x4, r0, &(0x7f00000002c0), 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x10) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000000)={0x3, 0x4}) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x3, 0x3, 0x3, 0x0, 0x0, {0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x5}}]}, 0x20}, 0x1, 0x0, 0x0, 0x44111}, 0x18) 10:46:09 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) write(r0, &(0x7f0000000040)="240000001e005f0214fffffffff807000000000000000000000008000800090000b70000", 0x52) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000100)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1823.243893] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 10:46:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = gettid() getpgid(r1) 10:46:09 executing program 4: mq_open(&(0x7f0000000200)='-keyrmng,\x00', 0x40, 0x41, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001, 0x100000000}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) [ 1823.338626] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 10:46:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) dup(0xffffffffffffffff) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r7, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000000)=@bpq0='bpq0\x00', 0x10) ioctl$PPPIOCSMRRU(r7, 0x4004743b, &(0x7f0000000040)) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:09 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x2000, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r2) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) remap_file_pages(&(0x7f00000d3000/0x1000)=nil, 0x1000, 0x2, 0x3, 0x4000000) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) mkdirat$cgroup(r5, &(0x7f0000000000)='syz1\x00', 0x1ff) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:09 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000000c0)=0x6, &(0x7f0000000100)=0x2) r3 = mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedreceive(r3, &(0x7f0000000000)=""/40, 0x28, 0x8, &(0x7f0000000080)={r4, r5+60000000}) 10:46:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x300, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:09 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000140)=0xffffffffffffffff) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) r6 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$VIDIOC_G_MODULATOR(r6, 0xc0445636, &(0x7f0000000000)={0x8, "b3dc8ea1d5e4e6fde847fea1d08cb9fdfd6b5c36f65fcbb7fac23e4ff5b21aac", 0x80, 0x0, 0x9, 0x4, 0x5}) 10:46:10 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000000)=0x5408) 10:46:10 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1f, 0x4) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) 10:46:10 executing program 0: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ptrace$poke(0x5, r0, &(0x7f0000000280), 0x6) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0xf5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @remote}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r2 = dup3(0xffffffffffffffff, r1, 0x80000) ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000040)={0x1}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:10 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r1, r0, 0x0, 0x12, &(0x7f0000000040)='em1{self\xeb/.vmnet1\x00', 0xffffffffffffffff}, 0x30) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x5, 0x5, 0x8, 0x0, 0x1ff, 0x10000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000000), 0xa}, 0x10000, 0x7, 0x1, 0x6, 0x8, 0x3, 0x8001}, r2, 0x9, r0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000200)='/dev/nvme-fabrics\x00', 0x21500, 0x0) ioctl$SG_GET_SG_TABLESIZE(r4, 0x227f, &(0x7f0000000240)) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:10 executing program 4: mq_open(&(0x7f00000000c0)='-keyring,\x00\xb8\xdf\xbd\xb8t\xd33\x9d\xb4\xa6:\xaeA\x0f\x8c\xca\x97\x91\xbf2\xf6\r\xe9\x8a\x81_u\x9b\xc6\xae\xdb\x8a{0`\xbb\x1e\x96\xc7\xefW71\x9f\xe3S\t>J\xfb\xc9\x82\x88\xa1\x7f\x85\xfcy\x05\xa0\xf6\x1a\x9a.\xe6\xe7\xfc\x95\xfe\xdf\xc3\x87\xf8\x7f\x17\xeb\xbd\xa0\x02\xf2/}\xfa\xe9K^\xcf\x89f\x04\x82\x99\x13g)\xed\x9f\xebu\xe1\xa8\xb2', 0x2, 0x0, &(0x7f0000000240)={0x3, 0x9bc4, 0x10001, 0x1000000000}) r0 = mq_open(&(0x7f0000000000)=',em1{ppp1&keyringuser*\x00', 0x40, 0xa1, &(0x7f0000000040)={0x100000000, 0x2, 0x0, 0x2}) mq_timedreceive(r0, &(0x7f0000000140)=""/254, 0xfe, 0x6, 0x0) 10:46:10 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r3, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000000c0)={r5}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000040)={0xee51, 0xfff8, 0x207, 0x7, 0x2, 0x7, 0x80000001, 0x7, r5}, 0x20) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f0000202000/0x3000)=nil, 0x3000, 0x1000003, 0x30051, r9, 0x0) setsockopt$inet_udp_encap(r9, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) 10:46:10 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x50000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r3, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000000)) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x6) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x20a927}) 10:46:10 executing program 4: r0 = mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(0x0, 0x2d) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000080)) ptrace$cont(0x1f, r4, 0x0, 0x0) r5 = getpgrp(r4) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x33) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r6, 0x0, 0x0) r7 = epoll_create(0x80000000) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x20400, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r0, &(0x7f0000000080)={r7, r8, 0xc000}) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000000)) 10:46:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r3 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}, 0xffa8) sendto$inet(r4, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="e87d793e137b88ee9882e79db68f010247f4761f0096280f66501314fd5e06ee42d612fec590a6823c892804e1b062e45cc574bebc8e4aaee03809a9b8cb8aa9a3a2da6d1729df60d5f0c11a7446eb77b997eb6ea5eeb4353ab6cd871562f85dd962c848cff74cb3d01175db5d5e599c501ea2054cab3ed820bd2be9639bd496d9d0cff9880656faa6d645546a593100c69f16abdfc6b54240c47a2589f4ba03a26925de56a9e14954e8f3b5476b33d822d848de000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYBLOB="009900000000000000b9235c2200"], &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000080)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x5, 0x7, 0x8202, 0x3, 0x2, 0x1, 0x9, 0x3, r7}, 0x20) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x2100, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0xbe5, 0x3, 0x1}) 10:46:10 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000000)="cd6e11d2712e7d6eef9d7662377af0c2701a6e4d29771dff484732cf296f18c561d701ec5f0d2ee2277d44e78d56764b42b860b311e4eeefe33f99601c5c47caec9953d9572117ddf4604fbb2b55be33291a8c83515b18f08cd24e951ae2da0647d8889501305d8ac0a34d07b1fd9c7425b4a4580182d8759bc3e0de552494c74290563113f26606afdddc23618e7f6eb6f59038fe3a5e83e0aa6fa13ab0d83fc64760a56fd74216aab7331663554bdaff84badfc32ba1c9419430ebbcd2f3dee435001a5983364855470ab5fcbc1e70e78129a751bd2a895035d2636ee7cadc34a34fce502f2c23e1", &(0x7f0000000100)=""/2, &(0x7f0000000140)="0be6d947377b21af43f2b715de57a84ed75d6eaeacda43efc6973bb2d290178fbb54e7079c41e14a63172144b16c55f2e01ac436b2ecd2fa4ffa97301fa7321e768ab9b723e177ff267d6badde514a4be5ec6a48578385db0ad0b6784d774f864a2b7570ec971866e33304a677e914502bfd8c0c8cf29b160e11618c793a05d872521e14f8b2aaa4adba3bd455d07caa309d9750cb768b854694ddbd6f5780bfd85ed86ef692081117bf8b874b34fd94e5ba1023", &(0x7f0000000280)="3429fadf7bd640f81b94dda253effde428ad783c6613a2ae3c2bdc16088bff7a7aea99148934196923f17f6d01ed7caa51389d95859411", 0x2, r2}, 0x38) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) [ 1824.126171] x86/PAT: syz-executor.5:28194 map pfn RAM range req write-combining for [mem 0x2c200000-0x2c202fff], got write-back 10:46:10 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000280)=@assoc_value, &(0x7f00000002c0)=0x8) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x105003, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, &(0x7f0000000100)={0x4000000, 0x6, 0x0, 'queue0\x00', 0x9a}) getpeername$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) ioctl$TIOCMBIS(r5, 0x5416, &(0x7f0000000000)=0x5) 10:46:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x500, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) r3 = dup(0xffffffffffffffff) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r8, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="74003f04", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fedbdf250200000008000200030000005800088054000780080006009400000008000600bb00000008000500f8fa024308000500aba81c7d08000500fb57f51b180006007600000008000500f49ece2808000600140000000800050029ed7a1b08000500dde5ff53bca202d9720f968b19e56d158ae9f2f002fcddb571fea11074a4ed2c932b900a047ba1b9d7b8c13a0d3b7a5a0fc425c40398172848b89b1bdf2c0a875a634ee8a74c3fc7711c691583041d997687094d6bd3e6a3ca91690781dc5b7fb95f24235216bf24"], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc00) socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r5) ioctl$VIDIOC_DQBUF(r9, 0xc0585611, &(0x7f0000000040)={0xfffffffd, 0x8c8939b0e2a55b6d, 0x4, 0x4000000, 0x20, {}, {0x1, 0x0, 0x5, 0xfb, 0x9, 0x9, "130792c9"}, 0x7ff, 0x3, @planes=&(0x7f0000000000)={0x4, 0x5, @fd=r3, 0xffffff6c}, 0x400, 0x0, r0}) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x2, 0xc00a80) 10:46:10 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)) 10:46:10 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x123900, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x1f, &(0x7f0000000200)=""/231, &(0x7f00000000c0)=0xe7) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r6, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r6, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000040)={0xfffff6e3, 0xb, 0x4, 0x400, 0x8, {r4, r5/1000+10000}, {0x5, 0x0, 0xa8, 0x62, 0x8, 0x9, "6a1ebe4c"}, 0x5, 0x2, @userptr=0x9, 0x4, 0x0, r6}) dup(0xffffffffffffffff) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000340)='trusted.overlay.opaque\x00', &(0x7f0000000380)='y\x00', 0x2, 0x3) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000040)={@initdev, @multicast2}, &(0x7f0000000080)=0x8) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0xc800, 0x0) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) 10:46:10 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000740)=@nat={'nat\x00', 0x19, 0x4, 0x4a8, [0x20000280, 0x0, 0x0, 0x200004a4, 0x200005ea], 0x0, &(0x7f0000000040), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x11, 0x2, 0x9000, 'hsr0\x00', 'ipvlan1\x00', 'sit0\x00', 'sit0\x00', @remote, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0xde, 0x116, 0x14e, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x1, 0x4, 0xfff, 0x7, {0x200}}}}, @connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x8000, 0x3}}}], [@arpreply={'arpreply\x00', 0x10, {{@local, 0xffffffffffffffff}}}], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 0xffffffffffffffff}}}}, {0x5, 0x2, 0x892f, 'wg1\x00', 'ip6_vti0\x00', 'ip6tnl0\x00', 'team_slave_0\x00', @empty, [0x0, 0xff, 0xff], @multicast, [0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xa6, [], [], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x3, 0x48, 0x1c, 'ip6_vti0\x00', 'veth0_to_team\x00', 'batadv0\x00', 'veth0_vlan\x00', @link_local, [0x0, 0x0, 0x0, 0xff, 0x80, 0xff], @random="c60924486792", [0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xde, 0x116, [], [@arpreply={'arpreply\x00', 0x10, {{@local, 0xfffffffffffffffd}}}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffe}}}], @arpreply={'arpreply\x00', 0x10, {{@multicast, 0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0x3, 0x1, [{0x3, 0x40, 0x4, 'veth1_virt_wifi\x00', 'netpci0\x00', 'team0\x00', 'lo\x00', @local, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0xff, 0xff, 0xff], 0xa6, 0xa6, 0xde, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x9c, 0x0, 0x7}}}], [], @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}}]}]}, 0x520) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x3, 0x4) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) 10:46:10 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20b927, 0x1f, 0x1, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0xfffffff7, 0x1, 0x0, 0x8, 0x6, 0xfb9}, &(0x7f0000000140)=0x20) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={r9, 0x0, 0xff, 0x2, 0x6, 0x101, 0x1000, 0x3, 0x80, 0x68833042, 0x7, 0x1f}) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000000)={r9, 0xfffffffa, 0x3, 0xc3b, 0x0, 0x5622, 0x5, 0xfffffeff, 0x0, 0x40, 0x8b7, 0xe3}) 10:46:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x10800, 0x0) 10:46:11 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) 10:46:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/icmp6\x00') setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="e3c37afccd58"], 0x1) 10:46:11 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = msgget$private(0x0, 0xc0) msgctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/17) 10:46:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000000)={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@generic={0xf5, "bc21448af07343df0e68f742d0a8ecf47050b88b7e960b04f7381458a3e01d6a718f4a6edd8e31407a73dae9ad284b40999a91f799bb84782015"}}}, &(0x7f0000000100)={0x0, 0x1, [0xcab, 0x906, 0x962, 0xd90]}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x200, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000000)={'bond0\x00', 0x99}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f0000192000/0x2000)=nil, 0x2000, 0x1000003, 0x100010, r5, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x80080, 0x0) ioctl$BLKRAGET(r6, 0x1263, &(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x20a927, 0xd, 0x1}) 10:46:11 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x301001, 0x0) write$sndseq(r0, &(0x7f0000000200)=[{0x7f, 0x5, 0x1, 0x20, @tick=0x4, {0x8, 0x6}, {0x0, 0xf9}, @queue={0x3, {0x6, 0x7f}}}, {0x81, 0xc0, 0x40, 0x7f, @time={0x2, 0x7}, {0x5, 0xc3}, {0x17, 0x6}, @raw8={"17318b44cd305cc93235b6cc"}}, {0x1f, 0x4, 0x0, 0x20, @time={0x5, 0x40}, {0xba, 0x8}, {0x20, 0xdb}, @raw32={[0x7ae, 0x1, 0x2]}}, {0x9, 0x0, 0x7, 0x7f, @time={0x10000, 0x6}, {0x39, 0xff}, {0x80, 0x6}, @quote={{0x7, 0xd8}, 0x3, &(0x7f0000000040)={0xaf, 0x0, 0xf6, 0x6, @time={0x8, 0x80000000}, {0x4, 0xb8}, {0x22, 0x6}, @time=@tick=0x9}}}, {0x3f, 0x55, 0x4, 0x3, @tick=0x1f, {0x1, 0x2}, {0x7, 0x26}, @control={0x3, 0x400, 0xbb}}, {0x40, 0x3, 0xe1, 0x2, @tick=0xc000000, {0x81, 0x2}, {0x4, 0x3a}, @note={0x0, 0x7, 0x4, 0x2, 0x1}}, {0x4, 0x3f, 0x80, 0x3, @tick=0x1f, {0x1f}, {0x0, 0x1}, @control={0x1, 0x0, 0x8001}}, {0xda, 0x0, 0x5, 0x20, @tick=0x7, {0x7f, 0x8}, {0x40, 0x6}, @time=@time={0x6, 0x7}}, {0x1, 0xff, 0xcc, 0x9, @tick=0xffffffff, {0x7, 0x3}, {0x7, 0xb2}, @note={0xff, 0x1, 0x64, 0x0, 0x4}}], 0xfc) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x1120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="340000000d0600000000000000000000020000040500051007000100050005000a00ffe505e2000007020000050005000100000014682d6d97a3e2dd32ef9c7e295ca67fb0cdb67c34d0b560d31cc65da63fa326d0b984792339fdfe25ff6d0ee8acafd8bfeb82fc20825be0aebd47102be81ad40619a7e3f9abaeb8ec314906bd9dd4d78e3c828f2584cae307"], 0x34}, 0x1, 0x0, 0x0, 0x400809c}, 0x20008050) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x3, 0x0, 0x0, 0x0, 0x7, 0x10108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:11 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "d70b7904eac33541", "faffc6eb4746be51cf702e44ca00030000000000e800", "19096f38", "3c5a69a250651ffb"}, 0x38) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1e, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video0\x00', 0x2, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000200)=@v2={0x2, @adiantum, 0x1, [], "9680ba8fdaf83c290cda6f1e37c3fd89"}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) dup(0xffffffffffffffff) r5 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x7c, r6, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, r6, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'hsr0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:11 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe15, 0x507}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000000c0)=0xfffffffe) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x54b040, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000040)={0x6, 0x9}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a927, 0x1f}) 10:46:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x800, 0x6, 0x7361, 0x0, 0x764}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:11 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$NBD_CLEAR_QUE(r3, 0xab05) 10:46:11 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) dup(0xffffffffffffffff) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x400000000020a926, 0x17, 0x1}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, &(0x7f0000000000)="7a015630b581c4fc99238cf98a71d71596907382b80593453085e6e5ce7cf815f35c7245d4b42957ab095f1beb1f7a5bdfc9c40e296ba9ab31d66a7550502eddffd9338ccfcddd284c9bc8acd91cf61f87f85fea4b3dbb012afe34d8cd76c5f6eddbbda6ed87c73506fd636d7c02e18efa59a5e7aed8ca7a64b834441b67a042f94afdae900ff95352579965b6b41f27922438d128d834d5afa4428c39cdab99c26296fe2be314096c40e47a613274daa67d2ab9fce56d8371f3f279bf4a75d055bde8ded42d58a9279df0eae38ec62c533e1e96fedc3f", 0xd7) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) ioctl$SIOCAX25ADDFWD(r8, 0x89ea, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r9, 0xc01864ba, &(0x7f0000000140)={0x101, 0x7, 0x1000, 0xdededede}) 10:46:11 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x80, 0x1, 0x0, 0x7, 0x0, 0x2, 0x82220, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x159a, 0x2, @perf_bp={&(0x7f0000000040)}, 0x50, 0xffffffff00000001, 0x7, 0x3, 0x1000, 0x90df, 0x1}, r1, 0xe, r0, 0x1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r5, 0x80044dfd, &(0x7f0000000180)) r6 = getpid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000000)=r6) 10:46:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x6a, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$set_timeout(0xf, r4, 0x8) 10:46:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)) 10:46:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x3c526d346cfbd095, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000000)={0x6, {0x80, 0x3, 0x5, 0x8}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xd, 0x0, r3}) dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0xd, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r8, 0x8004500f, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, 0x0) dup(0xffffffffffffffff) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x20a927, 0x1f}) 10:46:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x4, 0xffffffffffffffff, 0x8) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) mkdirat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x1ff) 10:46:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000200)={0x1f, "faac1f151c37186a869efc46da3b2365ebd03ff9adfc65806eae07a44d6a2c6c9a6e0d0aae33257921827788cddf663d3e704355f680fcecec5d03609253b0bda8789748b52a3c89abc340d86ddaa458793742d916104a08a84777078f0adad60ab6bf0d7eef91911ea2e27a6a0b5d14ecd50ff9e0f233edcf1369caa2572842"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1000, 0x1}) sysfs$2(0x2, 0xee1b, &(0x7f0000000100)=""/190) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x41) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = getpgid(r2) tkill(r3, 0x34) 10:46:12 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) dup(0xffffffffffffffff) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x200000, 0x0) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000000)={0x10200, 0x0, &(0x7f00000ff000/0x600000)=nil}) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.opaque\x00', &(0x7f00000000c0)='/dev/ion\x00', 0x9, 0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r5, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r5, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) dup3(r5, r3, 0x80000) 10:46:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r7, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90802010}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={[], [], @remote}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc080) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:12 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x89c6fccb1655f844) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, r1}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r7, 0x0) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r10 = dup(r9) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r10, 0x0) statx(r10, &(0x7f0000000100)='./file0\x00', 0x6000, 0x4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r7, 0x400454ce, r11) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) 10:46:12 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000000340)={{0x0, 0x0, 0x80}}) 10:46:12 executing program 0: syz_open_dev$ttys(0xc, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:12 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x101002, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x1}) 10:46:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x3}, 0x8000}, r6, 0xe, r5, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:13 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_MRU={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r3, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x884}, 0x84) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x114) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x2, 0x8, 0x0, 0x7}, 0x10) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x101081, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r7, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r7, 0xc0585609, &(0x7f0000000200)={0x8, 0x8, 0x4, 0x4000000, 0x3, {r8, r9/1000+10000}, {0x3, 0xc, 0xfc, 0x6, 0xa7, 0x1, "279142b1"}, 0xffff, 0x3, @userptr=0xb172, 0x800, 0x0, r2}) ioctl$KVM_SET_DEBUGREGS(r4, 0x4080aea2, &(0x7f0000000100)={[0xf000, 0x10000, 0x6004, 0x100000], 0x81, 0x90, 0x4}) 10:46:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0xa01, 0x0) ioctl$KVM_SET_DEVICE_ATTR(r1, 0x4018aee1, &(0x7f0000000100)={0x0, 0x9e8, 0x6, &(0x7f0000000040)=0x8}) 10:46:13 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x9080, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="1593000000001000bc0011"], 0x1c}}, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f00000004c0)={@remote, 0x0}, &(0x7f0000000500)=0x14) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x40100) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000240)=[0x1, 0x3], 0x2) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r7, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r7, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 10:46:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x5, 0xf0}) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x8}, 0x8) [ 1826.994772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:46:13 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) mq_getsetattr(r5, &(0x7f0000000040)={0x1, 0x2d976437, 0x1ff, 0xfffffffffffffffc}, &(0x7f0000000080)) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) getsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, &(0x7f0000000000), 0x2) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x141100, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x800443d2, &(0x7f0000000140)={0xa, &(0x7f0000000200)=[{@fixed}, {@fixed}, {@none}, {}, {@none}, {@none}, {@none}, {@fixed}, {@fixed}, {@fixed}]}) 10:46:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000000)={0x10000000, "6cb80494730810af7120095b00e6f509969af15de72bc0b07f027cfb7276ed87", 0x2, 0x2, 0x800, 0x2, 0x3}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file0', [{0x20, '/dev/ion\x00'}, {0x20, 'em0^systemcpuset]'}, {0x20, '&vmnet0$wlan0ppp0'}, {0x20, 'em1[)vmnet1%vmnet1md5sumlo^'}, {0x20, '/dev/ion\x00'}, {0x20, '/dev/ion\x00'}, {0x20, '/dev/ion\x00'}, {0x20, '!userem1lowlan1selfwlan0em1GPL'}, {0x20, '/dev/ion\x00'}, {0x20, 'posix_acl_accessposix_acl_accessppp0.)]securitykeyringselinux'}], 0xa, "edbc389b28e925"}, 0xe1) 10:46:13 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:13 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, 0x0) dup(0xffffffffffffffff) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r9, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r9, 0x4010aeab, &(0x7f0000000080)={0x242, 0x10000}) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r6, 0x202002) keyctl$chown(0x4, r6, r4, r5) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r10 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r10, 0x202002) keyctl$chown(0x4, r10, r8, r9) setgroups(0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, r5, r9]) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000000)={0x7, 0xb, 0x4, 0x102104, 0x5, {0x0, 0xea60}, {0x2, 0x8, 0x3, 0x1, 0x81, 0x3, "1f6ba5ea"}, 0x0, 0x0, @userptr=0x400, 0xaa, 0x0, 0xffffffffffffffff}) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L+', 0x4}, 0x16, 0x0) ioctl$UI_SET_SNDBIT(r11, 0x4004556a, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:13 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x28, &(0x7f0000001240)={0x0, 0x0}}, 0x10) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r8, 0x28, 0x1, &(0x7f00000000c0)=0x1ff, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={r5, 0x0, 0x10}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r5, 0x1f, 0x18}, 0xc) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 10:46:13 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r8, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002080)=@delchain={0x70, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xffff}, {0x0, 0xffff}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x70}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x106c, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MESH_ID={0x1004, 0x18, "1b41ddfe3484f90dc3115441601042d920444aad3848731b4effbacfdb3a59d993373dab78e906b2db813be3fa331ffeec7600670a1accfc85df24ad978500153bfd634b9088cf0a1bc6faf41bc165858f97668069b23d3e60547a6fa2aa1f72fa4089142c4d8d961f2a2f54bc184d92885097456d7d9724262e9b83632c8d3f9418c3bf1bc44d47138fba2665abd656bb4e5cc3541e4bf05739500a213aea197b7558c1e1edbb8e5bc710f0aa9accbe112f501746f4a3c03be10ff87a0bb2b7624e44e99baa831a3ccc6a1d0d51588db63ae4d97a0634ed58fa5cff2a689f5d76a12c8a3084f8b1e6cc81441776eb4ee608f4ab302c2b5569128361979f79a6421e1a2286ef640c01d5ae3f0558a8a5bfa645c034e9a20d4be956fa4db4b2a77ec63e13130f15e058fe6834dea989efd32f77be25f560cca56cfddb748952e828bef9d789bd288c751c1a87bd98cc9b970b8ec469e31a62ce319f511260ce3eeab306303b8209b424f35dba08a549d470da6f3a6510868d2cc15b2779859c38d47c57f55f8616c6b0c789262e349feb183c7af637fad74ed6bdb6b73b2a044f7fa6aa20579019307ff0a70d02b10ce740de4aa1fc0023b88204168e0e11a11c24d1dfef8e6bc2f25d4d44e24591066ff6a3b22d6cbb82f1dd1ce2d3052f0cc9ca30f70c889e771ae3d49d0474a669f4c88098cb51e4314c141e57f3783db5cb2d75d695e1033d879beae765e94e0d23c32a856fd2fa66b8f49efe06e25a3d6aded08d48d22c5f3f84098da1b58f4e4aa538b0b8dd0500b3410433356faaca6b95a292ca4052179844cd74d2b729f9cc664abe29d9a105b2f7eb0fddba3ccbe8dd740ac24862f1de732272ff615539ef8335603f78ae9d57b4dec239f5617edd0cae86e8236bc3620f68a5565b998389aed4e362102c829ba5d57421ac2e49dae87c880a7e0604f214d0b1d279a1af93e7e62614d395ce7a84f9604ab722230727caf277ee899743e2b158d2a75ba32a6dbb174d6c258fe921f9d0a80ed2d09a88ba63cef2b90296809843487edb85c71727f34c2bd48ece5433dfbf3e5ec0e46920417ab80d728c13240e028e45fbc7fb7e8c1c8985c47869abe362719c066f710714211a5515a3845ebc0c583ae7f4a4c2a9084f0719b739e109b80954edc5ebd2c2e13cd6b7e680c2494aab5af8b0748a4ec3f76ca780abc72f0c7131cf3beb816c45193dae0788a52b153662e18b8f22353eabeb703dc8c91cbfb414fcb7b6c148744e8e8ff6561d13a1e27e51520d846cabdd833868cf0c4419dfad81ac48a8ac6d1f39b8f8b8c05c32ba78cae0e67640f1ee9968d323b421c43247e09a46ee166296dd4af36de1b468ef01f694e1970557877517c3053ed9d258439377a6c4b176d483ec40b0aa20ffddaebde8d702b09ac9c908d853374f7f72822b056dc2474bdc44040ebffc41e1704b4501c3b4c23e7adcc5f59129b21c132f611f98da6d1b884b7722c5ae8d28f3770cfd13243581dc9c47f2c06732c13c6403b2249cce32a6c622fc8cd7e57d5e7349b645849d13c66d22cb05d7b6c187612625264a1f2fc734f4436b932d195b7e54936671f13e4080f5a2a587ac0d6f73cdc05b1d6b076a0a2af446566bd24f035ea1f0677a26794f42d0fb8952834cadeae7f49f4eadfef51c7c3643defb42d97ae8f607d1850f24ebafe4c79e176e8561a755f0388954df78dcf696b483196b3764cfa62d8e103435fed1301ba9ca6dde0242678029c34ad7262baa94346bdbcd424c8a26c1a2571f921525cccc2d2788a564600d2fa0cdbc1ca90509c921221612eb94d61be1aabf88081f46f90394526dcbb62bb0c81120a7a7eafc5978b65acedbaf28da411834981b96569cfbc31294b777f3273adf33c88b04afb09cc22c1bd918e8f907359576306b9624db1e58b3d787ff562138fa36ef14d94407832821a4b367a8b48bad5dee4ef59eb561eec59a7b920b9455237a0061930448576872820525ba0f84c264d54f0e74263dc84974b348b7fc3135c29344d3fedd445d5e724362451aa576c844654f4f2c12156569634ceac3bd2c735510dcd47a5010f0c98a2fe474c41c41a5125668971623ed26181a7c1d9f2a8b1be5d2fe281cc0eb86af125dacfcb3a73270c374e2ec8816eaf8f745fb5a4fd75272578645f8076e1ca552fbc909a1dfd1cbca3b1101bd5c0001f66cf82b9d2c6abc8835fafa283304d10eb226dfd525e680bd549d0c2d01928c26fc5d2e58e5433b95334ab9ace9976811bcf142b786ffdb832233c7c89add2163c53e0b445472724d0670201f1b6799c67933e62d8c5fa230ec7468a2c1fc12ceeff42cae730b7c77e816c15f02ead0fc6ea8dc48e4e13223d0694b098d0f5138cc8031814f3bbbcc6de870f40ece11c70f251ffc3a9a49065b5f046a84a991722a7a0ee9e15b717eaace81a57bd75aa18c6bb85fd2fa011d4c4848106b0d349299ef9fb9629711e4a56bf6b81454a03e94cb5f7026156e681eab1304b58bd55c1053c978e9ea106b064d5cd47e1dbc7e066ae60a349ef18ac60ba69f5d5f552ea6db41e59775854ee4a748658d032e9007a12d296f5d856652a3d9fd6a9b84fad1fdfe0500d07ab528306b4e7a8bb94ec8537cc06e0a1008c35ad35f1149a498b289ad5f608c08a4a44549dab32fb33c456ffd934c74b86b519ac28eebd1924a8e8b538ed4775cfba9a3ce367d7124ec100729c4ca09621873ab28551679ddf8374ddba4d3e891e3bf929667e2a5f74a3f0116a8b2bbd2dfa88c4023cb95cd68e8471f55eb4e738d0dde88250e37103a27b5276cd8305010340cbc463ff7696636e28e3360348e0665a4b0ba937133efa21eb2048fb2a6850be334402cc79d573bc50122036be86c4663087176f8ee1b76b6c991bd4f3a60981862c23ee16aa641c4975a5f447bc504161b9769e88e39a36bf7838baacbede6facb358ba51eabaea7cbb945552f838f6f63c5841aade2a7cdb0a5387193ef9715b981387283ff4923a35313e062964dbb62427bb69ba061bb2b8c302b5644b5a602a6dbb5262034700d2afe09fcee664bc3f692bde044716e6078745534b199b5d0d0c90a9820493e600f08069f96632c5812ec7f8a99e97a0562a3af6bb417875a30440409bd894a466b1b2408d84fc9ac5c8a655b479bce75acb58d7f600175814a212005002f53649b7854a83826f56bbe3110f4d80e122a731593575e70b1ad3ec9e4a9ff70d39f01404a7f146e7cd7420e3e8eac7c5bc23bbc4d7144cc4acd8c1b076a1896859fabed2ecee52e19bdde999983f711fa2369556162c80d4c2787a59e7b282942245a1a9c8f7159dcb3df8a2ce4b3760e18f2ceb3be4e2ea27318505976be3570469a9048dc9a3cf3ea379ff4f08a69302ed8f2046a29a1f45ac0a1d1e4427ba3a1c202b67a3aebfe0b90aa0a462ec162997d8883704f9140482e9117b7b1426f736148ef0b5ce104034a5c83586174c6ffcf1a180e62f1368c695c91173d2396da66eeac5410f961620e60f8404f2c87de93dfd4905a731257982e1cafead2ee5c4a2311892803d0acfebc450d160859182ea4da6d1be44e4b82370e082c26eab7fe5ba67617f1061890e4c12fe801867c51bd122a27a0ae9fa2d7dca676f49cb1ad8a30da7f225570dcc42b4292cebef177db3d3e02f2eb60fdd602ffbad9a02d839ee367c76cbe07baf8d88d1d46db46b30cc1229b548e1ce0a62783207877301b5db72005b13714e9103f75ed74ff0203e9caa974b29fb52819099b324e008a8e1c6dca6f40bd8bc3a9300b87ad72262c6ccea46035b7339736c9b5f4d58d1bdfd3b707ffbef405cd483ffa5e7ff214acd2dcdea2729a863cbde082a184171913b07caf5c1e5479071ff73179f94e230a9245f009b6fb083dc4861975bf3ab1dd9ddcc2f7a53609e9550e6120583266d1a057c223ded4a1760854665754686820344471d1483c613802c2a7f1a62c4d5aaec75a8e9e4c375d94ee7eb83347f19776c6ea7af04c0b2908332342456948663b0a90dcf5a39f91fdc92b72e5325969cc847665f85daa910dcadb0ecd04134217f542d77919fdd19fa1d7fdf1e6dd86fe8cd590172cd02a1f35d4007b3bb3ec69cefbec507ec42ff17b570b7314aaef32b8b0d88d707e4ec29d01ad2c726ae0ef7f35d8bc67453062255834cad2cd41c8fc40fd3ce896bec31a7c2b02ed80ea93910635a1320d5627befe30cfc68da5f4ae761b965cd22530ae6aebd2b3ef0b171ba5505079141ad8043aad1c9a1026c10c7fdc07c28cb2470ab4dbd859b839600d2b5337ee649b010cc0a390cc93afc0abb4a427e21ffdf961b5db1d5338823942a76208d4a5bdca1900ca8880923c0602d853ef005b9756d53dab3f12dad16b06205e8c47e53946b71ef530a1b46c78c53394ada1a25bd70adf33cbfd60fe4439a05ab344e0e29f15f601f984026fe98e0c34dd92aae193ce8ad8836e389a9928b3753fb6cfa806c5acc89c2ce83e1c444e1e41c05b885a340d25c9648c862d70baa2c3ee6d5451c158da4e5af608c45647a296c3223d09ef439f0f1186d902ea97948c59c93de6473bf5a33309dda1b397b76cb61b1d959cac722fd1c9776f9e2329bb4c85ec2fcce0b9ec5c410c79e28ae60edc3dbe4be38ce71f43c67df5656db5933b5ac27bfdff8a68f3388bf1670dea483dbbacdbfc6b4096a578658b9f4d263fad1edddd7b033af33766e8ffe89fc5b681dcc5b4fb93f918ac8b2481f60c8e4ff83e1f1e6f4afce6f1ef77ad2dfdc69596313a48a8d87627977354c33be811694e18abb03e61349c331e9542b50ae997147ce2a547079d2d46deb136441caa8115ef3fcf1186be207505ae6184a2a4c24ae0d7db2a08f132e5932448ad2143c1e052585286a6f35823ce580aa3d5b3006d7f7b1e2dd025df619c0dfe062ec0bc9494c1dfe1ec3585ed988465d77aaec15c84e872ba48b630571f72ac9c9fe83630e50d99eda81f87d9c1fb2f2076b199399b478a30790d2c573d318bafba464d530d9fe3a31856baec848e793563aa9e29fa1eddf8280277e8ddcb1df79daf1d5594e26bd92c3a06234a6d1402bbe38311d34f8b4767d5ede3437e03a539f03ecb9cb5c9efa8b09329d24c3101d31451dbaa862ad24a22569e2a5085d98135b4f9313347084b6843ba4633ff78e010f3884b110c65197f88d5b658d8e91712bd3dd146fba511901ec082e5b30e970cabdcac45140dbdc6d0fa4671b581e22feca884278ffa1f3893e6520ce97b42cee5643c2a6331ba71f0b9211392aafe89f7e0501f91152ec9aae2d0869b0a3b0c536675279069b970a3be8831ac194db96490048aae1e83e5e319953cb6fabae1a891b94041a7137284135fee6ceac23a9f078eec09e20ac76722600187d35150097090168e2642286840c6877910caef036766e06618eecc3581c67f7fb4af096538732a7f184c5b0cd09bba0b372b762f08fe021b6c0153312fefbc608d8b48cc7b89e79955d7c8f359a7c7b29fb6664fac9e2683295db3168e2a1cb793c4c97370a60c2fb249e20dbb20d2d34d9f1fbe1265298d0fa00db6eebdb54077afce949a0286428f9e2a3caae504dcbf9de704eafccbb55f0aa3b7c072f49fb24777c51de2cccf677046cf063b1647d28dab1dfd0fec68c56657a50f4e64c99c93959e74c2f56698b35c10899307cab8b5bc2143a545391727dae6a96ce9b54fbe10044567e0b5b610b5ca773edeead73d7cc2fbea0bc6"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_MESH_SETUP={0x30, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x8}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x106c}, 0x1, 0x0, 0x0, 0x2000c880}, 0x4004040) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1827.661947] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1827.715059] HTB: quantum of class FFFFFFFF is big. Consider r2q change. [ 1827.737897] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 10:46:14 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000000)=""/6, &(0x7f0000000040)=0x6) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1827.789099] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:46:14 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r3, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000000c0)={r5}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000040)={r5, 0x1ff}, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x4300, 0x0) 10:46:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f00000002c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(0xffffffffffffffff, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(0xffffffffffffffff, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={r6}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000200)={r6, 0x81, 0x7, [0x2, 0x2, 0xfff7, 0x3, 0x0, 0x9, 0x6]}, &(0x7f0000000240)=0x16) sendto$inet(r4, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@aname={'aname'}}, {@cache_loose='cache=loose'}, {@fscache='fscache'}, {@uname={'uname', 0x3d, ')%vboxnet1!vmnet0'}}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@subj_type={'subj_type'}}]}}) 10:46:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0xff, &(0x7f0000000040)=0x2) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:14 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = dup(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x8001a0, 0xe80, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a8ffffffff00000000122e25d386dd", 0x0, 0x3b, 0x0, 0x22d}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000ad00)={0x0, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, [], 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f000000ac80)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r4, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r4, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) dup3(r3, r4, 0x80000) mmap(&(0x7f00000e0000/0x4000)=nil, 0x4000, 0x2000000, 0x30051, 0xffffffffffffffff, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, 0x0) dup(0xffffffffffffffff) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={&(0x7f0000000000)="95886b160fd49b29c50933c9c15b9ed482e19b63bdaba908297965a63e767c", &(0x7f0000000040)=""/235, &(0x7f0000000140)="093dba2a76306b6f1f9406012e79e72ca5d51bd5b700c699", &(0x7f0000000180)="800a97de57a91e0d57b3da4d593f2e2aa90b492a2e6ac44d0147df676f8a9abf75b7872d542e462f11aa479cab6c", 0x3ff, r1}, 0x38) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:14 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$security_evm(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='security.evm\x00', &(0x7f0000000100)=@md5={0x1, "ad88c9b13b7e65f84ec2d214d5e67aa1"}, 0x11, 0x2) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:15 executing program 3: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 10:46:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x1c1882, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x20800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000100)={{0x4, 0x1}, 0x1, 0x93, 0x6d, {0x6}, 0xff, 0x5}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x28a03, 0x0) 10:46:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0xb3, 0xd5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x181480, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000100)=0x4) 10:46:15 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x402, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0xd5, 0x20, 0x0, 0x3f, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa00, 0x3, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x4, 0x1f, 0x1}) 10:46:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x3c) tkill(r3, 0x33) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r3, 0x0, 0x0) setpgid(r2, r3) r4 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000140)={0xffffffff, 0x7ff, 0x5, 0x8001, 0x6, "bde1b7cebc1961f1bec7faa6c058a5eaf8efab"}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', 0x0, 0x18}, 0x10) 10:46:15 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) dup(0xffffffffffffffff) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000000)=0x10000) 10:46:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0xf9, 0x0, 0x0, 0x0, 0xc020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:15 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x501a00, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:15 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000100)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x220, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x3) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = getpgid(r0) getpriority(0x1, r1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x400, 0x10082) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0717000000000000000016000000050009"], 0x38}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x2d8, r1, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9611}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x630}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8bf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x938}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3f}]}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x3c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd37a}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x83bd}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x83}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3659}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x2d8}, 0x1, 0x0, 0x0, 0x40}, 0x1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:16 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x44, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40810}, 0x40000) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000500)={@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x3, {0xa, 0x4e22, 0x100, @dev={0xfe, 0x80, [], 0x38}}}}, {&(0x7f0000000440)=""/112, 0x70}, &(0x7f00000004c0), 0x43}, 0xa0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) semctl$SEM_STAT_ANY(0x0, 0x3, 0x14, &(0x7f0000000380)=""/158) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:16 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x101, 0x80) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000100)={0x0, @data}) 10:46:16 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000001, 0x20010, r3, 0xffffd000) setsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000000)=0x1, 0x4) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r7, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r7, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f00000000c0)={0x1, @bcast, @rose={'rose', 0x0}, 0x3, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x9, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @default, @bcast, @bcast, @default, @default]}) 10:46:16 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r4, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r4, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) accept$inet(r4, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f0000000100)=0x10) ioctl$DRM_IOCTL_AGP_INFO(r3, 0x80386433, &(0x7f0000000200)=""/202) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) 10:46:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000009, 0x20010, r1, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, r3}) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) r8 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x50, 0xffffffffffffffff, 0xe37a3000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x2, @mcast2, 0x9}, @in={0x2, 0x4e22, @private=0xa010102}, @in6={0xa, 0x4e22, 0x80000001, @private1={0xfc, 0x1, [], 0x1}, 0x513}], 0x48) dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x9, 0x30051, 0xffffffffffffffff, 0xb13c000) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, 0x0) dup(0xffffffffffffffff) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) ioctl$sock_bt_hci(r5, 0x800448d2, &(0x7f0000000000)="88fecc933d671ec235f8166a6be93abef99a4f4b1aa0cd80098df0afb395ae1cf9390b59c86063df8394df3e41e9fac391505109521cfcd504a3019f2f8fdbe93c35b551a91554a007966c81ab4c2f4c411889dbd32e8b0985c38f7cb9fe095c429a4ce474579eb6095431d22f155781cf26474940") ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:16 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r3, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000000c0)={r5}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r5, 0x7fffffff}, &(0x7f0000000040)=0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) dup(0xffffffffffffffff) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x8, 0x2070bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x100}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MRU={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x400, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r9, 0x0) mmap$usbfs(&(0x7f0000096000/0x3000)=nil, 0x3000, 0x0, 0x80010, r9, 0xd0a) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:17 executing program 0: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x186) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x400000, 0x0) vmsplice(r1, &(0x7f00000004c0)=[{&(0x7f0000000200)="ae85e3031e9b4e1ea5bf7225618c16df432fed126aafd487402f3c0f506eb0098db6f9ac7c6e497d748122e93b5d4f9ba59349e22bc37c8cb8ef64e633903013844e2b9965ed0bb508ab7c0258b723ba4593a48f636a6e7d41e902a18eb57faa5181da588ac79cd1a116374864db3e8be2856ecbd5f34adc6205f8791cb027055a2e4038fc3affe36cf32862c1e3a9cee485d1f1d92ff76072f2fbbc5a50cd43d9d3eefb893d0b5a0a5e95324d42ec4840e88382fae4535084063e6a803c1058d96e94c0", 0xc4}, {&(0x7f0000000040)="b11789a260ec86df4899b0869d2f2535e5c2bfdac0b3349dae204880976718dc491e", 0x22}, {&(0x7f0000000100)="8c015294b702ad7ba77074b5cd45d41f4b18703a8e77dd7aae65f9675e19f03ea75882d9313180296af34ef79bb1a481a67517cb64e4b7e58a4b20d49485b2676d7580c57e06e1377c3f7fa6205dc02d72812506d67a67ea89d76ba4f2412a68e71f03f80cc173e44e1fc4abf29534ba6b0c49ea12efd7a38023a1087603789c77f859eab89732ed5ae3924b949d48d01deb", 0x92}, {&(0x7f0000000340)="8d0495c725f65a0687aeb815f9db7a14179a373bf4db14c8e6d840de9c005090e6a9967dcaa2a2d8ddb63bfc5679e7804c1c6a6bb2c51c8541235427d39f03c69c09c8951c55d9d425f74f37d24653fdf85d8b2beac03341e8e38ffef8c7", 0x5e}, {&(0x7f00000003c0)="1727d30248ed71ddf25869952335477b207d07b4ca8f1f782eeebda889e06612221dfc7bb1cadfdc4d755a1e56000ed1d0c02e7c3aa9c871b3979d4606631b394ec08fa7e93e4ee4c2428096b56cfd5a434ad078ec01eaaaa21c690f2dca025d1425da3b5452d598b12d97a61949472151428910b43968f598c740cee4b27df0c592", 0x82}, {&(0x7f0000000480)="6a6a65ba954781eb8d1aff02425254aae138b213c90a2802e6a1b243af5ca36107ccb687832d6c86072ea86f2f5943b1af4a6b6ee249460d5fc840b1ff", 0x3d}], 0x6, 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer\x00', 0x202000, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r4, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r4, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r5, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r5, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) recvmsg(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000640)=""/95, 0x5f}], 0x1, &(0x7f0000000700)=""/32, 0x20}, 0x10162) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ppoll(&(0x7f0000000780)=[{r3, 0x20}, {r4}, {r5, 0x1200}, {r6, 0x11}, {r2, 0x8}, {r7, 0x8430}], 0x6, &(0x7f00000007c0)={0x77359400}, &(0x7f0000000800)={[0x8b]}, 0x8) 10:46:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x10000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) r3 = dup(0xffffffffffffffff) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000340)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], 0x6, 0x9, 0x4, 0x0, 0xb0e1}) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @remote}}, 0x4b81, 0x101, 0x5, 0x8001, 0x9}, &(0x7f0000000480)=0x98) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000004c0)={r8, 0xb7, 0x20, 0x0, 0x5}, &(0x7f0000000500)=0x18) r9 = accept$nfc_llcp(r3, &(0x7f0000000080), &(0x7f0000000100)=0x60) bind$nfc_llcp(r9, &(0x7f0000000140)={0x27, 0x1, 0x0, 0x6, 0x81, 0x1, "297c55b8071abb4fdaecd78a2986dff6f525fc32d628ac6255992a52dbab1f8c80085d41b9bba491405af2c6f2c2b6901d1bc72af796e2b80a7470b3fd0708", 0x2a}, 0x60) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x1) 10:46:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x8082, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:17 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x200000000008002, 0x2, 0x1}) fdatasync(r0) 10:46:17 executing program 2: perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0xd5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xe421, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0x4000, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:18 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'team_slave_0\x00', {0x2, 0x4e24, @multicast2}}) 10:46:18 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x101881, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x420000, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) r5 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7, 0x100) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, 0x0) dup(0xffffffffffffffff) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) 10:46:18 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x2) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x0, 0x40, 0x0, "f38ac051e69f31e905a0124fd21485afe9926b70a48d2749c98a5cc0ab2d2776b1cf2609c9d9fe77ead64a6e8b0f60a975c6d867e65f66a6ac1f6407e9ee32216afce0ac90741578b5d40b5972485fac"}, 0xd8) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r3, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002080)=@delchain={0x70, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffff}, {0x0, 0xffff}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x70}}, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={0x0, @nfc={0x27, 0x0, 0x1, 0x7}, @xdp={0x2c, 0x2, r3, 0x5}, @isdn={0x22, 0x8, 0x7f, 0xe}, 0xffc0, 0x0, 0x0, 0x0, 0xfffa, &(0x7f0000000340)='vlan0\x00', 0x3ff, 0x0, 0x3}) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000000)={0x9, 0x10001, 0x1}, 0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) socket$inet_tcp(0x2, 0x1, 0x0) 10:46:18 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) pread64(r1, &(0x7f0000000100)=""/165, 0xa5, 0x2) 10:46:18 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000000)={0x80fd}) dup(0xffffffffffffffff) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) 10:46:18 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = accept4$nfc_llcp(r2, &(0x7f0000000000), &(0x7f0000000100)=0x60, 0x40000) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000140)={'gretap0\x00', 0xfff}) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000180)={0x20a927, 0x1f}) 10:46:18 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x109000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r7, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r6, &(0x7f0000000000)="98", 0x3e80000000}]) r8 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x8, 0x444800) io_cancel(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x401, r8, &(0x7f0000000180)="98711caf6b5369b02f62f08d34608e7d0c10527327f94a67040c5b7eae76e4393e4629ec4e2d4412be13f2158a", 0x2d, 0x20, 0x0, 0x2, r5}, &(0x7f0000000240)) accept4$packet(r5, 0x0, &(0x7f0000000040), 0x800) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:18 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) userfaultfd(0x80000) 10:46:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x10, r2, 0x2000000) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0xb04a) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:18 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) accept4$alg(r2, 0x0, 0x0, 0x800) r3 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000000)={0x0, 0x0, [0x3, 0x4, 0x5, 0x1f, 0x1ff, 0x3, 0x88d7, 0x4]}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$PPPIOCGDEBUG(r6, 0x80047441, &(0x7f0000000080)) dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r2, 0x80045006, &(0x7f0000000040)) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, 0x0) dup(0xffffffffffffffff) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:18 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) 10:46:19 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0xa9c) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 10:46:19 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:19 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) bind$bt_sco(r3, &(0x7f0000000200)={0x1f, @fixed={[], 0x11}}, 0x8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r7, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r7, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x880, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r7, r8}) 10:46:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ion\x00', 0x480200, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x400800, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r7, 0x40505330, &(0x7f0000000340)={{0x0, 0x6}, {0x3, 0xfd}, 0x6, 0x0, 0xc1}) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000440)={0x7, 0x9, 0x0, 0xd19}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x8090}, 0x24040094) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r8 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x4b8021, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000003c0)=0x8, 0x4) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r8, 0x40505331, &(0x7f0000000100)={{0x3f, 0x80}, {0x5, 0xff}, 0xffffffc1, 0x4, 0x3}) ioctl$TCSETX(r6, 0x5433, &(0x7f0000000280)={0x8001, 0x7, [0x8000, 0x100, 0x2, 0xfffc, 0x1], 0x1ff}) 10:46:19 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlockall(0x1) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendfile(r0, r1, 0x0, 0x100000080000000) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') preadv(r3, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100)='wireguard\x00') sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc0c0000", @ANYRES16=r4, @ANYBLOB="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"/3254], 0xcbc}, 0x1, 0x0, 0x0, 0x20}, 0x8002) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r5, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r5, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000100)={@loopback, @initdev, 0x0}, &(0x7f0000000180)=0xc) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="78060000", @ANYRES16=r4, @ANYBLOB="010025bd7000ffdbdf250000000008000100", @ANYRES32=r6, @ANYBLOB="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"], 0x678}, 0x1, 0x0, 0x0, 0x8020}, 0x4000841) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000040)={0x200, 0x0, 0x4001, 0x8000, 0x5, 0xbe, 0x1}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$IMHOLD_L1(r6, 0x80044948, &(0x7f0000000000)=0xffff2f08) 10:46:20 executing program 1: openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x20a92a, 0x1f, 0x0, 0xffffffffffffffff}) dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, 0x0) dup(0xffffffffffffffff) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x1c) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x2a, &(0x7f0000000000)="e002235480cad97569b15a460aac46a15825d75a5b41feda0b87f51d718f52c599169364583dc331786d2a9b09f4d4a0df06118d9517ddc1421b6f919c88212e944a3c574f2d22de61150d", 0x4b) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, 0x0) dup(0xffffffffffffffff) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:20 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) bind(r1, &(0x7f0000000000)=@phonet={0x23, 0x2, 0x1f, 0x1}, 0x80) 10:46:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) dup(0xffffffffffffffff) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x422000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x109000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r7, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r6, &(0x7f0000000000)="98", 0x3e80000000}]) r8 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x8, 0x444800) io_cancel(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x401, r8, &(0x7f0000000180)="98711caf6b5369b02f62f08d34608e7d0c10527327f94a67040c5b7eae76e4393e4629ec4e2d4412be13f2158a", 0x2d, 0x20, 0x0, 0x2, r5}, &(0x7f0000000240)) accept4$packet(r5, 0x0, &(0x7f0000000040), 0x800) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x2, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x8008551d, &(0x7f0000000000)=ANY=[@ANYBLOB="fe8d0800000000008e0f8f0094858f0d0b0505808c0e84848c8486008a0482"]) 10:46:20 executing program 3: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 10:46:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) 10:46:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x109000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r7, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r6, &(0x7f0000000000)="98", 0x3e80000000}]) r8 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x8, 0x444800) io_cancel(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x401, r8, &(0x7f0000000180)="98711caf6b5369b02f62f08d34608e7d0c10527327f94a67040c5b7eae76e4393e4629ec4e2d4412be13f2158a", 0x2d, 0x20, 0x0, 0x2, r5}, &(0x7f0000000240)) accept4$packet(r5, 0x0, &(0x7f0000000040), 0x800) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:20 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x80000, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) 10:46:20 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1ff, 0x80000) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000340)={0xf1a, {{0x2, 0x4e24, @empty}}, 0x0, 0x4, [{{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}}]}, 0x290) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a0000000400000000000000000000000400000000000000e40c00000000000002000000000000000000bb4cb556a2c44552a704a1ce98a8106c3b4433fa"], 0x2a) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$BLKBSZSET(r6, 0x40081271, &(0x7f0000000000)=0x1200000000000) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xe) 10:46:20 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r7, 0x0) getsockopt$inet6_dccp_int(r7, 0x21, 0x4, &(0x7f00000000c0), &(0x7f0000000140)=0x4) sendto$inet(r4, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r4, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r4, 0x1) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000200)=ANY=[@ANYRES32=r9, @ANYBLOB="0000ce00fb32769ff5dbe214ea63229c8f53e3ac307a248adbecf9f081e37884ca15a3bcaee27917fc2a0535e9f8ff998680ba6cf41987f1dc9a4d93e8e074e52fb0500811ab9ac1ddf8c35269c99d800694a6618fd31f7391137c2a297d6aa22faeb9c0ef9eea8ab7b1431b17be8a7d3b77628df3e0a55d95a9ab9341ba64aff1047d726fb719aab2b8246e3164829d5331fd7f006fcbc9f8a6d9882e54e9e7f96df650586ec7c37e25103507871c8db5e55f2af0b32c842ef98eba95a85935d657034e96cb6f319bac8b12ac235553f71f721b350e629c282a9106bea9650c6851b71317b8"], &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=r9, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 10:46:20 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x109000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r7, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r6, &(0x7f0000000000)="98", 0x3e80000000}]) r8 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x8, 0x444800) io_cancel(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x401, r8, &(0x7f0000000180)="98711caf6b5369b02f62f08d34608e7d0c10527327f94a67040c5b7eae76e4393e4629ec4e2d4412be13f2158a", 0x2d, 0x20, 0x0, 0x2, r5}, &(0x7f0000000240)) accept4$packet(r5, 0x0, &(0x7f0000000040), 0x800) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:21 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f0000000000)=""/99, 0x63}, &(0x7f0000000100), 0x5f}, 0x20) 10:46:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa200, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a92b, 0x8ff1187a192dca2c, 0x1}) 10:46:21 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='/dev/ion\x00', 0x9) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x8010, r1, 0x81da000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x109000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r7, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r6, &(0x7f0000000000)="98", 0x3e80000000}]) r8 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x8, 0x444800) io_cancel(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x401, r8, &(0x7f0000000180)="98711caf6b5369b02f62f08d34608e7d0c10527327f94a67040c5b7eae76e4393e4629ec4e2d4412be13f2158a", 0x2d, 0x20, 0x0, 0x2, r5}, &(0x7f0000000240)) accept4$packet(r5, 0x0, &(0x7f0000000040), 0x800) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) 10:46:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x5753bc646a27b936}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, 0x5, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x890) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x503c00, 0x0) r4 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x101000) ioctl$KDGETKEYCODE(r4, 0x4b4c, &(0x7f0000000040)={0x6d, 0x8001}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x109000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r7, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r6, &(0x7f0000000000)="98", 0x3e80000000}]) r8 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x8, 0x444800) io_cancel(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x401, r8, &(0x7f0000000180)="98711caf6b5369b02f62f08d34608e7d0c10527327f94a67040c5b7eae76e4393e4629ec4e2d4412be13f2158a", 0x2d, 0x20, 0x0, 0x2, r5}, &(0x7f0000000240)) accept4$packet(r5, 0x0, &(0x7f0000000040), 0x800) 10:46:21 executing program 0: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x5e, 0x0, 0x3}, r0, 0x8, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:21 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) lstat(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r5, 0x202002) keyctl$chown(0x4, r5, r3, r4) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x202002) keyctl$chown(0x4, r9, r7, r8) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x7fff, 0x9, &(0x7f0000001680)=[{&(0x7f0000000340)="0697ab38b6578467ee1e4ed5a7da7bd644d8e33869417d93a78af964b56dba816931686b1a5cc96ae60fd2fbc2190c5c9590d5e521df7015864f6f07073fc5045fe4ff225f1eb0d8b4e13e15e5be4be37d832e09dc8cbdf10ae253e54da84055d11c8dc6325fbe456bcb466a41ad2ce2048fc979a5044a808a6d67c8d22060ba164b9102d92c312d55d9d1c257de1e66643956c52813c65393fff5022361a827d615d960d2b7a47a3045944c3e364983dae92435033f9f79934a4ddc1cca552b95e74c39464a17c54d12047effd064292fbdc1e66e84be31a9826ec3c33464c6ce23628b78bd95b8d569b60fe8fe4a96b747408bc8cc6e2268bc8f5b8233c021cc454c2c4c155269454aeaa4e3a419d19d5abf8cfb63d5b3613cad65fc2cf40f8782313265c97d629bfa1efe36a2fd76209b09c28823c287a90aff723780ad4ef3c50b180302618e89af96e41aba1da8a67c132683d4207a49a940e9dc69c49b6cf1030fcae1358351ec947c9a5e42655e110c689a1f28e382b5de9a6e4b6bd9651b90deeb1831975afef35511462f5181dfccc1e53177e428c38c3a4495d8e24981a0cef25659c3f08eb535f446fdad706b21460bcfa09f45b83a6d1e84d200333d7a7d02af6c4430f75fbaa14dbd85fd52bf47adb7c8d79d69ce936120faa1da9cf689b5e026e458bffb52eba6ba9e5c79e27cc7eb552190d0afba086768083b9be5cb6f800360178428ca2ae96352f3f9bb28e044dc81a544315283dae31d98ae4d324297193a9031a7b5e98f894de51f33138dd39a350d45ed422fbbd574da0b3f017857922a6f25cc3be8e659a9a048c2075ea34f0d54f593cfbba967234051b4ca7d083b0f98987fe7c3584008744f296c504875dc0d4a5149e954dfac97c77c27c464890ef354b0a1b47ba801693a01b1bd5b2eb7e7c905fb94d74b8e3681022ce096092bc567d972f990795665778a7c5bb04864a5447303dd359ccfc9fd3154a5ca150c6b8c227c1b4a66d790fdb720824c2ff7b197bf32da0207d3d08f559974dee51eb16e2b26727f865fda31621f9c7b33b9e34dc11eb394ce90b335d9b5346b668666241deef052ea43f15fd0e90a0ff997ab646145958014f93940330172f7092a93aac33123e70413da5a95bcb701c8c2bdfef46aea4d55587048ababd0238b709ec454d54079528cbb1b9608cee679fae6fe804e6ea80826eeed740f1cb00d94573e9a7674d57a057effddb02e52bc9c4b46fd7c14b867c78aa5818f36cdaa10d62c4987ece6cb0047a189054b86eb3218f3c7e82262ca9cc7755204b41feab7667dae20b5b27ff10a49a78601001053d50650b6dcbd2ce5476987555e903399503ac00d61209afbe1d666cc73cdae97c14a2791c78724cbf220dba239b3e48af6a5edd1790a5389b39d503acaebc30ee23da970bc4b62cfe07aff5576f63e24479982b665b1423efcd57ce585d50bab3ea0923c72c2531e806cddd39877532a8f0a1e02925205124cf888e0b93bcfa793623e24511d88deb0d1e34a9ddde52081b850e010a4ebb1d153c4739626441b404d7f5d3ca9818d28a1e60688d147907f0fc9ab37d2fafc1faa155554f932b2d989911d5157f212b4cc322047478c4ccef3fce60b9e054de7bdb90f62d103b856c36e7843c25ba50b87a2025dddb05a58e52eafcf7b0b6ae48a7cb1a7032c3fadfa4d6ac91dd6c043bf14248e3d10a9eb54ee140e1cc5a03571d6d89dd36c41e4a284a96241cc32c25efe2a30fddca1ec72ebdb0c6f888e06f3d299fe676bcb53fca082a8c4998a0bb5ca31d1d4178875bcb0a20036a1c7476af75b05be5ae468ba9c60eb02800b3c2e2921af9ae17737611cad87d99ae31b378c601fc86e05c14f3df8049a26d6a1a191fdbf9f5a8016bf88b0a4d87d630f12f17fc6d197c86e43d70474de349fe7ab08f9defcadaa405e3c70af27ec73ecf98af0158269f2f5e1545f2b4ccc333d52ab884d5e23c55d9cbbb505556acd6d4988e9210f0a4a4bc25de63460f6759693688a32ee41a17dab99aff2954e16c1a29070e8d7d89759d9339d58d8a2f95859999961b598847e4770c23f442254bf216f43774bda5cefe8d002cc76e35046b7000ca548e4436e2d2a70902d4114d34b6349b11b2ff494b35a0e3dd70b4f0459f887b8e81fd149011c563428b5a4d4b33ccb31e227ec8fc6728c5f2c1be931cec056eb3958ab1f28c7fe8186fd61e2a2fa9def5d31a3c15ef2e434aba48c03f7dac613035265abaf20b6035824d974f2dc5ce982ad3cbec02f45fb06a85dde0f68677605f5de62f1f93db5b61d307563918dceeaa8eb4bd29aae3302456ce0cacc236769acf8fd13e3e7b2315e182cc53265c41c05b7289bc10dd28e341a9e509425c707308c029ca26d8a2012c7c85b06ffb0770a82effc08d558742377b8a7a81842306857a623846b7053d4c1a36eaeed939367710e0f65c21a3156d720f141b68b0498a84feccfdca0d2c4ca0dffc663dda9013a07dca66e33ebd34c9c754dc126627688d9c3622a8a4941f0d9810aa08be527cccc976be5740ae8f863e8d8cb08428b12407dda80a925cd515a07a65e29587a3c4ea3d22a3f4db8c0c0e0cd2b9acbff1d15ad3aff54bd3aab80d690d82d7ecfa6614c31c87b9ce22f8f3e23ad30000b23f96e62307b9cceefc8d66b6d26d0e95d99fe51e53f36c25a5e9f854028af61e04c68802188cde661a46d2aebebd66f6e473a0ce881d80700babec2f2041e9d1c76b14b65e550f1442d90d05af65ed09ecfd9a0174cbebff973d154e5fc5d224ae02b6db8fc44e810704298be9bac225d38fb82b0b73c8712134ff6fb4bb659c50ec9c46a1785fec320a9db63c6954ee36aacd2033d97485a5d7689f9511f4a7ee6a08c9804820294ee2de63698fefacf610d61ba022c439a49731a6b552369a5133d5aab29975fa819d22c4f16e29e7bfb1180a7f78c7513085b134ca60e9ce8697814625781628b0b23297f47cac094d06fbb78d6600d3e04795d49c14d5019a87da266f13040b6e2cb09559058ec9ae96bfbc25d9785ffbd882c57a77e7c098561fdd26b3d97a4fd593d749e5952233e3f4db5cd2c5aea587f333eef3e3b1a1d68f10f41a5b17bf2971aac74b15b5bdca6f6476c8dadcf5495f7465fec3c328fc81755ce6aef355d045f22cfa4496e1d7bdaa0bb42b1c8da3c65ff2748a41f701ce234e11655b3d746b5ba18516e8160d0d797f84ba09d14b4cfa26af621507f0d1a5c234f5e11b664763a705ba13a7bef76e40d27f9ba3c974529660056a1f2e678d10dd7ede708f761adffbd9578b579ff74dc806e80995b89b753ae8aed67cbed2179bb578313cebef1f5a749a3c510e7474e2bceff0159e44fe1bd529a58339945c11850e7bf0e19e82ee8191db114631671d929a39fba9711971b6b2d18c3eca4e72be8e00664e656af21bbcaac588b3d2024fd5884cb85d7409e7767d0783ea17307d7dac0e95761bcbfe49c664f316cab23d540b916454bac80d454ca3ed772e33a7d75a5bf031e174949d631e1ad568b91c54ed5e24587d1318496d69e9c626ea1a35635052851d696b6ec597c05640ce91710719a38b9d8b66de533ac36bde7ea90cd2de40ec5003a94f12a1f24671be349d2e20a49729893a68266e8a77329f53769fcd455e1d5885d8f9c7596300e94e90137fef3ad645982a4417ae316f9da448e2975be4f4da192f49a3acf2bb8c116b5f99dc8101040252f4451a9ebc950bfbd2ce7907d4edb8db4a7b9ed9c7105b29a5ada7a6f0c988e2d5a0bbf8dadd0824376cb0aadf33597663e986ae4315d3ef13c1ab08d644b0a2442c1bbe3be82b0097cae4acca2013248d78cf114028046dc541e3218ae0dd88c1a09b5229debdab80cc36bd5a3981bbec0c601340969393bfed116aa9c9352cf372eb419942335c2a81257e3e12454c3d524536a8fc88bfbd56843188f12b1d4544a8c4609be6409a78b46ad6b3412498b29f3a24b95bae463242a6eb13d6c24b94175f3d20a19a7d6422c1917e101c4fd408962b5dabd12a662d47d297aa8cdac7fa978476348c147ecb90cfed3dbe3741911dc6299775843f81728466ff11102b496f37a17d2cc1970d7386cb27aa11fbb36b612c30afb547111f77da57d809a208afb735fecba91bc88792ca11044a659809b0d1c501b9f00835d5c7e23ff322cbae49f88e052c0fb0ca634adefd0352908090e8c81b16361fe2c8af59b8b7b71d2b22c526706ea6d076001c72a8aa07d1f26fcc78f7a73a3d403f10ec53382ac6be95ff24a409fe528c6cc575dff27c26bd43e927bba8d2dea9881598c253c13c5c67167a34be52dc900d773af172385b7376adfff1e20ecd7f32d4088dc88639cd7dcc80b5fa4664341b8fb139d06679801849759ef891ccafe4b9c78d8629aa3f7045830f317cfb3aa13df66014ab1e3b6615e74b95c80a692c26cb80e90aad6f9c7f367a43c52be1862db601c31271cb2d7c4e9b5d763e26fcb1235e089c62e60ac4a2d07cfa953e680da3419f5315199905d6023b88569ecd3af4552be8a707a7552aa7a915d50d0feee73bd39015772a5b63edaef880b1ce75adc3422de15d259cd49ad99f3de4d0817a94244690d43b7deecc2e064dd13f890f58495600acdf77e0a06457d51c839897504ccec909c479ee4865a50728c12d77ca0c0e2a52a57ee9bf769d8f98c99b4a163b12d27c847b743f76a1745770db000c920d9a7542344970be18bc27a8b48fe48a38a98a64115030931ba11e0d50bca4bccba812d24ba590101e100ab239f604dfcb60432bf8f54065b5ae743bcc5b4ba4cd6f7ed74c6681b45a32e12c6d4b64438844d218e81d7cac967c07055cfff1a5ea61aeebcf06bc0f7047dfa51cdd732211229e33a6a5dd369a4267c6028a8e1989eaa99fcd91ea810729168c0ae92ba6bcf67d313edaaee72a886963ff0ff7572d0f4d2897882584ac7c177cf61fbfbef5995289564c99e1faaea5bf285984463cf6581a3a4987e7e68de09b508d49cde16fb18e9479aa906c8daad465c88a73086d1302527f1a48167f7a73902a7b2cac9ebb4b6d9a0ff5867048482343f1dd583e0541aaebe2e647178473f383aa1474000a31bb3bf0bafb68eb389507c81f50e74f8988c56a3ee5981dd38320af20e388fbfbfa074e72eec798204afc59c60c27d769962db3933255bbfb66bdcd73f030e62cc73e588081d965b524eb13fa7d45c29e999e07b310ca9796b696d0681f7a79e8516dff5dcc102c897c9a539cdc40a2d3b6b5d75a31d4e3a5cc62af2927c550bf770937b29b60454d478bd226541c92ec67b91e74031c0e9719f0d319c8f82cb96732d59bb2d378d8a044285c21eb94172c26c994873916a35279e8d76b468f6de03c85104e755b1b8fb5a92274f90716a94c12b075699d99cba1ac2a888f876e66302e02d8d83de021636ca90df9b458100873af236b40c9c2b778486e3c7983207709e92428470d735bdd001510ef72226b90488017fc73cfe54486d86aabb967d12b0f361e693b5b4d2cbd4b462e7ae5b98ddbf28791336a61277ca888ac42edd594550799d686fb735fdb1e75831a6647fc714cb9721a4519754c93f7b9d3feda3123642ec7e8436b539c00324cc58df17e1d6dd6d2668f717a1f0d1f7c9bd8f72b9d08b610bff108177c98a69c9d2608cd91e57c8ca288bbcf6a6b26357af9e455b4f00a116b871b96bd8b67d3fbc0234255d3928895a62376498ec01f3abd096d6", 0x1000, 0xf0}, {&(0x7f0000000100)="4e65cffdacd8c3954f15604bb5c6628e22a45e158234d38decd8ca9c2f8d929d", 0x20, 0xffffffffffff5d0b}, {&(0x7f0000000200)="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", 0xfe}, {&(0x7f0000000140)="f1f51dc3777ade7b90588384d444dc667af316e4e71a7648c8ce30c2e68fbce2436e041d8ad65d230435d43ff9eb776ed48c01e7d717673c4b803f884f0ec7b69d33e5684f219bc90b36cc27f77c2f06ea1a48884d27f9d04926bffa4acbc3420face38a9e003c3998", 0x69, 0x8}, {&(0x7f0000001340)="ad999e6af730fd6bbb20c76840130df8ce913c4685f3524cd5d98359fd77d437703f04ab876f47649518e8a55d00ed32756e86de191e7c93bacfacda99a9d3099399bc7ffd608ed5576cb02e93a446a01b3a93a351b95577fe44355f383e874cade36d7dceee55876ab66aa18cd6206cd7cdd1c215c55497a95d3a349a251d4bfea6623b972d589213af4a1415cd6a836c88654c4dc407ab2fcf3143a5829a5425f4294220b0a267", 0xa8, 0x6}, {&(0x7f0000001400)="d0124a8aec21550a68dba6d668ee06dd21b1411bdde12025738350eb9aa2880e1bcdea0f35ba65043f06e7b0cc1bec694aa507ef32103d27ef090948f34a1c8460b035b9ef6e", 0x46, 0x5}, {&(0x7f0000001480)="4e362f2e7fdb32d2920f4c76b344e5fa60563844e869695f385adfc48f81c64c377fcadddb56b3d15e70fc72e1324021eebddfeef8bf9af5f04b1c42ac0cdbd0a008dd92a5627a4595e2de5a35632729184b3446eff908ebfda0dfaf48783f3d91d1dc5acab1cb250f09d97a288d6df8d188006bb97baab34b1e4dc75c9849e204f91eb199709677a140106c0e8546fcaf72115388b68ff7314b", 0x9a, 0x7ff}, {&(0x7f0000001540)="b774fca2dbb4463e152c55466ca626d79eaac1eb3b2a81b261bad58e9410bfdb84301b90c4e0adff57219977711c703223f714baf16da90a4a01a2be06a2ce44f83abee8d29b4fdb62b7ddb57ce930555a40c2ca66adefb9b7478c8d1d382783ff54c719a00ae473826e92407d2a0b19739d84f8bca8ef3251ac8883dee6d7c50dd1e9504176a0972a44cf09155bff356811c0bf02f3fa3908a8ae59389d1dc4c9084048e71de91b65", 0xa9, 0x7}, {&(0x7f0000001600)="ed3e88ec1846d11c776d93dd81f864f4e1e08e64001cfb0c9acf0fe17f509fc9aaeb07f850196255ae54ace76a70a6c071abbe2632239383e3df453da7e3f22c94201f4fb0951ed4ca3c", 0x4a, 0x14}], 0x8400, &(0x7f0000001840)=ANY=[@ANYBLOB='nospa[Iae=./file0,ssd_spread,autodefrag,css=no,fown\x00'/70, @ANYRESDEC=r1, @ANYBLOB=',subj_role=self{&securitykeyring,rootcontext=system_u,euid>', @ANYRESDEC=r3, @ANYBLOB=',dont_hash,fowner=', @ANYRESDEC=r7, @ANYBLOB=',\x00']) 10:46:21 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x109000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r7, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r6, &(0x7f0000000000)="98", 0x3e80000000}]) r8 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x8, 0x444800) io_cancel(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x401, r8, &(0x7f0000000180)="98711caf6b5369b02f62f08d34608e7d0c10527327f94a67040c5b7eae76e4393e4629ec4e2d4412be13f2158a", 0x2d, 0x20, 0x0, 0x2, r5}, &(0x7f0000000240)) 10:46:21 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = open(&(0x7f0000000180)='./file0\x00', 0x40000, 0x80) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4) mount$9p_rdma(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x2b11028, &(0x7f0000000200)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@sq={'sq', 0x3d, 0xffffffffffffffff}}, {@rq={'rq', 0x3d, 0x7f}}, {@timeout={'timeout', 0x3d, 0x800}}, {@sq={'sq', 0x3d, 0x2}}, {@common=@fscache='fscache'}, {@rq={'rq', 0x3d, 0x7}}, {@rq={'rq', 0x3d, 0x1}}, {@rq={'rq', 0x3d, 0x9}}], [{@appraise='appraise'}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}}) 10:46:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x2c, r5, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x68, r5, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x20, 0x3ff, 0x6, 0x0]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3a443f8b}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x24000810}, 0x0) 10:46:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x0) sendmsg$IPSET_CMD_DEL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0xa, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008084}, 0x40090) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x109000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r7, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r6, &(0x7f0000000000)="98", 0x3e80000000}]) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x8, 0x444800) 10:46:22 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r6, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r6, 0x1) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="3022eafddb136227d6a59819f045bf11eb8e8cb7004869aadc7b20db42de5b0db1bc", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f00000000c0)={r8}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000000)={r8, 0x3, 0x6}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000100)={r9, 0xff01}, 0x8) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 10:46:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000040)=0xe) 10:46:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x6a, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000000)='\x00', &(0x7f0000000040)) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x109000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r7, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r6, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:22 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$VIDIOC_ENUMINPUT(r3, 0xc050561a, &(0x7f0000000000)={0x8, "6942fc64efdf7e1771e7f5b5101f5aa9ff12ae880e8b99df2f1d77b8186ada72", 0x3, 0x0, 0x2, 0x100000, 0x90601, 0x2}) 10:46:22 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x9}, 0x201, 0x2008000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x4007) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x3) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) pipe(&(0x7f0000000140)) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0xfffffffffffffd5d, 0x7, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000100)=0x80, 0x4) 10:46:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x109000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r6, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:22 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x3ff}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000140)={r6, 0x8, 0x200}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x7, 0xff23}, &(0x7f0000000200)=0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x5}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000000)=0xf0, 0xff, 0x6) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:22 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x109000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r6, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:23 executing program 5: eventfd(0x101) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000040)={0x9c0000, 0x9, 0x9, r0, 0x0, &(0x7f0000000000)={0x9d0901, 0x48b, [], @ptr=0xf}}) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x1, 0x4}, 0x6) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) sendmmsg$inet6(r1, &(0x7f0000002c40)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x3, @loopback, 0x4}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000000340)="2e5e018b30f2d2b0d87fac675cb5f3f5c5bd4a6b693aa529", 0x18}, {&(0x7f0000000380)="60a0c64412c913c5e17cc3664b30fe2bedc11ef7c14e9dc6897705599c3fc8715c9b073148f71d11d8e43f05f89c48ff930f5061fdbde168e922832b80357769ecd31f3bb355650bff50da122b2bfee244fab8d7faf91d483f435815b6e7cf840fb36f061171511de56149c22a666a7fed1cb928881ee47b55752a8b1511d548baa1b266aedcc46b70cb34b59cbb0a232867cb23293e39f744e09abf849db5e7023f16d72c96", 0xa6}, {&(0x7f0000000440)="9eadf2985a6edb04607fb2bc3cc880f46e9bcb", 0x13}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="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", 0xfd}, {&(0x7f0000001580)="ec", 0x1}, {&(0x7f00000015c0)="e2d429605e", 0x5}, {&(0x7f0000001600)="7b77505c2ae00f580ffcd2125ba65daa5db26b", 0x13}, {&(0x7f0000001640)="52656865961d4e2ad7a600fbb96a636cd45ab348c4aee31f9795a7b605c4b52c645f7cea60df3e90dc3b7da48af243a85c253a218f39326c78358567b034ec6e3d095987589554fc9b9eef58d35b93b489fbf9def6903837ef007a7bfc7a68688de1066a09c24a48712ebed97a353d98c449c17338f8a428a1bacc928182a3efb13bc29890719ec8ccc24443b92ace17a2e57aa784b2fcaa32b4c0a1f28bfde63e9f156a3ca1b03c6fa72c2c779ddebd0e8b2c5d318d6fd4364aa8933c83528d3f8fc637ff0ee789871d27bf585a2301cadcce1c5c9526f5f8f21503be853d085ac85e93", 0xe4}], 0x9, &(0x7f0000001800)=ANY=[@ANYBLOB="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"], 0x358}}, {{&(0x7f0000001b80)={0xa, 0x4e21, 0xfffffffa, @local, 0x7}, 0x1c, &(0x7f0000002bc0)=[{&(0x7f0000001bc0)="57d561e8b64de1ee3b09475263f1746917ed96c1c79921671962b5b0fc0fb2102f25b8d77009b4583874abc8986ddbe0733acc596baa07776b447447274035a6ee1bf546b009386cce9f73ffaee2c66fb05e01bce1bde3bb55c9db23e9eedfbebaf110168f94a31750c85b2cc3a9a10b81181886e594472e7f5df794520fe04354a4e0aec283594aa8abad6b6295e5e08a50943c7fb60ca83453b77986428cf458e50d3ff8837adf7b96cb2059a41fcbb70e167bc6534127cec3ea30eda768e06ed8275d2edac61d393734da34aef3cbdba449d9aa4c7d06ed43e95409d428018a54d3b9e2fb6d57902c42b577a67634296d6c576721f39352bf71f03e2453f36b68892e1df407b156d70c11abd9b81aeeea0152887c452337a2d9cea36ce823aba131fcdce266ca92d07a398c64838b31b6152cea5fb4acea4b0c3cc9c1a955d473ede6e8405813ef69e7d456bd349ae6970d377f7ce45402f85accfb5283eb17a767f8162d783ee9fc6fd1a4374071b4e9ac37b7a820e797ae55dbb888c328b9031a78eeb85b9e8a7c9d27854feab0ad664ec4f5fd86ba4f0c962e9d048ab89177d9da6e6a8a69ae67288633c60147457e92030ccd7e0e41742bad36514226daa87c772122d257cd69a85877b7eade57d1da10bd00008db57dba2034d67a79f3626f6a211198bd63e4820f4e4dc12fac7ef9ff8e12ba31d82bfee896002f5b2eb90310998b3a4cb8bf96d28ddae4ead25b503a15e389d265130ba0bbbed6be6ff6ccdf4d40fd7743c4f42fc5314d3f5eccd8c032f268869d66ce7f544d1b83139f5441c822216cd99b8197edd52f3f30da518a2b40a25a1f0695f51ce3678c6f487fc485616a205e4a4abdbd70bb9ad9ae692e91389491a09fad6ce157476f976dc01c406c00585b4277ee4994683763855d8623f62fc6e3fec3c567bbf5d9cba3acffce2e6a545ac30b451163743a179334bb975125df32898a12741384bb3955942298b0e5ced69ca0ee57d75cc33ff22e610c685052b5c5fefa6857fb3f82377f9c93164aa93862e91cb519b705ca889fef212db9cd101b5d0851db421a15b9bdf28309f236c8a34c578cb6cbe7694534c964dab3090fa2f08479f5bb53c3fab87f15db01c30a9aee3f4eaf89b263b8d0762bcb47eaba2c19fe03ee33d8933185bbbb9f4af8b3e01b4526cb8244f17ff6bc63bbb6732b4b8bc0bc40c89aa8ba096e7e32f1f9312c1841cfd5fd5577709a0841cb84a2c23818ee2aa693673c0baa4511f70227621bd839d164e37926ac99ab7cf518eba3687e40b0f2ea3cab506c46c67b0a1f30cad31a829c55dc70d9db2c7cb3826d4db58f0698954f8be17e8b4be8108f0fdba25b2f49b48439a5e68c4bcab8977c7d2c7759761b0016c7596b1c196707dace52ec83495308a9a5d1fc759a1ad199b5cf91872140d2487ca3620d59ac96673439a191ce53238798a7bdcac0011733aaf35182a9cfdca68fe5bd55eb36328172b8fb673c63d312249d0a767f1569b641c5ba2215c9287d14d323f187c388aacf3d3c674cc51ddf568d3114cd76d12224b1c8b2465626b0fdf48f8f479e076e33c21d199aa12b9bf5f9f41e520705570d3dccd4ffa6946d4c4350e8493f42c866b768dd1f78e5f13314cbdd387a7ea08d309b2c87ece8f6187bee62ce9e61f28625006c15df321a17fcdb978669d62a25c6c0f0feea28c424f09e608de6d4e1b798724c775430293a4aad1c837da130af880e3c8691241ba66603cdb7ca10f3bff41bc1eddf52639c24e08f13492eead99218533e3f2cd34d52d0caa3056f2c5dc114a3eb957ae9dbb05ffa5f7f8bc8f1be4b15a4530f5cdd2cc9557aa6d0edcf4be2a85906921b99be47c9be3c89e74670b264bf38a25649a43a9d8dc9bfa2192be1703bcccef305b3c2451f409199c62d458e438edf32991380b41dbfac99c670095469113e8ff632bdf469faa717112347960f56f4ee95ae7809fa53cb10f2fc7c1b838958f8261dba7bb3902afdf480b66bcc53507823b8cf877c82733180a976c1f70930d9760e37521d84128d3d12e5bcadde79dad4216b59c9786308563e0790c5fc40a035bef8df2c1189961ad0869df20abb6c34e590bf1486a4044c87c2dfa1690a4bc840117fc2d0b5b45b3d34ccb3d71cfeb4086aa60b1d685fb5acac9af0941b9dac287e4c7e2672bce1ecc8ac383a215c6867fb470aef8f676b4dee94ca298cb5426a77930e11234e1a47a559c35a1c5a7505db6131c517573a32f4fcb7c7e148284519d5b85e637471abb203b00d144a9768c11cf1b5a8c5d267be14e2661578da56de40b634f3578c17f2b22346b8cd75b387a92a9c7b1acf0c8b83fae269198b9f24f81f630a0dd5ad1e92e5ac076ccb490e413f3c3bfa3a31e80231e932a60654cd9dfe4da597e2485cbc171eba2ecd069e7ff025f2464f5a2b805ed8796fd4c93fbd61cfcf7045231207365a698ce385a7421f6ed9f04e82aea615d8fcee8100c2c93992273135e7b44acc8a6023c7b7a2e01e23c23cd95caa4aace6f233fa8f9ff10fe1478d25759cab8519593f8d4a890c3352072a5554393f0068645ca616837fc4ab203ef0798a7425ef44321b45372f5e1f05e2423509923816bdb87f5594eeaa60b0f0ea5286333be49b2f9bf910bcda278bc035864e9d982bf7f0fbf662219b7d7e99841e7d6267f2c2f3a4a4ac58e68622c3a36fbf4cb9b662518cbd7c46e5b383c28b81714bbb9d39b2bdc63db1c1de052338b71d5a5eb49f0c208e8f2d82d0d501277fbf2b91111ccbba8609ea5daae66b07ec9dc5ce56aeb0608bfa0879983c036996f13ad652c60f1d4cd23a112cdfc16dc13f95918e528faa9d015ad24a6bce7004ee7af966501fa751883f4cacc3a8dbaba8ab54fd63d632fe09c06430b0ff4ebe19572826c1c75466e9696973e99ecc2d0562a7c5b98efe862ab51ebde922fadbf12c4abcd5984137d6970669b06cc5b2592cde303b0d732dc5faff13d361207702bd6a551472c0eafc9f0c12bf659c96ed76c7578147571a458fe24de46cadfe3287d8ba876057f63d6c102be4e9e772b2488bf3a7045d1c37ba6a09d53d0b48c883a6d511d756671ead0cfc0bbef47f7e29139de562f8d69bf610255377ceeabace6773fe3674e2ab81e32a96a869e593a291a789f72299c6bf1f51027383fa9fc10c87232363e83425a4f5b20c10f51aeb1d3f6c52af4144f29e1b39b56e8b54254198fb1ed9b8df41970d44a50058071f632b0d567475ee868cf144a6f13768c0ca0e2b31ddd07dfae55776005a7a3e772fa295959194244a3839e42ec2de353cbc11529d14a6c84a24f8ae37a4a982070446ab56980300102a2d9be5537afd25b63e5302c5160de31ec250acbdcac1aea35c890f0260db0b8054a0e5db3942729020970f92e12679e1ea7839c0e63d33f03c162e76db7602183069d46371e7d838d026c34a954c96d970ec177314da0199648e902deb56c90dbcecf5107bb2b90daecc815b0992761d9be688fd1d8753fa5f64fa2cd60346fe62c41ac6e748fb94539a2e9bcef2ad464214a5e2434658786ed8b0e1df2e1ad928b73d8d8241d68857f22919edf306d0a33f726c8ce5b3d9e1a41cac69e661126c0f6b25c084983180f7c7dc7d5f4c30735d4b928ffd371678bf8bbdd8d9f792225ae0974bb415caf6b2b2e163cf367718fa51f00174c6ca0ea1fc3a16019b948fc61e3b92237b6d546652a720434dbdedd57691fc25512319158501cfd67213cfc19e6bd621ead46424de76ebc9447e6af26d12e19be9384aaf9696bc974437ca0c7215b21387f0c6d458664c737c6cc89d2f87bd9dc50973de9af10f8f4baaacd10c8e75d14556aed74e7b298b62dccc22898cfef279118ff5249ba19874c30108948630a55f0d81bfbcf16a431471e24cab8d792fd4ee3b58f74bd3885cb71b7f20edabc6ed2e89452f17008d3a16e4e6acbd0cab54736eb9ebffb4e3032c231b0e5c275b4d26d81719fe58eaca8ca8157851b962153fbb771961a33d7f9d32e7e045325009be3a9c2273f1fd7dec452e6bd5b236d254364961f426566d52b1ce69dc4426b65ec62c7ab51a5798a8d835c77743b187a77aabdbc896a6cf3f0194c7aef9bdef604e4bf3567ec9bcc989d01b19a94d518c69fab5739a35027e6399b54b471d58fb8ae7c33c5e06bc3ce501b01c97b917ce9b1c6d5c665c9daa07adf0a984e353045c76a4b0fef3ae0dfa598ed7502375a1e0bed9af56350cb67db1fec2ce71829aa89f8806c11a7a5e3b3bc97bc464959c24b03697676d5b45dbb6b01c745168a415ffa28c976962cca433f234c8ad6051bc1a721b6dc99af703daf7276fc6b90240ef14f5922a019f12ac182be47a55ac8bd244f0029fe92d51c3db5f9ab4f669d9e912e7535183c1b2d8ca238c8ac97897eb7d02a20bd6a6a483bced1688bf29475f624fe72d261191233af6c1f7009703e2d9e49c7b6a05b8435a87fbdbe3079e42885827e2d7439c4d2656ac31d4681fda08cb2f765cde246a6766cebf18483f1cdb1942d0ac1b78b489b7c00ee8679c8622da3df99b4b03043d423f13276c35eec48d9fb4198b807e3fedcfd5066d1ae277738771067ecf99c465f93af7dac6be34c4789bb376a9eac4df5eb8a9cc493e35459d0652446bae507c8e4b545b707c16820ae4d924e20a3d6dba395bdc83aff0b21ce3130e9eb0c167060d030e290b959ba6d0a5671a8c66f619e9d749f8658ab58e06ee03a7a73348d04488d76c47c3af331611cb7afc50548f6ea332c1d134e570af099e41d2c575ea79b853bdc6027d8fdc22bb8d5040c8986bfc2ee3325f1732eb594a2c9f7f62520f1ed8af1ce031cf6708121a309513e9111a9e7eb8a32c96a7800a2a7d9358a7b5ef0e04414efac8ad62a10c8f3f199da0134e91a010026fb0225ee9e290cede776cae93173c3c32d5a27381ca7b80f4c6baa11810b65a346ff31b1f472c38aabf3554b80d38f63d433a904eebb26eb34ac760d47b31cefa7b19170f5e360cfdb7b333b40d7a944c594237461bcae835a51af078ded87ddfa88ee0d1d3b4c2500d3eb8522760efa5caf10d682c88128a7cafe4cc02baecd1b2862219184f35679b837fe8806b4cd008652a3e7122f7ad66e0ac87a2de2b1c8f5cec822a19c4a6f813b831645dcc4fd27cadd134078d224acb756e30e270472ad425958477b08e526d3c1df728f142348a6cf645cb63dca7bbaaaaf30de3d1b89459d5f5902fc7df7af48791a0f67d196933e2f5a11fe3702d87fa8143f0069f530725c87c56a25cca5badf4f0f73096c1b48124d852c6de0e6f906dfbd8b89cda5ab7db52775cd7cd59e3a069de3d0bb29068459dd86a7e27542fc0d8686c99215efab652802dcb93067db094739fa79692cb9915f61be61e50bad6e7b88ee7a5463b845d0afb5d114fde3c6b7831f9330e5f10c08397567b589ac99ae760ac48c0a72c92814d825675a200c7338884282f0ddef8aeed1068cdbe1ec50952224dd0d98fedb04301c251299e25e90ff6b33ef7c097d4fe01d4966821167aaf62e11b5e939b0e9b2659f48004cc8840ec91eeb2fb7b909a659b65a1a8adb6f7303732132a8e9ca7647f28f16ea240f9e2830e56264a209e6a123bc6bc7711a687b8aa05a76a8b999cc4eb4efcffd3cc285ae057659015c19e8aad8e0d0b22e289e0ee5401862a61e5b6bd8c719fca3fc0aef48b4cef3b8876754c1287ccff85bd16dd0dfb9e448e5a8d2b967dbb", 0x1000}], 0x1, &(0x7f0000002c00)=ANY=[@ANYBLOB="1400"/12], 0x18}}], 0x2, 0x1) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r6, 0x3) ioctl$VIDIOC_QUERYBUF(r6, 0xc0585609, &(0x7f0000000240)={0x8, 0x7, 0x4, 0x20000000, 0x3, {0x0, 0x2710}, {0x4, 0xc, 0x1, 0x4, 0x9, 0x1, "e09b5146"}, 0x800, 0x1, @planes=&(0x7f0000000200)={0xde8, 0x5, @userptr=0xe3, 0x800}, 0x7, 0x0, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r2) 10:46:23 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) getsockopt$inet_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000100)=""/19, &(0x7f0000000140)=0x13) read$eventfd(r0, &(0x7f0000000040), 0x8) 10:46:24 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x200042, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0xffffe000) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x26, @private2, 0x4}, 0x1c) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000000)={0xa, 0x1, 0x4, {0x45, 0x3, 0x9, 0xffffffff}}) 10:46:24 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x109000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r6, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:24 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x72f, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_AGP_UNBIND(r3, 0x40106437, &(0x7f0000000140)={r4, 0x1}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x1c, r5, 0x711, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08004cbd7000fbdbdf250c000800060028000400080031000700010008000b00040000000500380000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008011}, 0x80) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x102}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40040f0) tkill(r0, 0x33) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)="a7679b05288e846ce0fcb1daa4124b9e11108ad8acf5867bfd686decbf270b84fa34b14583c509b562b02bb1c2bd57db8bed522f1cd21a0800000001a77196d71468543e052c08c96c2e709ced013e1c38262f64d010fa17771d6a66c381910e1724a55ab98f9425f96c44330e77e4eea130c0c2f4c995cf89754111112bda0000") ptrace$cont(0x7, r0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000000)='net/netlink\x00') 10:46:24 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'gretap0\x00', 0x401}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:24 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r3, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r3, 0x1) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="18ed000028fb8167351d37ddd424c77a8dcfb711aa9407050f4149c05572c749e706fa2bd2091c9d1f8bcd4b89b62eb06f07b04af9b3e30e02119bd517b8512a5187fd2af72e83e68bf6e597de9e4b1d536c3be2bb013361084c5a4a6cb8d88dfb7333", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000000c0)={r5}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r5, 0xb4f7, 0x4}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r6, 0x56}, &(0x7f0000000140)=0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x6c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8001) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0xa4, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:adjtime_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:etc_runtime_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x101000, 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) 10:46:24 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x109000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r6, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:24 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x1) 10:46:24 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x109000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r6, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:25 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x109000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r6, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:25 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x109000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r4) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r6, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r5, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:25 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x109000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r5, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r4, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:25 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x109000, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:26 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x1, @bcast, @bpq0='bpq0\x00', 0x6, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9be4, 0x0, [@bcast, @default, @bcast, @bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) socket(0x25, 0x0, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 10:46:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x5, 0xfffffffffffffdde, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:26 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:26 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000100)=""/141) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={r6, 0x0, 0xff, 0x2, 0x6, 0x101, 0x1000, 0x3, 0x80, 0x68833042, 0x7, 0x1f}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000040)={r6, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:26 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x2c, r5, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x200]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004000}, 0x200448c5) 10:46:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x11) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f0000000000)={0xff, 0x3, 0x7fff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x1c041}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:26 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x81, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xffb, 0x0, 0x4000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:26 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:26 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x230000, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000040)={0x7, 'vcan0\x00', {0x80000001}, 0x3ff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:26 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8451}, 0x0, 0x0, r0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:26 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0x0, 0x30008084, &(0x7f0000000280)={0x2, 0x4e22, @local}, 0xfffffffffffffe10) sendto$inet(r0, &(0x7f0000000340)="7c0d11131767063192ffcfae02bef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc004cf1ad797252bbc45aafc2f7dd810b8e0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7ad0ce629f97de63354db0a8d5030bfcf0a0dbe78b71962a76ab041ea7285a3fde72150db9f1e4a5396d4dc5254d7bcc990812a07ed0", 0xa5, 0x401c005, 0x0, 0xd) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'veth1_virt_wifi\x00', {0x2, 0x4e22, @empty}}) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000200)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x204202, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040)) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) fsetxattr$security_ima(r0, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@md5={0x1, "ae3991e6289985fba8405b892364acc2"}, 0x11, 0x2) r3 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="4bbe8dbb9413fbbe7a33005200080000b1b61b6e12db1993a03182f1d5ad9acff77bec31eb18fa163d5afb9067b66fccec44ad9cd9a35fea223fa4933bf34c4a72cf6745558f97258a5fcb0719f48612ba9f27d8bd4a0a377a41ec9697a4ab9e3caad9cc08c14adff178c792e6c328fba989350285e83b1294e4604052ba9932e43f1deba430641845d4f7369a3ed1d97024f987daee1ed3ca361d29b58a529004fc1d55efe605cf591902c00ef2249b5d7048089b5e0edb035c6acff29ae9627c0c866bfdf3519d7c61b97465cdf8fd631f26d4aa4d76b7079e05000000000000000000"], 0x2000, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}) msgrcv(r3, &(0x7f0000001340)={0x0, ""/4096}, 0x1008, 0x3, 0x3800) msgctl$IPC_RMID(r3, 0x0) 10:46:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000000)={0x1bacf914c1bb079, &(0x7f0000000340)=[{@fixed}, {@fixed}, {@fixed}]}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r4, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ttyprintk\x00', 0x2002, 0x0) sendto$inet(r4, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'U+', 0x100000001}, 0x16, 0x1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = accept$nfc_llcp(r3, &(0x7f0000000000), &(0x7f0000000100)=0x60) write(r4, &(0x7f0000000140)="f7532868bb5e37346094c18c5c190a0814d22c73a539e08b8242110417e09b9a5653d055dac9e849118d476c13f8790ba9cc144c342647e8e1335a729e4fe79989b8c14c86", 0x45) 10:46:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:27 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e24, @private=0xa010101}}, 0x0, 0x0, 0x24, 0x0, "6e826b837a528e8bf6db337d04e3cfde7d98cb30cac0cc519de9e9bf3f015e2b36a38d07e11be00a9eaecff3b5ee8cc2ada4bc78cd15a3f412e8368fb5ee8f31ec50925cf0d8fd04502ada0db29570e2"}, 0xd8) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0717000000000000000016000000050009"], 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf401d79b242bfe5}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8020000", @ANYRES16=r2, @ANYBLOB="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"/722], 0x2d8}, 0x1, 0x0, 0x0, 0x80}, 0x1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000005c0)=0xab52, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) 10:46:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, r3}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000100)={0x8, 0x401, 0x1, 'queue1\x00', 0x80}) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r7, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f0000000040)=0x2) write(r4, &(0x7f0000000200)="7d1ff6ba27ae59e89795821f5d86f8784e2260c01e4d5bc153d028e1b99ff639051f12f11532923f85ca6933c942b5b93f11e8f182241e4d5f7db0ade33cc20c63690201dc6b4ba0a9cf1518bc53e5046818675047bafef5c883659c15a377eee6d547a4d22235965394858d40e405949cfa2a6a8737211b2a69da7c96e80ede8cc7f8bae02368fd0f7a9b0c6cd9072c6d5d224766291e49375e13d86285ade10d02762585d0a4bac5f12f291ee5bf4707a53d1ef276c83adb930018a2ed79ea1021a29ca6d23a35349987138ada1e4372cfcdeddb93dcf8127d39d0a833b8a4", 0xe0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$DRM_IOCTL_CONTROL(r3, 0x40086414, &(0x7f0000000000)={0x2, 0x80000}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:27 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002080)=@delchain={0x70, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x0, 0xffff}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x70}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r6, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002080)=@delchain={0x70, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xffff}, {0x0, 0xffff}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x70}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xe4, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x810}, 0x20000010) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) ioctl$TCGETS2(r9, 0x802c542a, &(0x7f0000000040)) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DELAY(r0, 0x80084121, &(0x7f0000000040)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r4, 0x5385, &(0x7f0000000200)={0xd4, ""/212}) 10:46:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) [ 1841.090728] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. 10:46:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1841.171591] HTB: quantum of class FFFFFFFF is big. Consider r2q change. 10:46:27 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) getpeername$packet(r3, &(0x7f0000000000), &(0x7f0000000040)=0x14) 10:46:27 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x9, 0x0, [], [{0x81, 0x2, 0xffffffffffffffa7, 0x1, 0xffffffffffff2579, 0x3ff}, {0xffffffe0, 0x81, 0x7, 0x1, 0x3ff, 0x5}], [[], [], [], [], [], [], [], [], []]}) 10:46:27 executing program 5: r0 = gettid() perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0xd509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2, 0x20000}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xf866, 0x4c8c00) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:27 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:27 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x400000, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000000100), &(0x7f0000000140)) read$dsp(r1, &(0x7f00000000c0)=""/19, 0x13) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f04000001fb12000100ac14141840d819a9060015000000", 0x2e}], 0x10000190}, 0x0) 10:46:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x20a927, 0x1b}) 10:46:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000000)={0x0, 0x6, 0x3004, 0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:28 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) getsockopt$bt_hci(r0, 0x0, 0xf36dc42e4ebb0709, &(0x7f0000000100)=""/80, &(0x7f0000000040)=0x50) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:28 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x8c140, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x400, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r5, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r5, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000200)={0xa00000, 0x5, 0x0, r5, 0x0, &(0x7f0000000180)={0x719b4d3cf8c9e8e4, 0x6, [], @string=&(0x7f0000000140)=0x1}}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000280)=0x4) connect$l2tp(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r6, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r6, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000100)={0x4, 0x8, 0x4, 0x400, 0x7, {r4, r5/1000+60000}, {0x3, 0x0, 0x6, 0x80, 0x0, 0xff, "874bd91c"}, 0x8cc4, 0x1, @planes=&(0x7f0000000040)={0x6, 0xffffffc1, @userptr=0x9, 0x69b}, 0x0, 0x0, r6}) sendmsg$AUDIT_USER_TTY(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x104, 0x464, 0x400, 0x70bd2a, 0x25dfdbfb, "659f17fa7aa1c9793bae19f33bdeca700ff9285f794575608c1a685aaae00976ee1f7ff0ce780bf8dad17cc48edb5d465cd6385ca45c27c61be1b3db0f92e24bc0a20b112679a59b0bf4155e7503960fe28f78f0fddff5c80f74b28750c3b2f21343937c48abe187389f58cb44a3d5f0aa23a0c8c9481c0a74afbe1fb500867838cd370ec08c69a59ccf99ceccda3fae7c2a923f7d810574301cca6ac17ed4d4b03445c18b735d06525d449e8cc162757f9f8f082373c3bbdfee22a8db373baaadd370d155e9e5a6aa06957edca0961d7407ca28e997f6d197d01c9e2e49c9ac66e48f0fbd67cda4961d5269c3b97e865a", [""]}, 0x104}, 0x1, 0x0, 0x0, 0x10000000}, 0x20004800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:28 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000040)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@private1, @in6=@remote}}, {{@in=@broadcast}, 0x0, @in6=@mcast2}}, &(0x7f0000000100)=0xe8) 10:46:28 executing program 5: getpid() perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1dc0, 0x8000000000000, 0x0, 0x8, 0x6, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80001, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x2) r6 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x0) 10:46:28 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:29 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$RTC_WIE_ON(r3, 0x700f) 10:46:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x27) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:29 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000040)={0xfffffff, 0x6, 0x40, r0, 0x0, &(0x7f0000000000)={0xa2093d, 0x10c, [], @value=0x1}}) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, r1, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r5, 0x40505330, &(0x7f0000000200)={{0x9, 0x7}, {0x80}, 0x5, 0x3, 0x81}) 10:46:29 executing program 2: socket(0x4, 0x80000, 0x1) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20, 0x1f}) 10:46:29 executing program 5: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40041, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xc5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x100000001}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, r0, 0x0, r4, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:29 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101041, 0x0) io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x3ff, r0, &(0x7f0000000000)="90939a10fe2731270a82d03a1da0e1ffe539a9bfc9a4be46b64ad4fa4117e62ed2befd897bcc70d6c410f4784af9736fed2724", 0x33, 0x7, 0x0, 0x1, r3}]) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x101) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000000)={0x3, 0x6, 0x9, 0x0, r2}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:29 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$TIOCEXCL(r2, 0x540c) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:29 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r2, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:29 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) getsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000100)={0x73, 0x100, 0x8, 0xb, 0x5, 0x81}) 10:46:29 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r4, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) getsockopt$inet6_dccp_buf(r3, 0x21, 0xf, &(0x7f0000000200)=""/147, &(0x7f00000002c0)=0x93) sendto$inet(r4, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) fstat(r4, &(0x7f00000000c0)) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000000340)={0xa6, "d6287915f86d848ced4b667a35b6da2f8ad88b52f187bc0e85fedf8c57475a9b", 0x200, 0x80000000, 0x7eb, 0x4, 0x5}) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000000)={0x7, 0x6, 0xfff, 0x6, 0x10, 0x9}) 10:46:29 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x33, 0x0, r4}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:29 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000340)={0x0, 0x0, [], {0x0, @bt={0x1, 0x100, 0x0, 0x0, 0x16, 0xffff, 0x1a800, 0x8, 0x1f, 0x7, 0x3, 0x3, 0x4000000, 0x5, 0x10, 0x3, {0x9, 0x200}, 0x4, 0xe0}}}) mq_open(&(0x7f0000000140)='=keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000200, 0x9bc4, 0x9}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x9, 0x0, r0}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r4}) poll(&(0x7f0000000280)=[{r5, 0x1180}], 0x1, 0x101) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x33) ptrace$setregs(0xd, 0x0, 0xfffffffffffffffb, &(0x7f0000000400)="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") ptrace$cont(0x7, r6, 0x0, 0x0) r7 = getpgrp(r6) syz_open_procfs(r7, &(0x7f0000000180)='net/udp6\x00') r8 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f00000002c0)=0xa91, 0x4) 10:46:30 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:30 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x10000000020a927, 0x1f}) 10:46:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @perf_bp={0x0}, 0x0, 0x7bf700, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000000)={0x1e3, 0x14, [0x422a, 0x40000000, 0x0, 0x7c1, 0x40]}) 10:46:30 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0xba, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10002}) 10:46:30 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800}, 0x0, 0x1000, 0xffffffffffffffff, 0x1) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) timer_create(0x0, &(0x7f0000000100)={0x0, 0x15, 0x2, @thr={&(0x7f0000000000), &(0x7f0000000040)="52a8700ecc6344784d4802a5e98a73"}}, &(0x7f0000000140)=0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x40900, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000280)=0x4, 0x4) connect$nfc_llcp(r4, &(0x7f0000000200)={0x27, 0x1, 0x0, 0x4, 0x0, 0x40, "44d6837d08927ab55ddb97eef4a563c5ce16408715fde2fea442c7746646ab82a0912e04fea1628c6d5a684647b839103e264bfa2b3d951440b728a3231cd7", 0xa}, 0x60) timer_gettime(r1, &(0x7f0000000180)) 10:46:30 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:30 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) syz_genetlink_get_family_id$tipc(&(0x7f0000000880)='TIPC\x00') r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="c3faca0e4a7ebe422ce867aa265b60a60462ae9bd3fd0c50c4cee5ea132b99b035d0b47d1c4f62fbffae1b316979a49a0442711767779d21595812cc86b7717398008be30e6d41ae52fa3d9199610dc52676fdf1f452079e38916de9cc3e46205060aef7617d7b0af4d7d0bc22b912845a11ea695ea4980ae45f259c839aba49d11da1e4c43fe1c7a71780351fc960130b18e063cbae5163021aac363a040780933c5be27837c09ef7925283eab4d2e3d153c8f45aa4de3c7123c58bef8f37c6cb4869dad43950b4d3a4250d2060594f735fd97f0900", 0xd6}, {&(0x7f0000000340)="2e381814c084e1e46b7ce4e3fc5d6261887e08f344927d36652023f1da3b9d25410c816b445deeebd7871c024d41af30d84c23826342352979124dc204e04429c894f8d6488c703950998c064b1ff390d4f70737f0f6ed71e60a4a2a62d08929273f7cd36c3c2554a82ef68c9da65a25dd07904082c6720659406e18bfd4c47fe08f021cae2249b1b179d391e88a08d32bcf6fe1539d7bab01858b1c33b2eb10334bc4f23eb585239be1a29ecac1cd5536cbba5ed2a1a191c44edda4e20cfe1ad0bd90c9850f4eb7ac54b031982fb1cefb827681d30c234da1becea362839c1b4f7536d25646c27ef1daf1216046113bcb903f76df01", 0xf6}, {&(0x7f0000000440)="5a3207a9bcc172d81ebce7dcb916e7b7ef799a2ac788259fc975545ef166a1fd271942d3a212d069e1e646860bbf483dc2cb31e871153e4b37603a57e4c8c9abe0bacf74f24904c712f6133f928be69fbb7a98b2a0ad45109b56903951b1b8747ac12dde6be11f936e871dc2449bc89d99a69645cff16fac2ce85d114dfce7bc24ff5a0f4d02347be5d22d58598a6cd1678becd60201ace68bb65e7c5526ac604c4dd09d384fd6b815e39b7b04d24b607fa2db7e2eb1992b65b43d97d9b9c894b2481a3ceb1a2568025272d0453aa21da85d4be5915ef9586157f2d64a36c4b49e4903383668423ce44e", 0xea}], 0x3, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x24, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0xc9}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffd}}], 0x78}}, {{&(0x7f0000000540)=@ax25={{0x3, @null, 0x4}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast]}, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)="5cde85a2fcdf9f5103729aa523edcb9b196adc1311311d701024e33803d727ef721db0113386b4f31f28c6ed2ad433576d8f05ebc01fc47aec3897dc7e28af16141a351c34595dbd8a41cd699d9c62cbaf3f7a01e9c18b80d2e3f5337c2d972dbaff39d46fd9264c9bbf7e00009f68366f8e82037e1e2a90cd1a", 0x7a}, {&(0x7f0000000640)="de61feeaed8e7745ed5298f091c823cdbf4dd4916876b955aba905ab0858d9d9a839217abc2d62f78b3ee5c09611f82df843d439424b93e38bc01d1faa103f885b", 0x41}, {&(0x7f00000006c0)="20fbe73d872f318d41099411abc6a25243a05e0987", 0x15}], 0x3, &(0x7f0000000740)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x100}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18}}, @txtime={{0x18}}], 0xc0}}, {{&(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @private=0xa010101}, 0x3, 0x4, 0x1, 0x1}}, 0x80, &(0x7f0000002b40), 0x0, &(0x7f0000002c00)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x156e}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffd}}], 0x78}}], 0x3, 0x810) 10:46:30 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:30 executing program 3: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000000)) 10:46:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5080}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:30 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r4, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x11138e7, 0xfffffffffffffffd}}}, 0x90) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r4}}, 0xc) 10:46:30 executing program 1: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:30 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) 10:46:30 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x47, &(0x7f0000000240)={0x4006000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat(r2, &(0x7f0000000000)='./file0\x00', 0x80000, 0x18) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000040)={0x0, 0x2, 0x81}) 10:46:30 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0xc000, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x5) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) dup(0xffffffffffffffff) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000000)=0x10000) 10:46:30 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:30 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) 10:46:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm_plock\x00', 0x84000, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000004c0)={0x3000, 0x5000, 0x4, 0x6, 0x32f}) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000440)={0x0, &(0x7f0000000400)=[&(0x7f0000000200)="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", &(0x7f0000000000)="054a000896363105996bdc906f803147d6402614693a44f158f0b11cda84f437dbfa5b48e107f1eab1a25da554068e458be9a24784cf70dc8201f043134848", &(0x7f0000000040)="680ff434700530ea025ac7effe85e9188f5dc84f247baf8e9753298418ed5d42831f0353b1c025536d2dc74d9288ab162f317e8e3752d493bf222e59fe22", &(0x7f0000000100)="b3d0aebf2611110298d34da5809fb3a50dc47d9633017fafb67f9dfb21044ccf0fae627d93", &(0x7f0000000140)="521d09a052ea2ee5097810eb18edb7cbc9f91fd171b7245a4fdf137b6a4e5a76ee32997b924eac9aea37fea965a156f023e0f90a866050e5336491bd7ac95026d689688855c1ff651c8364901d2216956ff2d77d10a8d65c84183254ff9f08e3fbf0bdafba4dcad1a5b4715390caa4a384c554f3d7eccfa964acf227177d1d", &(0x7f0000000340)="e53f1a2fc163a9857fd376ed41f846d12c01e39cbda963da0497f1cb74ba14a0fb520379c9a0b4fee61cf44cb4550d43bd653781fef540413513eea68449bec62f360270a969ae63c741f604c5cd385c38acc3cb739e", &(0x7f00000003c0)="4149456699d7"], 0x1ff}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:31 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = dup(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x8001a0, 0xe80, 0x5ac484bb51fa106a, &(0x7f0000000380)="4d50b441e692763513ef874588a8ffffffff00000000122e25d386dd", 0x0, 0x3b, 0x0, 0x22d}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000ad00)={0x0, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, [], 0x0, 0x3, 0xffffffffffffffff, 0x8, &(0x7f000000ac80)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, r2}, 0x78) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r4, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r4, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) dup3(r3, r4, 0x80000) mmap(&(0x7f00000e0000/0x4000)=nil, 0x4000, 0x2000000, 0x30051, 0xffffffffffffffff, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, 0x0) dup(0xffffffffffffffff) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={&(0x7f0000000000)="95886b160fd49b29c50933c9c15b9ed482e19b63bdaba908297965a63e767c", &(0x7f0000000040)=""/235, &(0x7f0000000140)="093dba2a76306b6f1f9406012e79e72ca5d51bd5b700c699", &(0x7f0000000180)="800a97de57a91e0d57b3da4d593f2e2aa90b492a2e6ac44d0147df676f8a9abf75b7872d542e462f11aa479cab6c", 0x3ff, r1}, 0x38) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:31 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) getpeername$netlink(r3, &(0x7f0000000000), &(0x7f00000000c0)=0xc) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 10:46:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32=r7, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002080)=@delchain={0x70, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffff}, {0x0, 0xffff}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x70}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(0xffffffffffffffff, 0x1) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={r9}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000340)={r9, 0x9, 0x10}, &(0x7f0000000380)=0xc) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x40}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4000894) 10:46:31 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x800) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x81, 0xb9dc2) 10:46:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:31 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000000)=0x1265, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1845.018811] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1845.057405] HTB: quantum of class FFFFFFFF is big. Consider r2q change. 10:46:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0xeb5497e6468fc6a0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000100)={0xe72, 0x0, 0x6, 0xfff, 0x3, [0xfffffff8, 0x3, 0x8, 0x70a], [0x4e, 0xfff, 0x4, 0x1], [0x0, 0x9, 0x1, 0x800], [0x4, 0x400, 0x2, 0x103]}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) getsockopt$llc_int(r4, 0x10c, 0x3, &(0x7f0000000040), &(0x7f0000000180)=0x4) 10:46:31 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) [ 1845.073010] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1845.086362] HTB: quantum of class FFFFFFFF is big. Consider r2q change. 10:46:31 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:31 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:31 executing program 4: mq_open(&(0x7f0000000200)='-keyrijg,\x00', 0x40, 0x30, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10002}) 10:46:31 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/dev/ion\x00'}, {0x20, '/dev/ion\x00'}, {0x20, '/dev/ion\x00'}, {0x20, '/dev/ion\x00'}], 0xa, "5871ef4ed9c9accff256eb8d7b8aebe1597d6c19798038c5b0804e69b8fff201da170fdee853ac31c8f9ed83f89599c5a753b539f98420"}, 0x6a) 10:46:32 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) syz_genetlink_get_family_id$tipc(&(0x7f0000000880)='TIPC\x00') r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg$sock(r1, &(0x7f0000002c80)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)="c3faca0e4a7ebe422ce867aa265b60a60462ae9bd3fd0c50c4cee5ea132b99b035d0b47d1c4f62fbffae1b316979a49a0442711767779d21595812cc86b7717398008be30e6d41ae52fa3d9199610dc52676fdf1f452079e38916de9cc3e46205060aef7617d7b0af4d7d0bc22b912845a11ea695ea4980ae45f259c839aba49d11da1e4c43fe1c7a71780351fc960130b18e063cbae5163021aac363a040780933c5be27837c09ef7925283eab4d2e3d153c8f45aa4de3c7123c58bef8f37c6cb4869dad43950b4d3a4250d2060594f735fd97f0900", 0xd6}, {&(0x7f0000000340)="2e381814c084e1e46b7ce4e3fc5d6261887e08f344927d36652023f1da3b9d25410c816b445deeebd7871c024d41af30d84c23826342352979124dc204e04429c894f8d6488c703950998c064b1ff390d4f70737f0f6ed71e60a4a2a62d08929273f7cd36c3c2554a82ef68c9da65a25dd07904082c6720659406e18bfd4c47fe08f021cae2249b1b179d391e88a08d32bcf6fe1539d7bab01858b1c33b2eb10334bc4f23eb585239be1a29ecac1cd5536cbba5ed2a1a191c44edda4e20cfe1ad0bd90c9850f4eb7ac54b031982fb1cefb827681d30c234da1becea362839c1b4f7536d25646c27ef1daf1216046113bcb903f76df01", 0xf6}, {&(0x7f0000000440)="5a3207a9bcc172d81ebce7dcb916e7b7ef799a2ac788259fc975545ef166a1fd271942d3a212d069e1e646860bbf483dc2cb31e871153e4b37603a57e4c8c9abe0bacf74f24904c712f6133f928be69fbb7a98b2a0ad45109b56903951b1b8747ac12dde6be11f936e871dc2449bc89d99a69645cff16fac2ce85d114dfce7bc24ff5a0f4d02347be5d22d58598a6cd1678becd60201ace68bb65e7c5526ac604c4dd09d384fd6b815e39b7b04d24b607fa2db7e2eb1992b65b43d97d9b9c894b2481a3ceb1a2568025272d0453aa21da85d4be5915ef9586157f2d64a36c4b49e4903383668423ce44e", 0xea}], 0x3, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x24, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0xc9}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffd}}], 0x78}}, {{&(0x7f0000000540)=@ax25={{0x3, @null, 0x4}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast]}, 0x80, &(0x7f0000000700)=[{&(0x7f00000005c0)="5cde85a2fcdf9f5103729aa523edcb9b196adc1311311d701024e33803d727ef721db0113386b4f31f28c6ed2ad433576d8f05ebc01fc47aec3897dc7e28af16141a351c34595dbd8a41cd699d9c62cbaf3f7a01e9c18b80d2e3f5337c2d972dbaff39d46fd9264c9bbf7e00009f68366f8e82037e1e2a90cd1a", 0x7a}, {&(0x7f0000000640)="de61feeaed8e7745ed5298f091c823cdbf4dd4916876b955aba905ab0858d9d9a839217abc2d62f78b3ee5c09611f82df843d439424b93e38bc01d1faa103f885b", 0x41}, {&(0x7f00000006c0)="20fbe73d872f318d41099411abc6a25243a05e0987", 0x15}], 0x3, &(0x7f0000000740)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x100}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18}}, @txtime={{0x18}}], 0xc0}}, {{&(0x7f0000000800)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @private=0xa010101}, 0x3, 0x4, 0x1, 0x1}}, 0x80, &(0x7f0000002b40), 0x0, &(0x7f0000002c00)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x156e}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffd}}], 0x78}}], 0x3, 0x810) 10:46:32 executing program 4: r0 = mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x800010001}) mq_timedreceive(r0, &(0x7f0000000000)=""/132, 0x84, 0x10000, &(0x7f00000000c0)) 10:46:32 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:32 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0xffffffff]}, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) close(r1) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/14) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:32 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x20040, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001900)={0xa, 0x0, [{0x0, 0x53, &(0x7f0000000240)=""/83}, {0x1000, 0x104a, &(0x7f0000000340)=""/4096}, {0x2, 0xf0, &(0x7f0000001340)=""/240}, {0x2000, 0x31, &(0x7f00000002c0)=""/49}, {0x5000, 0xe8, &(0x7f0000001a80)=""/232}, {0x2000, 0xbb, &(0x7f0000001540)=""/187}, {0x100000, 0xe9, &(0x7f0000001600)=""/233}, {0x3001, 0x48, &(0x7f0000001700)=""/72}, {0x5000, 0xf2, &(0x7f0000001780)=""/242}, {0xf000, 0x73, &(0x7f0000001880)=""/115}]}) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f00000000c0)=@sha1={0x1, "b1c33f5673ced1ca4d3ba674be5078e9363991e8"}, 0x15, 0x2) socket$kcm(0x10, 0x2, 0x10) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d8197ff1c01bc74d95", 0x2e}], 0x1}, 0x4040090) 10:46:32 executing program 2: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x33) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x7, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1}, r0, 0x800000, 0xffffffffffffffff, 0xb) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x1, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000040)=0xdc) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r5, 0x4, 0x3, r8}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x0, 0x10, 0x1}) 10:46:32 executing program 4: socket$inet6(0xa, 0xa, 0x7) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) 10:46:32 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, r2, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:32 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}, {0x1, @remote}, 0x50, {0x2, 0x4e23, @remote}, 'veth1_to_bridge\x00'}) socket$inet6_sctp(0xa, 0x5, 0x84) 10:46:32 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x10000, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000100)=0xe) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000000)={{0x0, 0x0, @reserved="a2d04d00a96ceff8847e6498a779de69ee61b12e10663b77377e82b22bb0ac1d"}}) 10:46:32 executing program 4: r0 = mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) flistxattr(r0, &(0x7f0000000000)=""/69, 0x45) 10:46:32 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:32 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0x8, 0x8}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x1, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001, 0x100000000}) 10:46:32 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:32 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r1, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)={r3}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x10004, 0xf56a, 0xffff, r3}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={r4, 0x6}, &(0x7f0000000140)=0x8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r5, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r5, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) getsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000180), &(0x7f0000000200)=0x4) 10:46:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:33 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000000)=0x80000001, 0x4) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1000000000, 0xffffffffffffffff, 0x8) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:33 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r1 = dup(r0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:33 executing program 3: r0 = socket$kcm(0x10, 0x7, 0x10) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x9, 0x40200) faccessat(r4, &(0x7f0000000380)='./file0\x00', 0xd0, 0x100) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="82411000", @ANYRES16=r5, @ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x20040081}, 0x40000) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) ioctl$VT_GETMODE(r8, 0x5601, &(0x7f00000002c0)) 10:46:33 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @multicast1}, 0x8) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:33 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xbc, 0x1, 0x9, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xb}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFCTH_TUPLE={0x94, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x1d}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40400d5}, 0x48810) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 10:46:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000000)=""/6, &(0x7f0000000040)=0x6) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:33 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x9080, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="1593000000001000bc0011"], 0x1c}}, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f00000004c0)={@remote, 0x0}, &(0x7f0000000500)=0x14) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x40100) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000000240)=[0x1, 0x3], 0x2) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r7, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r7, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r7, 0xc0096616, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 10:46:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x3c}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x9c, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x3f}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x47ec}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4040004}, 0x840) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) [ 1847.365808] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1847.422784] IPVS: Error connecting to the multicast addr [ 1847.434854] IPVS: Error connecting to the multicast addr 10:46:33 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000100)={0x2, 0x6, 0x4, 0x40000000, 0x7, {0x77359400}, {0x0, 0x2, 0x1c, 0x6, 0x3f, 0x22, "a7ccf397"}, 0x1, 0x3, @planes=&(0x7f0000000000)={0x4, 0x5, @mem_offset=0x4, 0x80000001}, 0x5, 0x0, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_GETTRIGGER(r4, 0x80045010, &(0x7f0000000040)) 10:46:33 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:33 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x6c, 0x4, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xcd6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40014}, 0x800) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 10:46:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:34 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r2, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000000c0)={r4}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={r4, 0x1ff}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r5, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000140)=0x84) 10:46:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x0, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:34 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0xb}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x68, r4, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x72e, @media='eth\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x10000010}, 0x4000850) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000200)=0x7ff) 10:46:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2db}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xd, 0x0, r3}) dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0xd, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r8, 0x8004500f, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, 0x0) dup(0xffffffffffffffff) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:34 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x10001, 0xffffffe0}}) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x196a1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x401}, 0x12}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000200)=""/251) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000180)={0x4, 0x1, 0x0, r0}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000140)=0x100000) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$KDSIGACCEPT(r6, 0x4b4e, 0x1a) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x4, 0x1, 0x0, r0}) 10:46:34 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:34 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x305882) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f0000000040)={0x1, 0x20, 0x8000, 0x9, 0x1, 0x0, 0x5, "80a2efdbf5179c1ccfc1e9a9513b1da4cc7b69f8", "c8131e464f1a3c20aabfbb95e25a9d3dec1db718"}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000100)={0x0, @bt={0x1, 0x0, 0x0, 0x3, 0x3, 0x772, 0x6, 0x23de0, 0x4, 0x34662860, 0xffffffff, 0x9, 0x0, 0xfffffffb, 0x11, 0x32, {0x8, 0x7f}, 0x83, 0x44}}) 10:46:34 executing program 0: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe15, 0x507}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$VIDIOC_STREAMOFF(r3, 0x40045613, &(0x7f00000000c0)=0xfffffffe) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x54b040, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000040)={0x6, 0x9}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x20a927, 0x1f}) 10:46:34 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x100) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) fcntl$notify(r0, 0x402, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 10:46:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000000)=""/226) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x8010, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, 0x0) dup(0xffffffffffffffff) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r3, 0x4008af14, &(0x7f0000000000)={0x3}) 10:46:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x10000000) write$selinux_attr(r6, &(0x7f0000000040)='system_u:object_r:devicekit_var_run_t:s0\x00', 0x29) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)={0x1}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:35 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, 0xffffffffffffffff, 0x0) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x202002) keyctl$chown(0x4, r7, r5, r6) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r11 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r11, 0x202002) keyctl$chown(0x4, r11, r9, r10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000080)="b549c468077b6ee206ccc421dda007e8fd0a8de483f50a8d98b433c11c18da8f3740ffef76217cf4c4ee34b08d0a5598a2a3ae61c2d96c5b954b94aa82b21c596db3b7c3e58cdc9cab0a5013a47c8112185dd693b59a018b498f23ece7928e068a88b52fc0cb587cd838e0d119169bb18300ff23793cdb515b5c1a1fee776713d0d768af69e05c7e91588e638fddd6423aebe7109a505ecad379a76ee48b2b147ffc01efd48e1be1645679837de15d9d4280cb2b93c72489aaaf5c22ca8f4c192e0646cb05eb1d", 0xc7}, {&(0x7f0000000180)="af5e5ae4ff20fbf00715e92fb6661dc95134b151ef2e7e4f2327f35b562b4556080b512d1b9c5f", 0x27}], 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="1000000000000000010000000100000018000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xf0, 0x20000051}, {&(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000005c0)}, {&(0x7f0000000600)="db3c634af7d532995c01b267b3a6b0e2ba4fcca5742797ad606f8a07d2339e88b20fa5e5d976cc870bac07c11cf9d4e528918d39c6263a07b6fe0a363052a396d473ad2aa1ce3c7af13393b32388211ff20d7cf4d1fb478b2ae3a121", 0x5c}, {&(0x7f0000000680)="247cdec1b79c5dfcf1c7230e82f2ce7d5f3bdafc7c1f4b48c1a803d4ada0d95c95142d2776db1c47631d8f234b5c9e87a2519bd25bb7bb6ce60ba03593c4120a5ad861286119a0d34491056e09d7d74377a755dfd0ee302524ed0b87fee86291c02b4f167cd6e8", 0x67}, {&(0x7f0000000700)="d6376817d9bffebca1e59176a430c8d8092e7c9052fd93e692c47750aea8e46a47f8e47656d14dcbac1a175fba2aed719fb10a056362cab3cc33919b2d2b46738593880a467ca68f6b661551a0a13cf243912fa776d16df8b46ab6ab86503073e86ece8709986655699e4d80", 0x6c}], 0x4, 0x0, 0x0, 0x40000}, {&(0x7f00000007c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000840)="df2aaa7ad6678fb313120dcf8242daca6675be912ce83dfdf7b63a5cf7745cd6113e39c8a4ef9b3873252a2069d08334b3b26f46a1be1a43bcdaeea6bf3845d22d30a301521c523626e71098cdde7c64039029f8a4b5d693cb975dd247f005f51fe76001389af20aa68f67bbcdd0bbf0533f65c37a8ab652f7ccb1115646b9222564f93e453cd03bed533bf2f1557366df0b25e3e3edd3058dcb97f2cb312f48ee5a4e9577fd8389e712c454c961674ca4bac6e1b11885035b47b2107aeff9cf1e96141f0d43b98f32fd7b252b", 0xcd}, {&(0x7f0000000940)="9f2aed6330e331378339081a90a0da120bb63badc592c41194bb3332de82dd32ce3be09173ff4c3b873b8b783fc95685ad1e10221cf6aa7e2640b213b97815c43492d05b5d90b75c588839a57ce3b264d138a85d1adff8e3e3d02c06e3032063972e380eaecd8028713a4c652720cf8d6ae40512dc7532c76d5da92a20b06cd88650b8c521452acf2bf8e35823f7c11e856064901d2093984a67f559c30f13137711b6de607475ef86c6dbaf7c76d4909df418c1588eb7dec8d3e8f97574d5dc6e810281e196d8a296a50fa8d8fdf6a9f9a31e2f3ebb4ffc66a76b6a375c379d52", 0xe1}, {&(0x7f0000000a40)="0d1e52625ad542ea78b66def4a8c1c58a1dc689c7f3230516de6c53038356fd31dc9e49f20a9a1abee0336e45d2f7deaf71676f6afd3e7b1fffbe7d3f7810d0cfb903ede28f4765e2050218e3cd49e425c27cc7fcd2268b6beb34fea0db7648dc8ac61119377e1544fabbba7f3dc09a1c955452112040e89d5efcb2033594140c470499630639b6b0ab1cfbab60465f2d6d6", 0x92}], 0x3, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5, r10}}}], 0x20, 0x10040010}], 0x3, 0x4410) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, 0x0) dup(0xffffffffffffffff) r12 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r12, 0xc0184900, &(0x7f00000001c0)={0x400000000020a929, 0x17, 0x1}) 10:46:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000040)={0x0, 0x1, 0x6}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000080)) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000140)={0x7609, 0x6, 0x4, 0x20000000, 0xc550, {0x77359400}, {0x4, 0xc, 0x8, 0x0, 0x9, 0x3, "e8fa304f"}, 0x9, 0x0, @userptr=0x4, 0xfffffbff, 0x0, r1}) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000040)={0x0, 0x1, 0x6}) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(0xffffffffffffffff, 0x81204101, &(0x7f0000000080)) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f00000001c0)={0x2c, 0x0, 0x4, 0x100000, 0x0, {0x0, 0xea60}, {0x5, 0x2, 0x0, 0x0, 0xc2, 0x43, "84b439ed"}, 0x5, 0x6, @userptr=0x6, 0x80000000, 0x0, 0xffffffffffffffff}) r5 = syz_open_dev$sndmidi(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x100000001, 0x100) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000280)={0xe0fd, 0x3, 0x4, 0x80000000, 0x1, {0x77359400}, {0x3, 0xc, 0x1, 0x6f, 0x9, 0x3, "75e09ec2"}, 0x7, 0x3, @planes=&(0x7f00000000c0)={0x6, 0x1, @fd=r4, 0x1}, 0x20, 0x0, r5}) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x60) umount2(&(0x7f0000000540)='./file0\x00', 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0xa0001) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000100)={0x0, 0xb709, 0x800000000000}) 10:46:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) ioctl$VIDIOC_G_MODULATOR(r4, 0xc0445636, &(0x7f0000000200)={0x8, "2de33f2fce35303d5a206332ce0b5923958052c3dcdc96429fe9a18ca1993dc4", 0x1291, 0x1f, 0x2, 0x4, 0x4}) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) write$binfmt_elf32(r1, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x1, 0x0, 0x6, 0x80000001, 0x2, 0x3e, 0xb, 0x205, 0x38, 0x28e, 0x80, 0x3, 0x20, 0x2, 0xfffe, 0x7, 0x5}, [{0x7, 0xda, 0x9, 0x5, 0x7, 0x21, 0x2, 0x7f}], "120b66413a5e4db4e443ff529a3e57a6ad6959cdfed9dd9e992f5b3e83f992441b733d67acffc2b3e90f95c278ff9531f94db011944b3841776ea38098705b02e85d7f3bd3e3328ed540f67108837e379f59952208ecf513db2d37aa1aa03121977dd1ccb9e60884bff542a000a8dbd115af54400e2f350ad54a15a85e7f196cb2f2269c5d39f27e1955356ad623cfc387f6b5e64f9cb8556afaf0815868fb66ca91c8c1e78dfce385c4094db0d910553499e0764dd9ce65e44d4c02e4818dbca61505a581333a22dd138150e825ff8201c8e25c30078fb7e33e7cffa9221204595a8e32928086197f1159a24ccfaa"}, 0x147) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:35 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0xe) 10:46:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) write$6lowpan_control(r1, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a925}) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r2) 10:46:35 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/sem\x00', 0x0, 0x0) r1 = socket(0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r2, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r2, 0x1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000000c0)={r4}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e20, 0x401, @private1={0xfc, 0x1, [], 0x1}, 0x5}}}, 0x84) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xfffffffffffffc62, &(0x7f0000000280)={&(0x7f0000000300)={0x5c, r5, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'TIPC\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}]}, 0x5c}}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r5, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, [], 0x1}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) 10:46:35 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:35 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) finit_module(r1, &(0x7f0000000040)='/dev/ion\x00', 0x2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000100)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x32}}, @in6={0xa, 0x4e22, 0xff, @private2={0xfc, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x40, @remote, 0x25}, @in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e21, 0x114, @mcast1, 0x1}], 0x94) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000000)={0x0, 0x1f, 0x187, 0x8001, 0x1, 0x3}) 10:46:35 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x20a927, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) clock_gettime(0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) write$6lowpan_control(r1, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a925}) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r2) 10:46:36 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x200000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r3, &(0x7f00000000c0)="b8a29ea661060a6e6b374dfbcb368c6f9c980067a95c5d282685e6bd997806f924442cc42355a2f01fa17c96b7f77defa27cc2dabd9b4ff266263ce623dbf116867fad6a7c03a4da740cb01399c73274fdc6bad51f2838af51b911ea8e9c3ead2e6814", &(0x7f00000001c0)=""/195}, 0x20) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r4 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r5, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r5, 0x1) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYRES32=r7, @ANYBLOB], &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYBLOB="c900d1145b62571cc0f2"], 0xe) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x4000000) ioctl$KDMKTONE(r3, 0x4b30, 0x0) 10:46:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x2e, 0xd5, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x124, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)=0x5) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) 10:46:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10005}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000002c0)={0x4, 0xb, 0x2}) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d0300000000000000abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0x73, 0x4018091, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000280)={0x0, 0x3, 0x3, r0, 0x0, &(0x7f0000000240)={0x9909e2, 0x3f, [], @p_u32=&(0x7f0000000200)}}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x3}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f0000109000/0x2000)=nil, 0x2000, 0x1000003, 0x4010, r4, 0x5f0a4000) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000000)={0xd}) 10:46:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:36 executing program 0: r0 = memfd_create(&(0x7f0000000180)='wlan1\x00\x92\xdd\xd4\xce\x00\xa0*\xbc\x8bnj\xc9\x13Uq=\x95\x9c\f4\x13\xeae7\x10}\xf9\xf6\x01/jC\x7fV\xfb\xa2`\xe9\xdc:g\b\xeb>\x02\x94\x05L\x1a\xa1m<\xdd\x88\xe3\x8a\x9b\xff\xd5\x1a\xbb/\xea\xe8D\xcbx\x19\xa6\xed\x99K\xce\xf8 @\x99\x11\xddCo\x01\xcf\xac\x95D\x15\r\xaf\xeb\xdb\x84\xe9\x99\xdd:\x17\xd7~\x95\xeb\xdfgKn\xd0n\x03', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r0, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, 0xe5bd1d461db201ff, 0x0}, 0x0, 0x8, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000380)=""/4102, 0x1006) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$read(0xb, r5, &(0x7f0000001480)=""/4107, 0x100b) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r5) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r6) keyctl$search(0xa, 0x0, &(0x7f0000000100)='.dead\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) sendto$x25(r8, &(0x7f0000000040)="bcb0ae8cfef1aa87827416b750393d0f3cc7c38257a2504bfe4ea8d60bf136", 0x1f, 0x10, &(0x7f0000000080)={0x9, @remote={[], 0x2}}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') 10:46:36 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:36 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x501000, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x4, 0x8, 0x0, r4}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:36 executing program 0: syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100000008004800006400000000002f9078ac141400ac1e0001440c0603ac1414bb000000000420655800000000889b00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800"/118, @ANYBLOB="29e104c850"], 0x0) 10:46:36 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:36 executing program 0: getpid() r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x3000010, 0x30051, 0xffffffffffffffff, 0x729c6000) sched_setscheduler(0x0, 0x5, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x33) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) migrate_pages(r2, 0x94f1, &(0x7f0000000100)=0x100, &(0x7f0000000140)=0xfffffffffffffff7) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000001400)="bb8f9f640903127a53527c6fbfe65d43b0e0586f2d40c7e7df58cac83420e83662d6e39bb6d5430622431454eedeeaee423d8f210bc3525fa7927c18d5fbc91ab13c2041136047d8da9375934d00f325499bfe7712208d387d41c31821c2a22d1325b556528e9b790b74053d1ed631c6ec8126d37c87216173138c00cef396868029af5b76bebac5e38b74d8bbc6ae66b6e202b6d505710377710ea7d43edf00e1a4c1c670bb4c263ce777da81abdd5ba5a5c82f67232f9b4d6f21b2e6afa8b38e4642b0daa2acbc0478d89b88e8b2094d4248855e5e81992e60be3afff0f3c3799350615489a901a659abdeca0c615a622ebf64175f990320e0356d4a11ed62eff72b709c23dd65942e8b534d7d775d370c1e435654a2634e6ee3649c4c3bcbe39e866f1eb9972af1a9cef42e701798a53dc92a242aadbac343e1765cf8ea5665e22deda69777e52b1e9e5d3edc022256939e1eee013448294911139d5b9c6241049fecdf9b31f4cdf6cff65d71b5071ef70e1798347c8846aa5b905e83050e3e606986ed3f603d18c5cdeb11cda1ce3abddea9376231af130e19fc7601ec1ab8cb5a7de9e2174547f18225b09a54fc8720dbb91eb69c1be88e601c3c9df4f2758f39a5151951b9c6dbb419ffd783a34c9fad10f201b8724d31865e2fc1fcf48db2be713053b43a0e3943c1e2b08e8a26e946c439d891db2a80b5ffa054bc8d0177d3214056250c61a537d2ec7630fb90395df2cd6aa9c5e573365db580520bdc3f1c6b2be992e1516a4b810a11935dc780699e461d9715f70c6d103ff49bf168f3cff4c0d0d6ba5671fcd2975450b0e1a3474139cb0f2d3476fcd87a8bccbeb2f5f8a821017b879aa5b9d1fafa9f4c429a74cd2da782114d97bf031746a817dd0293c4eddc3a9ecb5afe496f4971474ccd827449409f07cf94dda2e7dbe8520b5afff10a7e3b0b4289a167fc692635b5b7426d9e771b95860b09a3e752c867213c772e48ba30a78feecc7ff26e63e1749c62b52d377ac5cc52db830c965e04ccfcfb24ceacc69cfdc2094124dd27b2d68f699476a2562bab1de117ffc2b0702ee8b0b77f85fecec3a25b37ab7eb06232c9a73b4470f1727c82581d81942abf42d3ea37957927ad3dbd0ebe46678a9f4d25c47acaac83c14210a54b71fed40df017e2be27f01e3e6ea3ea381ca14efd202858e6535ad4f79a8cdf47e385b740a70c14e3651731a45cc0ca4a56f2e903cad0384efcc364caf67e09551d35c682ebc90a9286c4d274ba1b8ced742ede4e55a62db7ef9a96fde2add05b41599fd72a79ba280cc125cb266ef21b7eeafe3ee6aa78eef33fc66454549c3ec298cb683a55a32208cf6ce88b560166159d59e65f30540f62c5437652ea7f2a02f87ca242dd2250f58e75938a9a3ded51ae6598c2aba53287ff5cdaab17be7f4310f8e07e310d52778de79e1c2e4391b254be38910aa1cf6e1ca0e75d24be97d59f7025f16c6fbd549529b74e319c58f50438765ef0e3dc394eeb75dec41b3d80435b17520c97f5cd7ee692fb86d188fb0089fbf737dc1b96b9cc49be23a38a8cd92e5075f349993d7866369dd25eccbe1481477a05fee14e0edd1617921d7fcaa8fdc642e63b64388fa5b63442ff1466b1938d02546750b01ed9c980282ccbe10f204741249aed88c555ed6fdf7f68af9209807a71bbf4f31bef5a4223466da74ba8b034df529aef6ec6610a0d25973961e50e02af22d0ca8be1b9804a5918acbdb536e8f2f441ec9d640ed15133ee747440c86fc4526c9195954528673d25c8390170f3c19cb0b0c30b9e634c7ebae96946ae97c19eabca92226da925d22be37abbe0740938ea899ec42fd529a3b1063981e4c154219df5cf5af60a29b5a8ee530905725a14b28900eae937e705401ba8f632a7bca00d9724a992afdc9ed14aac71b8e3a7ee5ca095888feb195b4e083c3b611a1c2f8d092febe3b9f5f0df61e8d3c31a643c935b76bc1ad4265164e755484beb06610510bc51e8c6da8d71123bbe83a5e4128f41cf5c486d6a60496c300c406f990bee485cbdef794f2663ee66d2b18d8e55210c25c04b1a0c6d9c5f904e72806d2d4f5e5439bcdf146343cdffe4d0d70d42a9959cff9bd50c37cd478b0b0add16aae4dc839b46bca2ac7547144b6a422aed5e2db661bcb31a82bc0fc678e71a6cb090ef772860f3008b4152b5d281033be4a77b367baec3ab8ce7c83c601b11c8199bafcd15161a5454a6a982dbc3c2e3a5172b6a63e4904817075754eccbb0188c9cb2e5da9600f567485014887463b40f189b7ec3c5c0f36d502509e402c285765c78417ce6b3aab130ee79622dcd8ada842233e73a14554ee5e4995e32b3fe4075e247eb9bdeef64d1a7436c9b5782fb2f84f74e4c6e976289729c37b5bb8200a9480d181a6b11f5ec229b818134b8334967ae935ac1d81be4776fae4cb68b6fa330e93bd8de388b38455d569159bcd166df030a6dfedf28caf4608de7243f5df2c76f6680c301d819dc67d24d2f780432a931700a253b0a5b075195c6dbfd1fe17a1c11a3dffa872a07b877adc66d069fffb6d8326e1998c5a337c3d530250cae335ceffcf81dc438a47e73490d050a053813dbe6674e42c91ae94b4a88144f36adc1b08b4bcd6ddf4058c4e08d4dc83d5fbd843ee27eaf50b297c220350260d9abbeeb6deb921e50cae0ea590cfb6f00fb3c71520f565bb769705e2481ef27cf537d29f163c9fe3d39ed9fd18dc8b0c976cd302283e430807a9d751357f89092532d89fe280c69ad36e3541b5da9dea13fd19d0434c760fe295dfd9b9e63453c7853914c50b1b77ccd4b33c8b1f31fcb1aec040ffe2f9d728d8ea84297bac2e22230ebd1488c503b05b2e433cc37ce9fc123b7d3eb244b4549e9a841e73b664c8f6621ea5a4c9ff9c1da032255311f2c063a682baf4c97e7ba552bf71af4bd64f43872b846d15c65c487089be272cfa24a33f8c50930ea0bc4b089505fb8e97ded0e7e64a5ce897da6b940df4c3dddb8b4871d773f6ebf02058518c55c19aadb0f266caf18777ae68d2bfcfb2225961fcd10538ba664fd053a443320072707533ab761b9397bd0559126b84fe9196463ae50633017ea2d80940311d9c867102b1017f34af1965d8eb61be616a0d40656e2bbb750aee6f74f788c8acb2578e8686f5f8da6a19e979c152b7ee7c7f16902120588e2ff630144b5f929ffc593e946d9717c5968aa16c2d73d689fb5cce117acda3e23e5e0116de1cb6bddfa1a84cefb22c1e2c3753017696f27b9aec5d44f15411247643b84dd4410e784b4eb5b9c68fea671976f9b51c6526e2ddb40659611b0b3bcc7e249c77396fdb8c864ea9318f9de7fd3936fcbdc732c2f8b9556ec9afeb15d5e2df890351d66074d53dddc6e8dba8c91d733623ac95a49eb69c7de37ff2364ccddb01f6500750a012c2acf32a9f6bbd9e92d17ef858fbc34575db414ea42ad87a65b11ae5506469db256c421328f45aec73bdf18562447dc2840bbe9fc84dedd0fe6276fa174f21210d40193530ec7a70a9e60bfd6b00cba4d483be59950f16fa0dbd089b5fd0bb078badfcf42270cc62fe37be22b0d81f755263d74636fa466d2574ca62b58c649936d21e949de73ea45df3acade6609413f56fc218d6f11947bf1fd629d38d8acce90ee3c1a51117601ae126bec537e3e76ce7ecc53cfeefee8aaa104aa853a65aadf27bac9849ee0122793b11cd8e4f32fb07afa39e439cb738c30a6df958160aac15c26032a61aaf614b2e6601581fb0ab8d115e045005dee3df8ea42643cbcbb0b111130c42c94b7e874cfee50d5c2eb13b3a38c417fce9d740b7d43120431a7d44bc3934ee87b112401cbee3553837b6a0b4b3faaceb46eca4064301c8060870350e256ac9d5557f674536b9d9717a82fa211e7dfb52ca410d8a4f2f6b733c2a082f247538a6c40f56cf64204e62515db692f32733ff6f4b0787ef305d5e80881375467ae603ac3600e688c42f89a4fea4fdda09a8d59e19457c654a98c8129a8c65bae3310af2b170729e18400c915d0a2f4c4fc51747846630b95ec181228bda7ef48ad389815aa82de6c4a3b0746c28c01f9ec697ff17f095e1cf9d2fe78fdab9cbb1ca7aefc8af6a0cd98444735fad79e394a8f9c2fd358c3cde4ca6d57a620d0bb52dc6ff93f034b596f407c21511cc2c5ec8b0ede7f5c0acca61939ac7f2cad820c15133e69507eaa739e9a88936f4a74f0ad1574a1591f31f582a76157d89805cb3ba5e8d10509bf7a08e928653b4f05ba797a06765b74c8759fc34178624c08a2b99e59bcff5d33af2b0f9176b56c35f4da31c751a4c2fd88a1997cd9fc9bbf78220731d4c8cea23be1fd29c36b34d8458b7021ebcfafdc7e54096e517da3eb684298f742532d776164d9c9658e5faca0a3b08afca1bc27ed357884f49fe51bd0c38057f4288f1917e36e3865310b5eed140aef6150ae363293cf7467abd5e06cd7af5e2c49e7c5253a1155741e380bccb023a0faed93d9a64512d72436f1ef4ac0904a413e45164c23413bd57274a0a951c41a9a43aed094d4ea5c480ce64663cc9d36723179e2b19a48e9277a6591bbd888a06e0f2f142cd4495be4ba7274d69ba32a2788b935b2f18c5f336cb9de062829e2e0bb476efb36c3f53a766c14314f31637a464ac59d378ad7f51bef8d88715613653a427038e0d3e4dc3948bb1d70eb55c91c92f7510b1c0387253b458d2c90d17238f9eb239c680179a6c1e0759be367963e3b4d7395fd3911626582a094e6a8d0e746242f94267a4c57d5b2360ce3a6f7f3e3c10e124a54ed24d1585bc7b731cf731c94ee00ebf070b999b9bf28d76bfec9dcf12fcce2b9c4444c706ec6b943b5f39e9151a764ba1cd0cd6c1c7cdc3aa824cf17da705be27a18fbee41be39d6ae4dd4312f5f4bfee2c5bb21d941666f9d79b0f80c9b1bace84a05d2b0e3be1c3fd04d72b4b0124595c435813969d413960fddc858730a433383f3bc0472cb7683ea569e001f00"/3584, 0xe00) fallocate(r4, 0x11, 0x0, 0x10000) fstat(0xffffffffffffffff, 0x0) fchown(r3, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x11f08) 10:46:37 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xc4ef4e1881a3189f, 0x401c005, 0x0, 0xffffffffffffff36) r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={r4, 0x0, 0xff, 0x2, 0x6, 0x101, 0x1000, 0x3, 0x80, 0x68833042, 0x7, 0x1f}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000000)={r4, 0x80000000, 0x6, 0x3, 0x5, 0xc4b4, 0x9, 0x3, 0x400, 0x1, 0x3f, 0x6}) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r7, 0x0) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x5, 0xfffffffffffffff7, 0x9}}, 0x30) mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) 10:46:37 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080001000000fedbdf2500000000060001000400000008001800e000000108000c000100000006001d0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 10:46:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r3, 0xc0385650, &(0x7f0000000040)={{0x4, @addr=0x8}, 0x8, 0x9, 0x3f}) 10:46:37 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000001c0)) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000200)={0x3, 0x0, 0x20, 0x0, 0x159, &(0x7f0000000400)}) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00003, 0x1, &(0x7f0000000000)=[{&(0x7f00000000c0)="0400000900000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000100)={[{@fat=@codepage={'codepage', 0x3d, '437'}}]}) 10:46:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:37 executing program 3: ptrace$setregs(0xd, 0x0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x6) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000001500)={@mcast2}, &(0x7f0000001540)=0x14) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r8, 0x80045530, &(0x7f0000001980)=""/176) r9 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r9, 0x0) sendmmsg$inet6(r9, &(0x7f0000001900), 0x2, 0x81) 10:46:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:37 executing program 4: mq_open(&(0x7f0000000200)='-keyring,\x00', 0x40, 0x0, &(0x7f0000000240)={0x6000000000000, 0x9bc4, 0x10001}) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000000)=0x3, 0x4) 10:46:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0xd5, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5988}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r3, 0x202002) keyctl$chown(0x4, r3, r1, r2) setfsgid(r2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x410380, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x20000, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) r5 = getegid() r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r9 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r9, 0x202002) keyctl$chown(0x4, r9, r7, r8) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x1880004, &(0x7f0000000340)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x200}}], [{@fsname={'fsname'}}, {@fsname={'fsname', 0x3d, '/dev/ion\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'^&#,##'}}, {@euid_eq={'euid', 0x3d, r7}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@appraise='appraise'}, {@context={'context', 0x3d, 'staff_u'}}, {@audit='audit'}, {@smackfshat={'smackfshat', 0x3d, '\x8b.selinux'}}]}}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$P9_RXATTRCREATE(r10, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0x7) 10:46:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:37 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x10, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:37 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0xe6, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x90208, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x4}, 0x910}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) getsockopt$inet6_dccp_buf(r5, 0x21, 0xc0, &(0x7f0000000100)=""/82, &(0x7f0000000040)=0x52) r6 = dup(r2) ioctl$EVIOCGSW(r6, 0x8040451b, &(0x7f0000000000)=""/45) 10:46:37 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:37 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r2, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:38 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) creat(&(0x7f0000000200)='./file0\x00', 0x40) sendto$inet(r3, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000000)={0x9, 0x5, 0x4, 0x80000000, 0x0, {0x0, 0xea60}, {0x5, 0xc, 0x80, 0x57, 0x8, 0x4, "14a8ab7b"}, 0x3, 0x1, @userptr=0xba, 0x9, 0x0, r3}) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:38 executing program 4: ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) prctl$PR_SET_PTRACER(0x59616d61, r0) write$binfmt_script(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/418], 0x194) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0xf5, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7fff}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'L+', 0x3f}, 0x16, 0x0) close(r1) setxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000340)=@v2, 0x14, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 10:46:38 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x42000}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) r5 = perf_event_open$cgroup(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x7f, 0x30, 0x9, 0x0, 0x1, 0x51400, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3b, 0x2, @perf_config_ext={0x30f, 0x1}, 0x102, 0x2, 0x2, 0x7, 0xfffffffffffffeff, 0x5, 0x5bb5}, r4, 0x1, r0, 0x2) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r12 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r12, 0x202002) keyctl$chown(0x4, r12, r10, r11) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x4, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno'}, 0x2c, {[], [{@euid_gt={'euid>'}}, {@obj_user={'obj_user'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/ion\x00'}}, {@obj_type={'obj_type'}}, {@euid_lt={'euid<'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@uid_lt={'uid<', r10}}, {@smackfshat={'smackfshat', 0x3d, 'locpusetuser+{#em1'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '+.)\'($wlan1%#lo.'}}]}}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r8) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:38 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x190) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x400100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) unshare(0x400) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r6}, 0x10) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="1d0e00a00000001a038000000000000000000000000000aa00000000000000000000000000000000ff010000000000000000090000000001fe8000000000000000000000000000aa0000000000000000000000000000000100"/120], 0x78) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0x5) close(r7) socket(0x10, 0x80002, 0x0) io_setup(0x16, &(0x7f0000000200)=0x0) io_submit(r8, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r7, 0x0, 0xff31}]) 10:46:38 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x1, @tick=0x2, 0xbc, {0xa6, 0xfb}, 0x70, 0x2, 0x7}) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r4, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000000)={0x0, 'bridge_slave_0\x00', {}, 0x2}) fadvise64(r4, 0x8, 0x6, 0x3) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 10:46:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="73797a30d01d74210705e9c52143a8c659fba8a740a9d1b89910c079ad8ca3dd7696000000420dfe85b12911238a15b071539af7ee5b4314c56d2ee0b906e547ed3219eddb16867fe7baf1dc65b7247afaca0554d3c072d04c4622052f401b5a1296c13c886f13cae49c9f3cd0c37a62377f6be0e6a9973293e324c1c48982cf438fba9bc32e3374b0a084a7532b8b90bd484f4dd6ea03174d0c395efd2df4a454e01a049ce7d855a7bd0519e102ed89a4ef398019de9dd7cd391cf6000000000000aca6dbedeee02a58e8ae6382e3d767d70144c85236312100e51603dcc78bfa70bbb5489f5c3041580e091848ba00"/252], 0x3a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0xfffffffd, 0x9, 0x4, 0x40000000, 0xfffff317, {0x0, 0x2710}, {0x5, 0x1, 0x1e, 0x8, 0x40, 0xd6, "02d2b78f"}, 0x100, 0x3, @offset=0x2, 0x5, 0x0, 0xffffffffffffffff}) readlinkat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=""/29, 0x1d) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r4, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r4, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r5 = fcntl$dupfd(r4, 0x0, r0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r5, 0x8008ae9d, &(0x7f0000000040)=""/75) 10:46:38 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000000)={0x1}) 10:46:38 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x82, 0x0) r1 = fanotify_init(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="00000000001000", @ANYRESHEX=r1, @ANYBLOB="2c8a"]) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) ptrace$peek(0x1, r3, &(0x7f0000000180)) [ 1851.973150] 9pnet: Insufficient options for proto=fd 10:46:38 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0xfff, 0x0, 0x10001, 0x81}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000040)={r3, 0x3}) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:38 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x8e) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) write$cgroup_type(r4, &(0x7f0000000040)='threaded\x00', 0x9) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r7, 0x0) setsockopt$MISDN_TIME_STAMP(r7, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) fchown(r1, 0x0, 0x0) 10:46:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:38 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r3 = dup2(r0, r2) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff1000/0xc000)=nil, 0xc000}}) 10:46:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) [ 1852.257450] audit: type=1804 audit(1590489998.524:66): pid=29583 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir693651378/syzkaller.kkucyc/3075/file0" dev="sda1" ino=15761 res=1 10:46:38 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x80800, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x220007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x28000000, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4067, 0x20002323}], 0x1, 0x0, 0x983a0000, 0x103}}], 0x1, 0x100, 0x0) ptrace$cont(0x1f, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @loopback}, 0x10) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0xb}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000100)=0x0) wait4(r1, &(0x7f0000000140), 0x8, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x80082102, &(0x7f0000000000)) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000180)=""/69) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x170) 10:46:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:38 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:39 executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff, r3}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008105e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0) 10:46:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="73797a30d01d74210705e9c52143a8c659fba8a740a9d1b89910c079ad8ca3dd7696000000420dfe85b12911238a15b071539af7ee5b4314c56d2ee0b906e547ed3219eddb16867fe7baf1dc65b7247afaca0554d3c072d04c4622052f401b5a1296c13c886f13cae49c9f3cd0c37a62377f6be0e6a9973293e324c1c48982cf438fba9bc32e3374b0a084a7532b8b90bd484f4dd6ea03174d0c395efd2df4a454e01a049ce7d855a7bd0519e102ed89a4ef398019de9dd7cd391cf6000000000000aca6dbedeee02a58e8ae6382e3d767d70144c85236312100e51603dcc78bfa70bbb5489f5c3041580e091848ba00"/252], 0x3a) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11c000}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000240)={0xfffffffd, 0x9, 0x4, 0x40000000, 0xfffff317, {0x0, 0x2710}, {0x5, 0x1, 0x1e, 0x8, 0x40, 0xd6, "02d2b78f"}, 0x100, 0x3, @offset=0x2, 0x5, 0x0, 0xffffffffffffffff}) readlinkat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=""/29, 0x1d) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r4, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r4, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r5 = fcntl$dupfd(r4, 0x0, r0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r5, 0x8008ae9d, &(0x7f0000000040)=""/75) 10:46:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x0, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:39 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000340), 0x0) ftruncate(r0, 0x800799c) mmap(&(0x7f000074e000/0x1000)=nil, 0x1000, 0x200a601, 0x2012, r0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, 0x0) mmap$perf(&(0x7f00000e1000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x814}, 0x0) syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x0, 0x2000) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000001c0)=""/106, &(0x7f0000000080)=0x6a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) 10:46:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x0, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000340)='/dev/bsg\x00', 0x200000, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)={0x58, 0x1, 0x1, 0x2b7568b3cc38f06, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}, @CTA_LABELS_MASK={0x8, 0x17, [0xffffff64]}, @CTA_LABELS_MASK={0x20, 0x17, [0x7, 0xd3, 0x0, 0xffffff80, 0x8001, 0x1, 0x7]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000815}, 0x40) r3 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000010a030000000000000000000c00000c080002400000000108000240000000000c00044000000000000000260800024000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4880}, 0x24000010) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(0xffffffffffffffff, 0x1) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={r6}, &(0x7f0000000000)=0x5) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000500)={r6, 0x9, 0x5}, 0x10) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000000200)=""/198) 10:46:39 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r4, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r4, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000003, 0x810, r4, 0xd28f9000) connect$netrom(r3, &(0x7f0000000040)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x48) setsockopt$inet_opts(r0, 0x0, 0x15, &(0x7f0000000000)="11", 0x1) 10:46:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x0, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000100)={0x990000, 0x1b, 0x3, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x99096a, 0xba87, [], @value=0x40}}) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f0000000140)=""/57) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x41104, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)={0x0, 0x1f, 0x1}) 10:46:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x0, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:39 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = userfaultfd(0x80000) dup(r2) r3 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000000)={0x5, 0x70, 0xfe, 0x3, 0x7, 0x6, 0x0, 0x0, 0x10000, 0x1a, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0001, 0x0, @perf_config_ext={0x0, 0x6}, 0x20, 0x0, 0x8, 0x6, 0x81, 0x335b, 0xf40}, 0xffffffffffffffff, 0xf, r3, 0x2) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0x7) r5 = dup(0xffffffffffffffff) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0xc028ae92, &(0x7f0000000140)={0x2, 0x7fffffff}) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) ioctl$PERF_EVENT_IOC_ID(r8, 0x80082407, &(0x7f0000000100)) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:39 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:39 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r6, 0x800443d3, &(0x7f0000000100)={@any, 0x8, 0xfbae, 0x7ff}) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) 10:46:40 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x0, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:40 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}], 0x1c) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0)=0x5, 0x4) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x3c) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r6, 0xc0205649, &(0x7f0000000080)={0xa20000, 0x3, 0x41, r2, 0x0, &(0x7f0000000040)={0x990a7a, 0x8, [], @p_u8=&(0x7f0000000000)=0x2}}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r7, 0xc1004110, &(0x7f00000001c0)={0x81, [0x89, 0x2, 0x9b], [{0x400, 0x0, 0x1, 0x1, 0x1}, {0x96, 0x6, 0x0, 0x0, 0x1}, {0xba, 0x3ff, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x5, 0x0, 0x1, 0x1}, {0xd5e, 0x4, 0x1}, {0x0, 0x6, 0x1, 0x0, 0x1}, {0x0, 0x7f, 0x0, 0x1, 0x0, 0x1}, {0x8, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x2, 0x6, 0x1, 0x1, 0x1}, {0x1, 0x3f, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x2, 0x1, 0x0, 0x1}, {0x4, 0x100, 0x0, 0x0, 0x1}], 0x3}) 10:46:40 executing program 5: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x7ffffffffd, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) ioctl$SCSI_IOCTL_SYNC(r3, 0x4) 10:46:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, 0x0) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:40 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_sigprocmask(0x2, &(0x7f0000000000)={[0x8]}, &(0x7f0000000040), 0x8) write(r0, &(0x7f0000000140)="200000001a000100f2ffff65835f7f081c148000000800000000000000001300", 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r3, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x3, 0x5, 0x4, 0x40000000, 0x8, {0x77359400}, {0x4, 0xc, 0x0, 0x3f, 0x4, 0x90, "5d2275bf"}, 0x84b, 0x50a8a37dc02e7624, @planes=&(0x7f0000000080)={0x6, 0x3, @fd, 0x8}, 0x959, 0x0, r3}) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000180)={@loopback, @multicast1, @local}, 0xc) 10:46:40 executing program 4: socket$inet6(0xa, 0x40000080806, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x1, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004880)=[{{&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, 0x0}, 0x3}, {{&(0x7f0000001e00)=@hci, 0x80, &(0x7f00000001c0)=[{&(0x7f0000001e80)=""/208, 0xd0}, {&(0x7f0000000440)=""/129, 0x81}], 0x2, &(0x7f0000002040)=""/32, 0x20}, 0x3}, {{&(0x7f0000002080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002600)=[{&(0x7f0000002100)=""/74, 0x4a}, {&(0x7f0000002180)=""/202, 0xca}, {&(0x7f0000002280)=""/123, 0x7b}, {&(0x7f0000002300)=""/245, 0xf5}, {&(0x7f0000002400)=""/194, 0xc2}, {&(0x7f0000002500)=""/247, 0xf7}], 0x6, &(0x7f0000002680)=""/164, 0xa4}, 0x4}, {{&(0x7f0000002740), 0x80, &(0x7f0000002b40), 0x0, &(0x7f0000002b80)=""/249, 0xf9}, 0x400}, {{&(0x7f0000002c80)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000004000)=""/98, 0x62}, 0xed}, {{&(0x7f0000004080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000004440)=[{&(0x7f0000004100)=""/8, 0x8}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000004240)=""/53, 0x35}, {&(0x7f0000004280)=""/8, 0x8}, {&(0x7f00000042c0)=""/9, 0x9}, {&(0x7f0000004300)=""/1, 0x1}, {&(0x7f0000000740)=""/239, 0xef}], 0x7, &(0x7f0000000640)=""/227, 0xe3}, 0x10001}, {{&(0x7f00000045c0)=@xdp, 0x80, &(0x7f0000000200)=[{&(0x7f0000000380)=""/121, 0x79}], 0x1, &(0x7f0000004780)=""/243, 0xf3}, 0x1}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0xffffffffffffff96, 0x6, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x68, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x1}, 0x80, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x881000, 0x0) r4 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x140) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000600), 0x12) 10:46:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) [ 1854.146340] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 10:46:40 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3660, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x200, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b800000019000100000006005b000000ff010000000000000000000000000001e000000100000000800000000000000000000000000000000a0001000000002e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000006299eb6284070000000000fd85d16e7930af0ac3794899000000000005000000000000000000d94bfeadbfce0d4ed61c013b3c42000000ea00000000008a0300000000000000000000000500000000000000000000000000000000000000ee0100000001"], 0xb8}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=@allocspi={0x250, 0x16, 0x28, 0x70bd27, 0x25dfdbfb, {{{@in=@multicast2, @in6=@loopback, 0x4e22, 0x4, 0x4e23, 0x1f, 0xa, 0x20, 0x80, 0x2c}, {@in6=@private2, 0x4d2, 0x2b}, @in=@broadcast, {0x80000000, 0xe4, 0x1, 0x1, 0x4, 0x606, 0xaf3, 0x87ab}, {0x9, 0xfffffffffffffffc, 0xa0d2ce1, 0x7}, {0xd92, 0x8, 0xcab}, 0x70bd27, 0x8001, 0x2, 0x3, 0x1, 0x1}, 0x845, 0x1c}, [@policy_type={0xa, 0x10, {0x1}}, @sec_ctx={0x72, 0x8, {0x6e, 0x8, 0x1, 0x1f, 0x66, "4f6347724b61029d3fddb4948a58af2756314e870d4a418c95b8fd6d17e2b78c0a6cf54667798e588e7f5df407e3e4da63e89343ed888b2bd8373ab36c897f81b043e594d3776cb45ab61d83e5253645d0f70578abd9b29d0dbc9517b9654756896b32aa16c3"}}, @coaddr={0x14, 0xe, @in=@rand_addr=0x64010100}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2c}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x281c}, @policy={0xac, 0x7, {{@in6=@loopback, @in6=@loopback, 0x4e20, 0xd7bc, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x67}, {0xfffffffffffffffb, 0x7f, 0x80000001, 0x6, 0x2, 0x9, 0x1f, 0x10000}, {0x5, 0x4, 0x1ff, 0x6}, 0x3, 0x6e6bb1, 0x2, 0x0, 0x2}}]}, 0x250}, 0x1, 0x0, 0x0, 0x40000}, 0x1) socket$l2tp(0x2, 0x2, 0x73) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) ioctl$VIDIOC_S_AUDIO(r4, 0x40345622, &(0x7f0000000140)={0x6, "4af1f229ff3a6f7881c48b3c966ab0a2f250f4c929b67267109ea6b97e5d5a61", 0x2, 0x1}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x105001, 0x0) ioctl$KVM_NMI(r5, 0xae9a) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) 10:46:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)) io_submit(0x0, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:40 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$VIDIOC_RESERVED(0xffffffffffffffff, 0x5601, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000009c0)=[{0x0}, {&(0x7f00000003c0)=""/68, 0x44}, {&(0x7f00000005c0)=""/214, 0xd6}, {0x0}, {&(0x7f00000007c0)=""/146, 0x92}, {&(0x7f0000000880)=""/144, 0x90}, {&(0x7f0000000480)=""/13, 0xd}], 0x7, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="010068df957ed712d8e8ba2b3f36d702000000000000000095fc11b23cb0e1472250ff7e993ee2d677bace96a37ef4034836909d71d0411625d31960ff920a5b726eaef6ff4b168eb7c0b2bc6b59cacd834a6826414351626f665afaf504c3916d0cf47317140e60c719b8eeefce9914eede771e871623b1095d849b817d4fda5ba00b4fe493a7407060de6d476342b5fd258c1c6cd84c73b67c206e42ec395ca121d5134f8000"/180], 0x9, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) socket(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1b4, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000240)={{0xa, 0x4e22, 0xfff, @mcast2, 0x3}, {0xa, 0x4e22, 0x0, @private1, 0x8}, 0x5, [0x2, 0x4, 0x0, 0x0, 0x5, 0x5, 0x81c, 0x6d]}, 0x5c) keyctl$setperm(0x5, 0x0, 0x202002) keyctl$chown(0x4, 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f00000000c0)=@v3={0x3000000, [{0x4}, {0x1f, 0x31}]}, 0x18, 0x2) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000380)=0x3, 0x4) renameat(r2, &(0x7f0000000180)='./file1\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') 10:46:40 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x0, 0x0) 10:46:40 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0xa198) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000000)={'tunl0\x00', 0xc79f}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000540)=ANY=[], 0x133) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="a2f95667ef12ac8201285f2e6d103f8f9d7bea6d6ac32ec68a75d72b767f7b02aba43d8a009b0a40b0eb195ab80f372cc884ac14f549fa033b50d46fb33c5161a2f9f6660a0911d06f8e9860aace7bca5a94c40ea3ad24d79879ec5ab2c31f1e63", 0x61}, {&(0x7f00000002c0)="9ac0e8499f144f5795a784b226e0419d8c916c74b70eff2d6ca1b7f1d64233a0d2dab11389916d3ee89ba1dda866e458a7196c6c7c1015899c7ad9b8860989247bbc437f260ca7ce0990c8f332a4c59de1f5593290449fd6df129396758f1b2030e6ca933f4a0970c8544b56cf4803b90fb078a43caf698885d9710fb04152ea6f7604cf5adbae839f2ccd46aada12af700d2f8f8f6e7ae69214c65d8e948f18ced48ed012bea85ad7fe4653d413d93ca78fc20f3074368c9ec4bf0c06cbcd5a2ff9c5c488557ec670c67a7b1dc3", 0xce}, {&(0x7f0000000440)="cc783762cd1be06c486c7e2e93c8cf61ed255ad77f6af06fb38a27ab555d23d8cb570c419fd9aca0f4dd3a6e51fc4840a1ccc2bb408cfee59850fe38c62811f3093451f00c430d729ed74a3fe44fc71c40f29b2a1feb31525fa330df36fadd1cc733c82d912f9ba42efc559989cd8f7ff159f93702d2804803ea3418bafde078f2f02fe5892319d3c00d2e78fde5275d56514c05822610b4eb00d9", 0x9b}, {&(0x7f00000000c0)="26c1164d1af787bc54d1cbf28b34", 0xe}], 0x4, &(0x7f0000000500)=[{0x78, 0x10a, 0xfffffff7, "07c7adae69cc27030e3c4f2215fd2e855bc608ce199354e8927823b1686f1e3f9f94c947fba14e563e13f8527cd243b3a10af297be62ded5930735ece2665162ccc99ce287bf77504e30baff948a3020f0868de1c98c96609642ff438a23a8f5df2ab8dbc0"}, {0x98, 0x100, 0x6, "152c2102bc4d35844e5835a0cd46bcdf847bb658bf670c6f675737926b027e609bfca2765029adfe4ae43d0a67fb1daacaa0cfecf9441017442eecff8f9f6ea4c0452ad59c04e72d98a356c5f1d96920f857ea5d97703da4c8f273235d844467224e14ec8997a0613c904435e0b8c05873340fba9b71b9cacb095b04af92b26bdcd61cc896e100"}, {0x10, 0x100, 0x1}], 0x120}, 0x8010) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000000680)=0xff000000) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000006c0)=""/196, &(0x7f00000007c0)=0xc4) [ 1854.688464] overlayfs: filesystem on './file0' not supported as upperdir [ 1854.789986] audit: type=1804 audit(1590490001.064:67): pid=29731 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir693651378/syzkaller.kkucyc/3079/file0/bus" dev="ramfs" ino=251345 res=1 [ 1854.916825] audit: type=1804 audit(1590490001.094:68): pid=29731 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir693651378/syzkaller.kkucyc/3079/file0/bus" dev="ramfs" ino=251345 res=1 [ 1854.944653] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1855.041540] audit: type=1804 audit(1590490001.104:69): pid=29731 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir693651378/syzkaller.kkucyc/3079/file0/bus" dev="ramfs" ino=251345 res=1 10:46:43 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x14, r3, 0x31905e13403123b7, 0x0, 0x0, {0xd, 0x0, 0xf000}}, 0x14}, 0x1, 0x50000}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 10:46:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x0, 0x0) 10:46:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) openat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0x10fec0}}, 0x0) 10:46:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000200)={0xa8}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}, 0x0, 0x3}, 0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x9) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x2, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000100)=0x582f) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000007, 0x12, r4, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0xc4ef) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) connect(r5, &(0x7f0000000140)=@in={0x2, 0x4e20, @empty}, 0x80) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="16de882937ee52d2f186e75ab179c8c8721fca827379e7468fa34cb794c407e15c61bd7e46ac860a520989acf219c7b313c66a89ace097f2a9d4957741dc8f8375811f0b5b8bb2c694"], 0x48}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1, 0x2000}, 0xc) 10:46:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0xd5, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000480)={0x0, 0x81, 0x1b6}, 0x8) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r7 = dup(r6) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r7, 0x0) setxattr$security_selinux(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000340)='/sbin/dhclient\x00', 0xf, 0x0) getsockname$netrom(r7, &(0x7f0000000200)={{}, [@null, @bcast, @default, @bcast, @netrom, @default, @rose, @default]}, &(0x7f0000000180)=0x48) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$NLBL_CALIPSO_C_LIST(r7, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 10:46:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x0, 0x0) 10:46:43 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x21) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x450ce}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000341000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe1}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000180)={0x80000001, 0x6, &(0x7f0000000040)=[0x6, 0xfff8, 0x6, 0x7fff, 0x9, 0x13b], &(0x7f0000000080)=[0x7ff, 0x21, 0x8001, 0x3, 0x54b, 0x795, 0x1, 0x6, 0x0], &(0x7f0000000100)}) sendto$inet(r2, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, 0xffffffffffffffff) mmap(&(0x7f0000341000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 10:46:43 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) pause() r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='fuse\x00', 0x800, &(0x7f00000004c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x100000001}}, {@allow_other='allow_other'}, {@blksize={'blksize'}}, {@max_read={'max_read', 0x3d, 0x4}}], [{@smackfsroot={'smackfsroot', 0x3d, '/dev/media#\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/media#\x00'}}, {@euid_eq={'euid'}}]}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000000)={{0x3, 0x0, @identifier="8d8d1a05ed3fb77f469cca9082e380e3"}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000280)="ea6e11be695c3c95656eb2fde2876e01925c5a3d85a0809804dffa43b24f88c62665fb998d79153ce3a4a78e70f5bbe04cd359df21612c2ffe9205eca27a8dcb478f8d40e712069611a02bb10520ce13108173edc524dfd5da17e5235ae2b95577a968958ac1978a5febd743e9514b053597fc0f1d99aa62", 0x78) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) r3 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x7, 0x400) sendto$inet(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r4 = dup3(r2, r0, 0x0) ioctl$BLKSECTGET(r4, 0x1267, &(0x7f0000000040)) 10:46:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x0, &(0x7f00000000c0)) 10:46:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x0, &(0x7f00000000c0)) 10:46:43 executing program 5: open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) umount2(&(0x7f0000000200)='./file0\x00', 0x0) [ 1857.575871] audit: type=1800 audit(1590490003.845:70): pid=29782 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="file0" dev="sda1" ino=16033 res=0 10:46:43 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x0, &(0x7f00000000c0)) 10:46:44 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r1 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) open(0x0, 0x481, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x284, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x452c54a1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x44, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7759b27f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f70ce95}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52c673c1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x98, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58fb9ebb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x92e53ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33a15412}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c5a4436}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c71cd2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55981905}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fdb3ef5}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40fc318}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x263d57e3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31206442}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x10c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b94}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c4e79c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1602}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x629547e9}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6621}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xccc2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x681b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6792}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7713d2e8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa9c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7423df12}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d33b0d2}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x559ed13}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51e7a9bc}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5800}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d5d}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7460}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33b4b1f0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc691a96}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x148bc867}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c02}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11787a8b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x759c5129}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x284}, 0x1, 0x0, 0x0, 0xc895}, 0x20008000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x20080, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00044595e1d778ba74418e0a9f", @ANYRES16=0x0, @ANYBLOB="000827bd7000fddbdf25010000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00 \x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x8004}, 0x40045) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="68020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) 10:46:44 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[0x0]) 10:46:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x9f9}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x404c050) recvmmsg(r1, &(0x7f0000000c00)=[{{&(0x7f0000000380)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000000c0)=""/118, 0x76}], 0x1, &(0x7f0000000200)=""/77, 0x4d}}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f00)=""/132, 0x84}], 0x1}}, {{&(0x7f0000001000)=@nfc_llcp, 0x80, &(0x7f0000001100)}}, {{0x0, 0x0, 0x0}, 0x3}], 0x6, 0x2, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r4 = creat(&(0x7f0000000680)='./bus\x00', 0x0) ftruncate(r4, 0x800) lseek(r4, 0x0, 0x2) r5 = open(&(0x7f0000001840)='./bus\x00', 0x84002, 0x0) sendfile(r4, r5, 0x0, 0x8400f7fffff8) syz_genetlink_get_family_id$fou(0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x100, 0x0) creat(&(0x7f0000000680)='./bus\x00', 0x0) 10:46:44 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[0x0]) [ 1858.825252] audit: type=1800 audit(1590490005.095:71): pid=29813 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=15779 res=0 10:46:45 executing program 5: r0 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) shmdt(r0) shmdt(r0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x100, 0x0) ioctl$SNDRV_PCM_IOCTL_DROP(r2, 0x4143, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800eaf276b1f4523f47740000990e82ff0ef8ecc59027a5914cbefae70b165f6fae6ac346f66c5ec504839758f92113b1101edd5eecb9dceb40edf2778dfdf47fb77618792ed9ebdcb948514f3d3b32045bf3c5dbabda9c85dfe3c0bedbaa11eab5f3dc3742ba3fa237aff496d3c4ab987022ee0ed6db485440ba7681ecb0bb108800ef3dd5c7ecb8b414a96d476ad189762ee515bac3bc35b127eda6ffb9ffccdf408d497bae6c2951767daaebf8408b35cb03", @ANYRES32, @ANYRES32], 0x50}}, 0x8004045) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r3, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) fchdir(r3) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) sendmmsg$alg(r6, &(0x7f0000003a40)=[{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000400)="9994196bb0ec58eda5326895ffd45e78edc74017548f89acd5d90080da3d1f65ad93cd2798eb605733847f4bab71020c3fe95f969409a62276cefe2142aa33846e10444821de33cb476879da48765264c7a95876bbb8d19df98eb52d1958246cb09487b21151c4c1eaf01582e5074a3ac5df728fee5982014b1020813e9928fda3d55bf96f8779a2", 0x88}, {&(0x7f00000004c0)="bf35d4b751eec35c9295cc12a94c5b998781945c353bdb3cc238e502e047292686ba68a2e8b0468abc56e3ac84b7978872099ef52a564d4f921730", 0x3b}, {&(0x7f0000000500)="b533ebefab80858d511fa2278f9f2c8edc200d0bf0aee5f66aac946aac0920863b4bf68e5d2c6ebc19411fd174387e93696e2a59430048c229438a520b92b9d8a822abc18040c4a807aea97e876f28fccc82a07b62a2fd3d327a22c8f745051bc566898076d1024e7c4920401a848005d4a01a987cc01b6ea94270d8e4d4677fd59329b1ccc2295b18b70f489eb567eccb60552aeee4ed459a472e6c541c969bb6814c14350e874fcab60846bc237f44a41a1294349078c79e1a380147b6ce8df7209d26d0b79f779b79b723e21c22b47194ea64b89059d3680301b6ee03b9bb285583574b27f974", 0xe8}, {&(0x7f0000000600)="e3a570a204f33b20d8de0ab5d4088c32ce3b7b7690ad89ce7c90ef598625a0cc371f91ecca089a7a608d0d9580a2f35a79bfd4d44039984e28c307ff07feae8dea1548e65c1ddc8614d99b95786e04b74fa2cceff73092ffff038203e67ca918e0963cdf7b725561e6799a4467dc720a0a1e3daa802f7ee3c62baf292140e9362a3ac887ec50", 0x86}, {&(0x7f00000006c0)="d329d9cd83cbbe28604d14e774546b765315874f268a5649e446d7baf64bccd0c9545bbd758367fba08c5a99556160298867d1b586b29cbdf601f26f9c365b8a339abb1a1df24ff4a6145604c3efc5849640cf612734ae42a86a2c9c8c186248595525b0bbe39b9556ae648b2d4cdd61b61c57032bdebeb9878bfc4770566edb7bb7d88efc3ba2d8a7675a93197521282218cf9446977a8b513cc687b02fc868a58e922ee21e1053b1c2fd0406c8d04e18dffb58dd3588278c69", 0xba}, {&(0x7f0000000780)="c019e384f843da43c0e773ecf58f1083a396efb7c14bdc022b5b9afb27848680a29c9df52dd851350ec0485eba2494af5d450c66fe2895867e9a99aa4bcb86a03d8ad37411a593ced454e3345a4fc33747cbaae641e5f20fa29c3360dfe07e559faeaf779cd7b192b0dc61dc9d1f7fdca20c4c108efd636b1e01ef6bc988271bf5ddc3cc86a5032fa97a9302fb1cb8d625b7d25b35e838643e326978271a2ba4de884244b2ae79a4970c93160fe90230b5ca2f0a83b03e67ca2b394bbd9b30ec8377cb45a461f24b5a4b13d61d27b3c9bd6aa3ea0307a2450482", 0xda}, {&(0x7f0000000880)="acfead2c0955b89adf6eae7f99c1411fcabea74e55981f45052ea89a41f370d4766e99f02c88df", 0x27}, {&(0x7f00000008c0)="5bdeeb762a452449855d17650a7e6dcc6ccaa38de38efa834ba47b75f96c95536834fa961572b732104e1f2c8d4fb4fdf10246e0da4b842c2f29bed319fc7fca88e1f85a6d7e8c041fef654ddb7418a3425bbf692b1ab76c9fbe5ba4457cb954f7c6f23eff50d71110549eb1317b82535aaa91739ebb1991d53e8886e654f5d9d57528202c154ab7a5febc0872f5a7e5ed66d3b55c8ae76df522df8bfb35036c03236693b68c0e8f800f55db57cc01d504fae0f1daeecae04dfc859484664026c1cec6ccc5a556f1914cac0032175ae7a4e7174114c98dc3e924479e3ea61e249594f82873522c6fee73b0a09688fc06a25dc1412c6ebc56d60a97afee45f5c011432f98a1d45fa4bb7652e2a43775de421a977202278d959ff439931de30d69080fa34bf43e2214f96dcc9d8ec901dcebe2c04bd3dcf96861d8b6c4ba1f7e961c0255f7a2d8508af5ff78d6b215555cff110884c38eae66c539d2ea451e4f5c642acfab5fbb2a3a1036ad13659058bc805261ee6684d657b3adf293de09ccb7611bf3f02ec24fc9ee1a4aef840fea7c576f0fd36cf89cebf42fd23119188976ba424a070fac4d1fb4c0ccc6cde128130e9f56c672970a632e2ebecc772e7d9485e15cbc8ff96da6835a49952281c9ab44c3be32964ecc72e76e0f7986d71a89911f7b1a3d318164e8a1f6a3d427de8262c7fe714f8e7ed04e76b6f4524402a09eaef0d8511670ec0ba139a1329f835c8b3d7d7b563d044b27324297870629c0398e2d6e9029db57520a9723972485526e8b6e9f73a03ccf4003c285376e37af5b84a4026b9d9aa1b7b671d60abf4e26305ef5c6cb1946ea7b218858486579b13aea8833cae7d833c4dd9edd68b2ebbb2707b7b33a593f76df8baca77ffbe4c0f17be977601db6e6a6d3d97fe29207beb9a8fbce3bb3ef7ef3aded64eb04d9725d4fc97d51f8fcbbda5a7dada531bbccd279ac7522c619eddd1064124286361fda01de551649a91bb8ccdfef47f982d83f1754fa78a98a42e50be130ea185a9f216de3eb47e0067271a377826e2ebd08f064d4d8a4259f7786c82cf2d8d893e1a5c85ab5fd5e1dfedfa3510dc1541a069a7f9fcac61bf6bee99035bd0873c5442b510a4320ad2e9698d43274aee1eecea850cf42371eecc57b9aa9d6c9b5481ae767b3e2f29f102a43f1a3580d3375d90d1dc5d17027f371ac4e655f1bff80606960f6979a2bbd0261ce042c8fbd44bbcbd25d8a5a587d7828fd70bbc0761cf3cbca53acf15c6d38e4ab283a7081d8cfa3b1c6bd535a8617bf5d98949f602923c00f9f9ea68c3de47e6c83a07a4060d98465d38c0b005fc2f5ad44c2ccf48e1ff6a1250b314c0129248b23caa39a43b7713cef44daeda05dc8aa60bef913b1e3f4330782bcc772795d30fb653fd495b10e30404fe3e4cbfba243d5909af8a4774a3a6be485f2445337538ef9d300eba280fb8fcd4c08c14b2d9e6fc93c3ee9a0e7f73c2fc334c27a193226583ed21e0a08ea84a091ed1f1504a84db94cc96b7fed246b0d74b882d566723d7dfda837aae2e5d80370706f5ea1f9e5f69d0fd41388fef516e7e114ff12e5f098ff9f5c0b9de6dc4dd49f76e435a3668b32b87e7d49f940eeb436afd082bf2008e046c98a7e396ac74d2d2cae3ba73160a8a830345348b3315beefb3ecd3133a254ed875a81b5d56bb7ed76b90506c4cb05f3f19ac40c989d74e434239f938bad75b7b0b527ae54606570c3e0b4d033a3c6875b34325bb34f6290d44730a22a425000d16b8cef014336ac4665264b94e66a1847f301d8ad9248e0a0a6551ff17ac256c576f0f6b08eaa9fdf22649c66d1800a20c5a35f51a616f52479180d8eb7c2be1728b73cf2b4d84e77a785fa62117199714077ebd5cc80976090b97b2abce709d25ce4c2fc0f321330099e926416559089dd733d9ad6618e6f4f02f207a64ab7166e9228c8bc31dea0fe9048a3f90bc4e4885da729fcfa03350fb96818156d218626cd193c770ca1fb2a6a2b96eabd2861b0f1321c5c665e58709fdf003e941d813e51191924594e5fa78c33914fa2d44df1bb784c709774efd8870933538949aebd6d2197f3f5f25c5c20104f4b2391ab7b7f7b5b45bdd3a9a78cdd0aa3249e56ffe5f91807aae8a793a4c837caa37924917b2b8ea8cf7490c5d1a9eb0e27caf2cb58d565b992a7a2955399e1be6f5076bc171602e2daacc804ae8867096bc3c1920192a32b93b752ed2478cb87ca74a20b5bbebfaf7c4ac7d4d78060a2e5064b7f70b83bb9b04c9202d48e0cc4b58b801d9650a682017767685d2c8c381740320ad9020ae7df23d99dee71bc43e53358fe66ce578cf0f358ba30b7a0e2cb2aceec72e148bbea1a193ab7062165ded9a0744a3827b0308f77619da8a99392f5d34496c9368ccdd6bcf96a85d59d4e68310a3c473001056e4e718d7dcc90eefee0ebd897c521100d59257bee95660c07c7f8b6ae0f4b29a5c2df1c41183092ec1c2ab5e942a873ea81e54ebd3eb34b55d2aa47992b73f5a52775c5d86a8cb72ad3a54751974595462d95cb9575f1021865b6d7f173d99dc7ca4129de46577520059e6a6c7767539e8c7dd4e12c2d91c7f7f3edb5e206bb67fe83904ebb1c889cdf2efb5d01f55bc3b0ed206c67cabb2df94c571e4b849950f2e821c609cf1b7a01711447de5121e199cb04c3fe0c423706d5692ba920dd039cf2ab7c287e01fd5c0f3a58832fda679bdeb493c8127b3c6a46d847adc8534babd2b5e1c2086eb1358437474859c4619815f401bffe241cd3478130a0981a3d26beec712c205565d7c432040362dfa66cdeba3176d755d2873e930293c024461d128d93030387932e9412f2251ced25cf2c0bb22cd659f49d0d5cd146a906cb5a21c44efcd2d1cd9324c361bd84c2554db3a956270d61051b8e1e94c12eba851eb59fffe9ff3bb0d5d2d86ee569ccf923eb52792a6ae8209c8519c6b1343afc46195bdf8551cce7c6ddec06bc8cef63fba24bc8195f95ac2e5a5a8a05d169eb8881970b7b8e94adf85222bcd8de2b3ce646820384781f913618881629b9fee9e548546ccd6ad003c908680d573dd730f1c16a7603f3f2a309b8cdf907ff7aa23c725f1536ae18c7bcdbff13005e15e64d7f61c2a67793efceccd4dec94ad02bc9f5418039d63f5626ac4a8b187fbbf4da1430a8b41254ad633d938a91f45638609d955b13410223bff91fdbbd7eda3e80d419aef9e1dc270878cd39a356ab64866cd5b446becb2d3833d7935e137fc3c5c4a69aec4b3b03d7d06bf462c2f310c7db3175e7160c41f0f325e3b6d23c14aa99a33565f50702a98c80e8ba0f0e8ed9402d6aa9bd56054a516e5b6f251ebce295d69993d1a69f920e76177ab23216d8c17ab654d089695275abf1d09a17978154170dfc7da7fa63d044969675a5f67e0f25c85afa99252fa184ff7e7c578b67ba29809a5e31c8f7b7bd4a1312a4d6b3820f26928b8fd2d20515cfef62c22a8f5cdec6e0f1db121413fa4a989aaf07ce6f466a91c1f19461e213b230eb2c6af7ceb9408d7c0e462c90d7f3acf58258e685905927b610b0bd9d9616ba6c5bf11615315e6d8f7e6d6a9740cda410c9861036b6dbb6679312ac3fc0169367b844797b6e94b36ada9e74b963772b7951a682b136d2bb42b012c70ad56f56426860ef810ca84d3ce9937f84f6b9a4db185927372da638ec893597bc7ea604a734debbe4f2594002b1f312a723b50475f179dda6e4d36c649f3ac3556f339c3c0880ca8117a2c3b5d6a5f8700a6d208a1f354d2053000c372e7ccc3c3e29ff626fc9e2d0885033431b35aa48673634b8799ea4c29aafd16646f8a5e4bd7ad70276a078fe4a28852838bd2c2c8f1aa0584e4bac27685a55759ed36436d0d228c4d6954d5072cbe3b15228adeaf83d6b2ed512b24b3a86aa5e7fd74e949d2e308425741951fc944d195a19688a979d16340e9864762a670c86573a4869ab412bb9f7170672f85c534a5761de801e8a6164928139bbfca86bf3c1014bbe457bf6e76d2cbbb359eae50ff013505a946664ac7bc9fd85dc20e94f5fa88c9f5fb3387f19982e40e62688151491ae65f521fdb00bba4b909839180c2fea26ea3a81c88439b63e8441d11ea768770a2f4ad2f6904dcf5bfbf7ffb9d0f7c7991e54c03f5d9fcacff156b8f61339d7094d24f9380ef148090f3a320d8948658719a4d65c53755b337b5c2d807805d8061cfc372d0a194f62f3b59ef90f918a33d81e5fb5b7f0cf9fc33464d7fc6f02a3a9cd6748cebb54a57219cdc57cd681ca32ea77bac3b93cccdccbd4e5db26778f0bdfb141d55ad9f629788f20dcec2c1f7e5a8700d85e9ef4423c0a58e7986b4e42b443dbdbc0c5864cdc8a1e45dfb943f2334e758dce8a4ff3fb8a247939ed9122b2f271793f54b24b0c80a1f5c0adb1e7714ed3c09e91de2fe34ab068bcca40cd6d03c4020529cee41c9d8e1c28c0d16e7b8989b5f48436b9254ca3f2aba4a48a6266fa1a2bbc677457fc14ceba2f81e09fa0155ff03d5068a3443ba263774b8fd7f89b58b7c702fd978fa57f49d19388f428a06cecac2dfc697b34bf7d5b0daacfa94c4dcc5202174ec8921fb2c92e76509874358ae3d07a957954cfb589fb3d453fead5ed3deff2c4419c05783c3ee2d2cccab7979d242dc34c11e0b281ca32691e2f33615eff678c9d3b2bd3cc5b4c86b6b4b876d3d84051fdb7589a1859af98fae04e230bc65c9d917ff7bbfda21f15dd07b1700e16f918c03b706d8ca43c309e7d4aa081d5897aa5e8a45188812f51e37696ee58a6aedf5a9afc0f293848858783e25802080897efd007a20534eb0e99bdbb190b9bc7416fe7e67d0741eff9dced1b362e3f3262903f64f4f662e906594d6846e66fc15f3c0c04e10b8a1646034d9028eec22d888d949b4bf017aa431078b4f0e508e82420a5b910f73689a9f1d9ac27373dc535818764a9a446482c982e86030bd643e86d70fa96bdf978494629c204e6dec7794f494c964fa750fe859c8a9fbd2e46aaba54d6dd828962dc0adbbb00a1ad5e5fd0d65a46399b6e08c571a58f94d95c940c154103dae95783b3c1cd07d8c68ddf4b0c49e3cef1770e4eb2d01dc2cefac1748eeefa5fa66f865dabc205158130c7dd3c12f238bf8eb3ea6237876d5ea15e5f800f1ce09461e193b9d170e4811e3dff3687282ea792cf8560e2814d454513f0d76972f048e82ee9747d81a05778515fb5c6a0c1fa743e6e6abca686213bbc870a7952851815dc77d28cbdf8327c420131cdb293f2fb651ac3eb22061ea57739f551658bbd84ae07127ddebfca2486b33dcd79e266b11333a7cd305df16212d97432084d2ea8ae26b259426b7f2d40fc3b2b2a189d99185ea619ff554e820cb4f1adc3e2de7f4999de5351a2bbc6d54f3a9ea7700a7e8b7c77c7682d9d16da949053b553e46a1855123ef791ac2825272cc70b315039f0f8e84bb0d7535c07331bc2d3df0c37b6f9239f0d0db5923b5e7a062b3842793b511543602a43447dd8beef93bd6a28ace31dc39587d4ea3e9a8a54db772d1a18964b2fa44825d31cf558d19f81dd408dafd483ed47aae2d792e79266150f5dc6369be48c98996f388cd0225344fe2a13bcb90a3d7c0f9ce0a42b5c01d4b56af9520ec1e463a612d6ddfd40f6ebdb7782e8fc1ced2a0fb594474098569976cb1d6bc32c887a870b946d9abad4bbd15f8e004fdefb709054f3523e68286b373501fb8ff83fb22cdf6a4d011d36b42ee4", 0x1000}, {&(0x7f00000018c0)="cf08c182d70fa0503d9dda8c2290c14ece39598be0e77a094b95ddfab47065289fffa5f3d29861f839f8fc9b100246dc1649ced594959521c38504a99a8019baed318f9fccab5180b2117b2f0abc5283c35d3c535f4d90355788b59b1e84170d15e40e88a315533305292f2c72ee1e88ad576ee369f753db8d2fc5cfb1cdd96352086bd5041f283e3ba091f9ec8e3f80f146bb416b566581e1f10d8496bb72f9a0f90ec8604d759fc35a12d2b21475f340779c1d6efb61b4483c963596fdb2247ea56682e4120d64256e9e7eabfde2ca7d69326f22a56bb0b3889f82a5b591e945cce0f3d86a49343a7ccf2f10cd", 0xee}], 0x9, &(0x7f0000001a80)=[@assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x2897}], 0x60, 0x80088c0}, {0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001bc0)="6adf04a74cde0c5bd166b8c5131446b58dfe17c898fc49dc507576de66502b653b6c877f7bf942cc8703fa7174b98cf10759cd65a3ac7966bc956caf9784054ddddc11a08ca0337cfb7c3f3ae5dbfb42519d484f3f277ca6eecfc7a6150f127e2edf1c3eff5a1e0e36f62ec98d45fb58ea74bc6bbf5ca645c6addfd1aea9666493eef6010b083a29e6f63b7bc557214cd1db9c1e21128b3af269e02df0f8e9a3b8d3c4bac247a38cc39adf1b3754bcc430df9fe5f41e9b8aa417a64f14982c9eb2e8a1ec681a7fd963a356a4c928732db8edfb8d4ab785036975", 0xda}, {&(0x7f0000001cc0)="5b9c0dff28f561b6520ad7f4e69a6853e068996c118e61ad37299d1fdf90f7abb47eafe413e4558f1a7e26909aea349ccf59c619a67f95a1386d4bdbc3ad73067f6bab376ef0254d2eb8bbd5f16f84a6c79ea1", 0x53}, {&(0x7f0000003bc0)="9a512d0db8c0c77b968ee2b4eda54f96639a3aa92c8a3a3bd3317c9613b1034bb01e389d164779e672aa078167f30426e7d2e5dc0d90339ca899ee795cb3685beb6d0f2817cb2b5a4b75da21f9247b63feecd2097bcd139d51001e8a027f489f1fb19f079b7af7cb62e2bf67273e87a3f87d5c3c2e791ef8e3ab018c0eea3b01bf4ad02ebbbf1c98d0233d01c9583167c6893f56502ac399704b2b2afd5efec4c4892b12a60d1de6d7b675a9112cfc81eb88c25b20a93dda55cc7c0b253cdcf08895deec06b66a", 0xc7}, {&(0x7f0000001e40)="b6180e40556a9bfbf1002afa9f1e948eb345a2cbcbd265544fc4354ba5c546fc790893b12bc02c5e511e1f2a69c3a9c284493c17e38923ab0d1689712fbcacd7ec01aa06377f8cd5d0c43ff0498fc71debeb3aa3350f0014e866f20e5301060dd05700f2b6ab978f2a936f7dff3ff987f1bd0e660acdbee41bc12d83061102f8c553b5c83be7d6e4b0dcaf1a", 0x8c}], 0x4, &(0x7f0000001f40)=[@iv={0xe0, 0x117, 0x2, 0xcb, "2853f2e006aa6638c5103ac335d5066b67de90e82bc0e41c0317ba32b13ede01b9c486d7e31ffa022afe40c50ef2be80baed0779001a68de64b1ede625161f95ec3e159c262330841dfd09944819b28fbeeb55ffd0cdc454f99c4999ab2ed7c27aecc91ba2fe14fd4d8a896bcb4db51fc3f90097b2cf386ab0a195856171497b48eee03a5fba977ca542a1ef322cbb52f78a6cb73b7fd42928d8a24a8e6e70a7c181adb90ae3e3548794673316055f9249640d454075b6e40b6f0b970f8d3f866dbc94992cc4ff6ee31e81"}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x321}, @op={0x18}, @iv={0xb0, 0x117, 0x2, 0x97, "70a6724c4dd0fc766f322a734678f29cf47d562f1aed9cd7971ef38ab8ca976757b390d53904f2699c77965c2cb1baee7178ea557b415492c3004c0df5b16b191d6b294107635efb637dfe2cdcb9bf46f4beea6da9c8fc08935e9be95ffc6c1a342349f3e710437faa900c395cff3819b967a11389f92dab52309b5b9566a3b40e068b75b16fd45fcff068ab7b6a96fe000190c199ff3a"}, @iv={0x80, 0x117, 0x2, 0x6b, "826d17ccdac40afffac0e283fdf429cd3966a99e7212d37955a6c49e10e8a668db113a5d57b8b1f54f314167917a3645be7900041781d4be029941cd3e03fec56fbcff921084ce265495db1e62bc9a75992824c6a54dc7c32730941ec42a69833d15cfeec13e669b20eddf"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x12a0, 0x20008040}, {0x0, 0x0, &(0x7f0000003240)=[{&(0x7f0000003200)="8ff607fa9d2a354fffd6b4753632f40e9c4562a8d1f3", 0x16}], 0x1, 0x0, 0x0, 0x804}, {0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000003280)="db2233abde5a49f9b73a79a568c4475f90276c02c3843df9ff661eef62bf41efd7b96f29ad16894fc04f1b7a8d925169f25b3bbb2e74", 0x36}], 0x1, &(0x7f0000003300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8014}, {0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000003340)="d444294fe89803531da191009d653824893bd1dfeb9a256600a78e2cee70a993f3171a979efea31618564d1ce342ba9b1fe467e72fbb61edd9a1af9a2d33bbd8675c79eaf3b6ff5e4731fb9c5aa2e714ea02c11507e1494be8e0ee688209d9d418e347fa5c246c0f376b333335e8803c377e6c82b1", 0x75}], 0x1, &(0x7f0000003400)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x401}, @iv={0x30, 0x117, 0x2, 0x1a, "f2f567e866e2e3f25d3a6c37fdb06bdb6287f2973b0a65e1f0f9"}, @iv={0x40, 0x117, 0x2, 0x2a, "bb6d9decc7b4a6e28ebb146e432fb6f4517f292515f90f2f444793f21169b829091ada7c34c4b1598631"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x60, 0x117, 0x2, 0x49, "2001a6f23af44f4eef822317bebb6a77cffacf3ab036732475bad06348c1c641c81ac5de57f0979c0b415ad3192cbc316e87d8720c3466fd14ff3f29bbdc3639a036fa697a9c176a3e"}], 0x118, 0x8010}, {0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003540)="cbe712dc3da389a9025b804c5c73993d2e6232ad37c4e739d4c29da8165478de45bdf59003b81c4ef28571c9ef0937fe14d9b599205fc6259173d35d1bebc473c5a6f309ea957d551a2a17b730d391921075253c2f06c1cbf614094435fa68f366adb191174b08fbe4b219cb60fe228f1454c18a3828107317eba8f38e22846e6d94e5196691006a403191cb2adf25bfc5f57525b65966884c459f6a1112609daf0c99b1a61dfc15acf5a98026aac5057e47ec31cd0481b95c9a6467b208caeb56488cad5867bd911eed052dc4484d7bd5cc47ad8475ff4a1b", 0xd9}, {&(0x7f0000003640)="1ec66f1ddc00411d7c06c40a177a683e13ecb19c2b45738f6796be9fba77993661886afed6ab2d35ab4e17351298e4a0393fe8036c1d510438785eb71e68dd870b48e6364e271cd39028a3f1a1b074367a05997797ba913ab953a0b45246a2125af0a69d363863f06aff4b614af8747aec47d9341c59990b2482337bf931426d054db6d34dac950aa316367d2ce4eeabf4cf289bae3f150e0a013ebffb42f94ac6fc58c477283e", 0xa7}, {&(0x7f0000003700)="2ff1bd62d388e1f7a58d4841acc86160ed25d75068fdfe5e140e3f012df391380af52f45f3fa50a0e9f743ec71fb137e62f0309eeb11688d8ca9f7db825969cab4ed94bf2156feed122fcc474206", 0x4e}], 0x3, &(0x7f00000037c0)=[@iv={0x20, 0x117, 0x2, 0xa, "b5bad3a6d60890441077"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x200}, @iv={0xf8, 0x117, 0x2, 0xdf, "e593ae2def6c72e3ac5b4ec3a7571d08bfbc1d8c7155d7b8ed59cf45f467b88f040d681e5070b20c7826eeb54df93fa080382ebcdefcdf82429081f0ecbce5d55f2889e643ae6c968b97fabbf59689da5588400b8df60710db932a42def2fc5af52ae299e86121a51c2f36d7aeae2c36d7797d9ee19e8ae4358059cccf8b500a3fca8c05006cae6d59a4d019c6265031446c0be953fefa6c9e2cc15e231273c16590c0ee74a66a6a343b4b975edeb6084fee0898d08ff12584643e5cfa5303010a388928f4b89450a5f57d88471c7a47a2496a4b0f8b1da1fdb966ba827a3e"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xfffffff9}, @iv={0xf0, 0x117, 0x2, 0xd5, "df99f9659cfd0669c7d0ca0114c413acce8517ecbac24a80b8c8d2bbbcd58f14d5d7b572f02a998d1bc729117aa22423d0953b412e017a0628adb2f8d77d0a3b2c669dec88d9c0d4732b4d435a48f9e04d834e19bc8284adfef6b1c7fc4fc8679dd2f54a97dbff276151b4364451efbfa294f7f5debc09c9d691f5270ff2d9ca1cd8d0648dc36e336e500c664a9fb40088e6c7d5d90b5253e9f5727cf2bbb301060b99e34527ebdf8a6c67dba277e67f66d9fa9b30a5011c2c5e6f73beb9da0bac364ddb87c4ce4670199259af39915c0de686633e"}], 0x280, 0x4000}], 0x6, 0x4efa662c531ea25c) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x3, 0x4, 0x5, 0x1, 0xd6, 0x7}) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf251100000008002c0001000000080032000700000063e222ac1f330fc9a637b93496587916eb36325192da5dc00f781c2e5a0d5e8cfa8194f8b6d4a5d94d7499730cb90f2c5df70328b60338d86958bc61e8056810e042c8361907705c023adf19b54dfe05ae8cc3ef60334bf707000000d79e8076316cfcad57ff3cb8d67b38737932ccf081d68ed878eea44fbceb6375f59c907a9917a53db6b283b708512a7c930f061a70cbe49b482d0b339cdb4e9b6a"], 0x24}}, 0x20004800) [ 1859.342434] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29824 comm=syz-executor.5 10:46:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f00000000c0)=[0x0]) 10:46:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0xb, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x100000, 0x0, 0xdeee, 0xfffffff4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r2, &(0x7f0000000000)="ad", &(0x7f0000000340)=""/197, 0x4}, 0x20) prctl$PR_SET_FPEMU(0xa, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r7, 0x202002) keyctl$chown(0x4, r7, r5, r6) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuse\x00', 0x20001, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000160000,user_id=', @ANYRESDEC, @ANYBLOB="2c67726f75705f69fb3d", @ANYRESDEC=r6, @ANYBLOB=',allow_other,max_read=0x0000000000000006,default_permissions,fscontext=staff_u,dEfcontext=unconfined_u,measure,fowner<', @ANYRESDEC=r5, @ANYBLOB=',dont_appraise,func=FILE_CHECK,fsmagic=0x0000000000001242,\x00']) r8 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) ioctl$EVIOCGLED(r8, 0x80404519, &(0x7f0000000200)=""/250) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$UI_SET_KEYBIT(r8, 0x40045565, 0x14d) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0xd}) 10:46:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xb, 0x8d}, 0x0) syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000140)='./file0\x00', 0x1, 0x4, &(0x7f0000001500)=[{&(0x7f00000004c0)="187522b9114918443d9aa3e8f87ce45dd59950e65c07a9fabee133011f7711142c4f83d8cfaeb1bec14b0e2816a76073fb73474ed4a8bbd41d512a5d85c0cf297e7a09", 0x43, 0x9ff5}, {&(0x7f0000001400)="722193f4c0f364e07cd818f5517b322e2a8ddd41907bcc6d6d8763c00f4f988bf981f17433915efdc9ddabbb81372c1cd4008ac58a51f50e1a41a3c39291755dc07e31a71e0dee026bd6e4bdb8dcfde5e5b0f1125932775e00e548fc013f627c27953ec537a37d95debe593d08c5b1f1c54ef1b6adbae43328663a3bc47aecb4d57bc3a34cedd7b1d77f2fbf5620d630d937b55b3677e160773e06cdf44273d6a20267f8378f15f758cf3500fe0a0237149f8ebcfbf0af7046b4a3527734510eb174beb8254d747736f8dacd82afcc8a0cdb210383b33ffbd962", 0xda, 0xbd8c}, {&(0x7f0000000180)="4e94a3d45f8b0d0bdbd5effce2e13d6b276c0069ea505916b2ed631ee2b4b02e7f9f9e0dec6f", 0x26, 0x80000001}, {&(0x7f0000000540)="d0bdd35215e08953eee2f02a89cbfbcd8bd18a62ef2d9c549d1a9ba1379982868f541d1cea7b04def270658d73c46cee074524083253892f6edef2678e0f8255a6af5c259989ed7fb525fba2e27e90efe07b36a29ec6f9ef9af03367f099642893fc34038a8a5341373b08f4252c353c", 0x70, 0x2}], 0x900000, &(0x7f00000003c0)='\x00') r0 = getpid() sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x200}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/226, 0xe2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002cc0)=""/44, 0x2c}}, {{&(0x7f0000000200)=@can, 0x80, &(0x7f0000001840)=[{&(0x7f0000000400)=""/153, 0x99}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x4, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000001580)={0x3, 0x0, [0x4, 0x6, 0x9, 0x4, 0xffffffff00000001, 0x8000, 0x0, 0x5]}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x6, 0x4000000000001ff, 0x0, 0x1000}, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x8, 0x1, 0x0, 0x0, 0x0, 0x3, 0x20038, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x1000}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x8) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file2\x00', 0x400, 0x1b0) write(r4, &(0x7f0000000600)="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", 0xe00) sendfile(r4, r5, 0x0, 0x12000) socket(0x0, 0x0, 0x0) 10:46:45 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) [ 1859.512978] WARNING: can't dereference registers at ffff88808bf25928 for ip common_interrupt+0x93/0x93 [ 1859.543361] audit: type=1800 audit(1590490005.805:72): pid=29816 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="bus" dev="sda1" ino=15779 res=0 10:46:45 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0717000000000000000016000000050009"], 0x38}}, 0x0) sendmsg$TIPC_NL_MON_GET(r8, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xcf8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x10) r10 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r10, 0x0) epoll_pwait(r10, &(0x7f0000000180)=[{}, {}], 0x2, 0xc256, &(0x7f0000000200)={[0x800000000]}, 0x8) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1859.795699] audit: type=1800 audit(1590490006.065:73): pid=29846 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=15779 res=0 [ 1860.019818] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1860.034264] hub 9-0:1.0: USB hub found [ 1860.039405] hub 9-0:1.0: 8 ports detected 10:46:46 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x56a6}, 0x200, 0x40000000000003, 0xfffffffd}, 0x0, 0x10, 0xffffffffffffffff, 0x6) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_LOCK(r1, 0xb) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r5, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r5, 0x1) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x6d, &(0x7f00000000c0)={r7}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000000)={r7, 0x8}, 0x8) 10:46:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) msgsnd(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0000000000000000e57471a5c9cbdb14789d95607a3ea30341aabafa29354da518e8911da21de7d4bf3a310553533ea7cda0957f1600eba5a76e6af8772024f9653a908aca613b606b55774858b6a04abe90f0ac0f539efd542848a36d655e5e32362d8843d8262f4c29301f1980410b85f87a5b164c36c4a84520437cdf03d4de06e0f91b3af318a97de13b72064aadda29232e450118f26603812e21f4298ef483891137e767f241c02f0b0d5b40c8d7e3264737046aaa4de2d5f647decc3bfffbfd13a9a36d54e26fe194a0aca8c4f803580f10507fb5fa3c8233256bb67b7aaa"], 0x7c, 0x800) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x2, 0x2, 0x0, 0x9}, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000200)=0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000000c0)=0x8, 0x4) perf_event_open(0x0, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20080}, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendfile(r4, r3, 0x0, 0xfffffffffffffffe) 10:46:46 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1) r1 = syz_open_procfs(0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000080)={0x6, 0x0, 0x0, 'queue1\x00'}) open(0x0, 0x481, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x284, 0x0, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x452c54a1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x44, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7759b27f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f70ce95}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52c673c1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x98, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x58fb9ebb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x92e53ca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33a15412}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c5a4436}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c71cd2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55981905}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fdb3ef5}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x48}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40fc318}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x263d57e3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31206442}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x10c, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b94}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c4e79c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1602}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x629547e9}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6621}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xccc2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x681b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6792}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7713d2e8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa9c9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7423df12}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d33b0d2}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87b5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x559ed13}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51e7a9bc}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5800}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3d5d}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7460}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x33b4b1f0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xc691a96}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x148bc867}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5c02}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11787a8b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x759c5129}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}]}, 0x284}, 0x1, 0x0, 0x0, 0xc895}, 0x20008000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000440)='/dev/full\x00', 0x20080, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c00044595e1d778ba74418e0a9f", @ANYRES16=0x0, @ANYBLOB="000827bd7000fddbdf25010000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\x00\x00\x00 \x00\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x8004}, 0x40045) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="68020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000000000000", @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) 10:46:46 executing program 5: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, 0x1, 0x7, 0x3}, 0x14}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r3, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 1860.120991] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 10:46:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) [ 1860.263395] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 10:46:46 executing program 4: r0 = socket$inet6(0xa, 0x400000000005, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x147c42, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x4, 0x10}, 0xc) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x88001) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 10:46:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) [ 1860.400966] audit: type=1800 audit(1590490006.675:74): pid=29887 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="sda1" ino=16408 res=0 10:46:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0xb, 0x8d}, 0x0) syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000140)='./file0\x00', 0x1, 0x4, &(0x7f0000001500)=[{&(0x7f00000004c0)="187522b9114918443d9aa3e8f87ce45dd59950e65c07a9fabee133011f7711142c4f83d8cfaeb1bec14b0e2816a76073fb73474ed4a8bbd41d512a5d85c0cf297e7a09", 0x43, 0x9ff5}, {&(0x7f0000001400)="722193f4c0f364e07cd818f5517b322e2a8ddd41907bcc6d6d8763c00f4f988bf981f17433915efdc9ddabbb81372c1cd4008ac58a51f50e1a41a3c39291755dc07e31a71e0dee026bd6e4bdb8dcfde5e5b0f1125932775e00e548fc013f627c27953ec537a37d95debe593d08c5b1f1c54ef1b6adbae43328663a3bc47aecb4d57bc3a34cedd7b1d77f2fbf5620d630d937b55b3677e160773e06cdf44273d6a20267f8378f15f758cf3500fe0a0237149f8ebcfbf0af7046b4a3527734510eb174beb8254d747736f8dacd82afcc8a0cdb210383b33ffbd962", 0xda, 0xbd8c}, {&(0x7f0000000180)="4e94a3d45f8b0d0bdbd5effce2e13d6b276c0069ea505916b2ed631ee2b4b02e7f9f9e0dec6f", 0x26, 0x80000001}, {&(0x7f0000000540)="d0bdd35215e08953eee2f02a89cbfbcd8bd18a62ef2d9c549d1a9ba1379982868f541d1cea7b04def270658d73c46cee074524083253892f6edef2678e0f8255a6af5c259989ed7fb525fba2e27e90efe07b36a29ec6f9ef9af03367f099642893fc34038a8a5341373b08f4252c353c", 0x70, 0x2}], 0x900000, &(0x7f00000003c0)='\x00') r0 = getpid() sched_setattr(r0, &(0x7f00000001c0)={0x38, 0x2, 0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x200}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/226, 0xe2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002cc0)=""/44, 0x2c}}, {{&(0x7f0000000200)=@can, 0x80, &(0x7f0000001840)=[{&(0x7f0000000400)=""/153, 0x99}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x4, 0x0, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000001580)={0x3, 0x0, [0x4, 0x6, 0x9, 0x4, 0xffffffff00000001, 0x8000, 0x0, 0x5]}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x1, 0x0, 0x6, 0x4000000000001ff, 0x0, 0x1000}, 0x0) perf_event_open(&(0x7f0000940000)={0x0, 0x70, 0x8, 0x1, 0x0, 0x0, 0x0, 0x3, 0x20038, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x1000}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x8) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000080)='./file2\x00', 0x400, 0x1b0) write(r4, &(0x7f0000000600)="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", 0xe00) sendfile(r4, r5, 0x0, 0x12000) socket(0x0, 0x0, 0x0) 10:46:46 executing program 4: r0 = socket$inet6(0xa, 0x400000000005, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x147c42, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x4, 0x10}, 0xc) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x88001) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) [ 1860.535224] audit: type=1800 audit(1590490006.805:75): pid=29898 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="sda1" ino=16408 res=0 10:46:46 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:46 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x4047c7, 0x2e) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000040)=0x8bba, 0x4) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r9, 0x0) write$9p(r9, &(0x7f00000000c0)=';', 0x1) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x8) [ 1860.617787] audit: type=1800 audit(1590490006.885:76): pid=29901 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="sda1" ino=16400 res=0 [ 1860.769452] audit: type=1800 audit(1590490007.045:77): pid=29911 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16409 res=0 10:46:47 executing program 4: r0 = socket$inet6(0xa, 0x400000000005, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x147c42, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x4, 0x10}, 0xc) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000000)=0x88001) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 10:46:47 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r3, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) init_module(&(0x7f0000000080)='-\x00', 0x2, &(0x7f00000000c0)='\xa6security\x00') r2 = socket$inet6(0xa, 0x802, 0x88) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000100)=0x5) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={[], [], @local}}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r3, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private0, @in6=@remote}}, {{@in=@private}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) sendmmsg(r2, &(0x7f0000002cc0), 0x1a3, 0x0) 10:46:47 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x20, 0x10000) ioctl$SOUND_PCM_READ_BITS(r0, 0x80045005, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000180)=0x40) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 10:46:47 executing program 3: r0 = open(&(0x7f0000000080)='./file0\x00', 0x4047c7, 0x2e) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000040)=0x8bba, 0x4) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r9, 0x0) write$9p(r9, &(0x7f00000000c0)=';', 0x1) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x8) 10:46:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20140, 0x0) 10:46:47 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, 0x0}]) [ 1861.194135] audit: type=1800 audit(1590490007.465:78): pid=29929 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="bus" dev="sda1" ino=16407 res=0 10:46:47 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r7, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$inet(r7, &(0x7f0000000100)="e8", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r7, 0x1) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f00000000c0)={r9}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000000)={r9, 0x43, "104b5a31c19ef3df949b0585e08a366bf9cfecfdd67775c2a1476324eb2567252792d6aca3ee06e499146ca635c02d0438050c89ab1a87ad099dfe11ed64e875a4a7ee"}, &(0x7f0000000100)=0x4b) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000140)={r10, 0x92}, 0x8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:47 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x4047c7, 0x2e) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000040)=0x8bba, 0x4) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r9, 0x0) write$9p(r9, &(0x7f00000000c0)=';', 0x1) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x8) 10:46:47 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, 0x0}]) 10:46:47 executing program 4: r0 = open(&(0x7f0000000080)='./file0\x00', 0x4047c7, 0x2e) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000040)=0x8bba, 0x4) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r9, 0x0) write$9p(r9, &(0x7f00000000c0)=';', 0x1) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x8) 10:46:47 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x4047c7, 0x2e) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000040)=0x8bba, 0x4) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r9 = dup(r8) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r9, 0x0) write$9p(r9, &(0x7f00000000c0)=';', 0x1) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000)=0x8) 10:46:47 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, 0x0}]) 10:46:47 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) io_setup(0x1f, &(0x7f0000000180)=0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x111003, 0x0) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000100)={0x5, 0xffff, 0xff, 0x8, 0x100}) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r0, 0x0, 0x0, 0x7}]) 10:46:48 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3}]) 10:46:48 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f0000000200)=0x0) r2 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$P9_RSTATFS(r2, &(0x7f0000000280)={0x43, 0x9, 0x0, {0x3, 0x520f7570, 0x0, 0xfffffffffffffffe, 0x6, 0x0, 0xfffffffffffffffe}}, 0x43) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000040)=0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r3 = creat(&(0x7f00000000c0)='./bus\x00', 0x30) r4 = gettid() ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x33) ptrace$cont(0x7, r4, 0x0, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000240)={0x1, 0x3, 0xfbf, 0x80000000, r4}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000000000)=0x200001, 0x4) sendto$inet(r5, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r5, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5}]) 10:46:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() getpeername$llc(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10) socket$inet6(0xa, 0x0, 0x1) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) recvfrom$ax25(r2, &(0x7f00000001c0)=""/96, 0x60, 0x40000002, &(0x7f0000000340)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000180)=0x3ff, 0x4) sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x0, 0x28, 0x1000, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x8000}, 0x0) perf_event_open(&(0x7f00000003c0)={0x0, 0x70, 0x41, 0x6, 0xff, 0xfd, 0x0, 0x20, 0x80500, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x2, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg$inet(r5, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @initdev}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1b1, 0x0) socket$inet(0x2, 0x0, 0x10) 10:46:48 executing program 5: socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/mnt\x00') r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r4, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r4, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001680)=ANY=[@ANYRES16=r4, @ANYRES32=0x0, @ANYBLOB="00000063766c616e000400028008001c01", @ANYRES32=r0, @ANYBLOB], 0x3c}}, 0x20000851) 10:46:48 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/8, 0x8}], 0x1, &(0x7f0000000480)=""/144, 0x90}}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000005c0)=""/10, 0xa}], 0x1}, 0xc}, {{0x0, 0x0, 0x0}, 0x8001}, {{&(0x7f0000005f40)=@generic, 0x80, &(0x7f0000006000)}, 0x1}], 0x4, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/fuse\x00', 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008108040f80ecdb4cb92e0a480e0026000000e8bd6efb250314000e000100240248ff050005001201", 0x2e}], 0x1}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002780)={&(0x7f0000001500)=ANY=[@ANYBLOB="d4050000", @ANYRES16=r3, @ANYBLOB="00032cbd7000010000000200000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRESOCT, @ANYBLOB="400102803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="40000100240001006c625f74785f686173685f6c6f5f706f72745f6d617070696e67040000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000001006c625f706f72535f737461747300000000000000000000000000000000000000050003000b00000008000400010000000800060089d3b845281b7966c88b274cc697445e838ee41354d8476096e25b8402b7a2db26aaf6e510ae4ab67dba8f4f95f955d5bca659fd0e80c0c9227b45fb0bde30f8bac965be5ec41e13bd05d4eb6a2e1c5b17e05e495c6a56d9fee284c224c936592005c9eacefc925f4b9b2261", @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="9c01028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c000400a809837b400e000081000608018000004000dcfb0700000006000501080000000100660603000000f7ff080000020000ff000101355afe3b40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400060000", @ANYRES64=r4, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="8800028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400030000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e6700000000080001003fcf779fc01c77390e6e18cb9748714334ee77599e4760f1476878f87a1ab2ffd42bba01179e2a810687bc97bdc36f652d253193e7253809f31bb4a7b70a28d0696e6df63c64d488638e66d80c979de0c28722f40900f9819601a8b694fc5c39190d779974cfe1b7", @ANYRESDEC, @ANYBLOB="2801028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400040000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000600", @ANYRES32=0x0, @ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="7800028074000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000440004000180090908000000ff7f01080300000002008100000000000b0008240700000001f000003f000000000207090300000033d3064d08000000090000000100010008000100", @ANYRES32, @ANYBLOB="44000280400001002400010071756575655f696400000000000000000000000000000000000000000000000005000300030000000800040001fcffff08000600", @ANYRES32, @ANYBLOB="2e880c6bbbfdc1204c617955091c043de2985db83186ee9d208129ca5babbb286599ce649d"], 0x5d4}, 0x1, 0x0, 0x0, 0x800}, 0xc803) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x11138e7, 0xfffffffffffffffd}}}, 0x90) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f746d6f64653d303001000000303030303030303030303031303030301d7da56015233a6b41757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c00caca327d0e92b185fcf7bbe28f49a36996b455a164066f8c49b6c6a1db6d85a5d2350059a5c1ef58a70cd567442c1c4f522145c66765a0e1379427e90b308f1c3a735652b9905522173a6b84d649cb31951e5e3094f5982e16eb7af07d76761b5dd2c6a5042238dfaaecc52e3ae67f7f7612d81723b94e854299e5c08b64886f99380adf921151801f0de2591cb0fe029c7ecdc6941336d986dc32a0"]) gettid() [ 1862.191247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 10:46:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00') r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="8500003b07009aa265cb480000bd0000704e000000000000002fad4ff5a46ae6ff6f83a0"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000040)={0x4}, 0x10}, 0x78) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r3, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000080)={r3, 0x1f}) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x8b, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) r6 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000600)={0x0, 0x1, 0x4, 0x70000, 0x5, {}, {0x3, 0xc, 0x7f, 0x8, 0x0, 0x9, "6247dfce"}, 0x0, 0x1, @fd=r6, 0x0, 0x0, 0xffffffffffffffff}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000680)={&(0x7f0000000380)="0c3cc7c88a710e74cd100722def873c32bb37c1cbefeb54157471b4f75be99c8f08f1a209b235c7a48532e2d1590eebf2462e221274f670180a0740112ae1fb046fb2d33e8d6d03e4c82aa6b6ad3773f8b994d0ac9c2889495a10d06bd7b7b54d59c05660c1f682c183a068b04e332e47e723068d92955b949c93be623c33e3ede9bd17db39056c89448250e871717e0293d06f2c6ea3a37371d60f3e5f70f3b762f6ba780a52613b95e53d97fb8c2e40652b456e2bdfa6751f1cb8735a9e4eeb7e345", &(0x7f00000005c0)=""/63, &(0x7f00000004c0)="70d941b30b55b2a80519caaf86f704fbb77c69c5ac5900cb67ee50277f586a99903acaad7e2635e02d5d17217fc140bdcc2cd833be0cd2ae3b5b08", &(0x7f0000000500)="475c51772de4a385f23bc7e457ff679919962a605674c8933bdc7f4b22ddb1c4729de7927005a7b3bc567c4f15446d5400a17450f24d5ea657f9cf276ed525dd386d917d012d2bf21898328d21e0cecdf9c529eb19745ac33cd747680646346ec75fd98a83c1715df4a944a4a19b481f3ccd0b8f21fe80cbe4b8246201146d4a622c68619b5a9c0aed6c43c363e13a8c8a9eb618131e", 0x3, r7, 0x4}, 0x38) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f00000002c0)={0x80000001, 0x4, &(0x7f00000000c0)=[0x20, 0xfc4a, 0x8001, 0x7ff], &(0x7f0000000200)=[0x3], &(0x7f0000000240)=[0x9, 0xa6, 0x6], &(0x7f0000000280)=[0x800, 0x81, 0x200, 0xf001, 0x7, 0x1f, 0xfff, 0xd9d4, 0x7, 0x6]}) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000340), 0x4) 10:46:48 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3}]) 10:46:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x40280, 0x0) read$dsp(r3, &(0x7f0000000200)=""/3, 0x3) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) getsockopt$inet6_dccp_int(r3, 0x21, 0x3, &(0x7f0000000240), &(0x7f00000002c0)=0x4) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000000c0)={0xa00000, 0x5, 0xffff95eb, r2, 0x0, &(0x7f0000000080)={0x990afb, 0x7, [], @ptr=0x100000001}}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4138ae84, &(0x7f0000000280)={0x0, 0x0, [0x0, 0xfffff000, 0x0, 0x8, 0xfdfdffff]}) 10:46:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r6 = dup(r5) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r6, 0x0) ioctl$TIOCGICOUNT(r6, 0x545d, 0x0) preadv(r3, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) [ 1862.241631] device batadv_slave_0 entered promiscuous mode 10:46:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x4110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) prctl$PR_GET_SECCOMP(0x15) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x33) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) ptrace$setsig(0x4203, r1, 0xafa, &(0x7f0000000000)={0x1c, 0x5e, 0x6}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:48 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3}]) 10:46:48 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3f, 0x103180) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r1, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_MRU={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x8004) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r8, 0xc0305615, &(0x7f0000000280)={0x0, {0x6d0, 0x400}}) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r5, 0x0) ioctl$VIDIOC_ENCODER_CMD(r5, 0xc028564d, &(0x7f0000000240)={0x1, 0x0, [0x1ff, 0x80000000, 0x9, 0x4, 0x7, 0x0, 0xfa6]}) 10:46:48 executing program 1 (fault-call:6 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) [ 1862.605119] FAULT_INJECTION: forcing a failure. [ 1862.605119] name failslab, interval 1, probability 0, space 0, times 0 [ 1862.618532] CPU: 0 PID: 30027 Comm: syz-executor.1 Not tainted 4.14.181-syzkaller #0 [ 1862.626627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1862.636211] Call Trace: [ 1862.638835] dump_stack+0x1b2/0x283 [ 1862.642478] should_fail.cold+0x10a/0x154 [ 1862.646637] should_failslab+0xd6/0x130 [ 1862.650618] kmem_cache_alloc+0x28e/0x3c0 [ 1862.654798] do_io_submit+0x2c4/0x1400 [ 1862.658701] ? aio_write+0x4f0/0x4f0 [ 1862.662420] ? vfs_write+0x319/0x4d0 [ 1862.666293] ? SyS_read+0x210/0x210 [ 1862.669929] ? SyS_clock_settime+0x1a0/0x1a0 [ 1862.674347] ? SyS_io_destroy+0x300/0x300 [ 1862.678503] ? do_syscall_64+0x1d5/0x640 [ 1862.682604] do_syscall_64+0x1d5/0x640 [ 1862.686630] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1862.691855] RIP: 0033:0x45ca29 [ 1862.695308] RSP: 002b:00007face659ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1862.703024] RAX: ffffffffffffffda RBX: 00000000004e0d00 RCX: 000000000045ca29 [ 1862.710299] RDX: 00000000200000c0 RSI: 0000000000000008 RDI: 00007face657a000 [ 1862.717726] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1862.725221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 1862.732497] R13: 00000000000001fb R14: 00000000004c4446 R15: 00007face659f6d4 10:46:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x8400) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x2f, 0x0, r1}) 10:46:49 executing program 1 (fault-call:6 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:49 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = socket(0x29, 0x800, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x404c084}, 0x4800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:49 executing program 0: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$BLKGETSIZE64(r0, 0x127a, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000000)={0x8001008, 0x81, 0x98bbb637ceb1366b}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x18d042, 0x0) mknod(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="00000000f6ffffff280012002c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000024000705000000000000000000001f00", @ANYRES32, @ANYBLOB="00000400f1ffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@delchain={0x3c, 0x28, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0x0, 0xffff}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd72002800010000008469fac31eb485c908000300", @ANYRES32=0x0, @ANYBLOB="05002a0001000000050033000000000008000b00ffffffff0800340005000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000801) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x8000000200000402, 0x800007f, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, &(0x7f000000a000)) r2 = open(&(0x7f0000000600)='./bus\x00', 0x22, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x127a, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) syz_genetlink_get_family_id$gtp(0x0) [ 1862.865539] FAULT_INJECTION: forcing a failure. [ 1862.865539] name failslab, interval 1, probability 0, space 0, times 0 [ 1862.882193] CPU: 1 PID: 30039 Comm: syz-executor.1 Not tainted 4.14.181-syzkaller #0 [ 1862.890284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1862.899651] Call Trace: [ 1862.902260] dump_stack+0x1b2/0x283 [ 1862.906776] should_fail.cold+0x10a/0x154 [ 1862.910962] ? mempool_free+0x1d0/0x1d0 [ 1862.914947] should_failslab+0xd6/0x130 [ 1862.918928] kmem_cache_alloc+0x40/0x3c0 [ 1862.923043] ? mempool_free+0x1d0/0x1d0 [ 1862.926753] cgroup: cgroup2: unknown option "" [ 1862.927631] mempool_alloc+0x111/0x2d0 [ 1862.927644] ? remove_element.isra.0+0x1b0/0x1b0 [ 1862.927655] ? HARDIRQ_verbose+0x10/0x10 [ 1862.927675] bio_alloc_bioset+0x352/0x640 [ 1862.927689] ? bvec_alloc+0x2d0/0x2d0 [ 1862.927704] ? iov_iter_alignment+0x153/0x670 [ 1862.957643] ? iov_iter_npages+0x17b/0x7b0 [ 1862.961909] blkdev_direct_IO+0x2a2/0xe70 [ 1862.966187] ? current_time+0x16/0xb0 [ 1862.970009] ? __blkdev_direct_IO_simple+0xa50/0xa50 [ 1862.975120] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1862.980136] ? __mark_inode_dirty+0x17d/0x1040 [ 1862.984725] ? put_itimerspec64+0x190/0x190 [ 1862.989048] ? preempt_count_add+0xaf/0x170 [ 1862.993370] ? filemap_range_has_page+0x9e/0x2c0 [ 1862.998221] ? find_get_pages_range+0x9b0/0x9b0 [ 1863.002915] ? generic_update_time+0x1b0/0x270 [ 1863.007592] ? preempt_count_add+0xaf/0x170 [ 1863.011916] ? __mnt_drop_write+0x40/0x70 [ 1863.016070] generic_file_direct_write+0x1df/0x420 [ 1863.021010] __generic_file_write_iter+0x2a5/0x590 [ 1863.025948] blkdev_write_iter+0x1e8/0x3a0 [ 1863.030292] ? check_disk_change+0x120/0x120 [ 1863.034731] ? selinux_file_permission+0x7a/0x440 [ 1863.038317] cgroup: cgroup2: unknown option "" [ 1863.039843] ? security_file_permission+0x82/0x1e0 [ 1863.039857] ? rw_verify_area+0xe1/0x290 [ 1863.053488] aio_write+0x2ba/0x4f0 [ 1863.057391] ? trace_hardirqs_on+0x10/0x10 [ 1863.061632] ? aio_read+0x300/0x300 [ 1863.065280] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 1863.070225] ? lock_acquire+0x170/0x3f0 [ 1863.074194] ? lock_downgrade+0x6e0/0x6e0 [ 1863.078350] do_io_submit+0x930/0x1400 [ 1863.082243] ? aio_write+0x4f0/0x4f0 [ 1863.086047] ? vfs_write+0x319/0x4d0 [ 1863.089788] ? SyS_read+0x210/0x210 [ 1863.093670] ? SyS_clock_settime+0x1a0/0x1a0 [ 1863.098072] ? SyS_io_destroy+0x300/0x300 [ 1863.102227] ? do_syscall_64+0x1d5/0x640 [ 1863.106299] do_syscall_64+0x1d5/0x640 [ 1863.110296] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1863.115737] RIP: 0033:0x45ca29 [ 1863.119098] RSP: 002b:00007face659ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1863.126808] RAX: ffffffffffffffda RBX: 00000000004e0d00 RCX: 000000000045ca29 [ 1863.134073] RDX: 00000000200000c0 RSI: 0000000000000008 RDI: 00007face657a000 [ 1863.141450] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1863.148733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 1863.156239] R13: 00000000000001fb R14: 00000000004c4446 R15: 00007face659f6d4 [ 1863.164832] audit: type=1800 audit(1590490009.155:79): pid=30044 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16434 res=0 10:46:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8001, 0x4e4401) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000440)="b9800000c00f3235000800000f300fba7af505c4a2cdaa8600000000c7442400479f1dd5c744240206000000c7442406000000000f011424b9b60300000f3266ba2000b804000000ef360f07d112c462293d5c8f00c4a1b1598f00800000", 0x5e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x11c000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) 10:46:49 executing program 2: prctl$PR_CAPBSET_DROP(0x18, 0xe) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc03, 0x0, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1863.202678] audit: type=1800 audit(1590490009.155:80): pid=30049 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="syz-executor.0" name="file0" dev="sda1" ino=16434 res=0 10:46:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x40280, 0x0) read$dsp(r3, &(0x7f0000000200)=""/3, 0x3) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) getsockopt$inet6_dccp_int(r3, 0x21, 0x3, &(0x7f0000000240), &(0x7f00000002c0)=0x4) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000000c0)={0xa00000, 0x5, 0xffff95eb, r2, 0x0, &(0x7f0000000080)={0x990afb, 0x7, [], @ptr=0x100000001}}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4138ae84, &(0x7f0000000280)={0x0, 0x0, [0x0, 0xfffff000, 0x0, 0x8, 0xfdfdffff]}) 10:46:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0, &(0x7f00000000c0)={0x1a, 0x20, 0x2, 0x10, 0x9, 0x0, @remote}, 0x10) chdir(&(0x7f0000000280)='./file0\x00') r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x208200) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f00000002c0)={@fixed={[], 0x11}, 0x4d0, 0x2, 0xd19, 0xb4, 0x0, "54db14c2cc25f723213e927bbe3d6e6cd184619cc9a616e96818bfadeff4aca5a5d8467714fdd3be4fa543233d0db03a13f4ead9a503c26ca01e4d5163ecc009c83c2efb9b60ef4bc13bbef4b988046ff56924f684afa31dfe5a94436ad2e6b4d795c8a89f3ad1f2cb9212b9d32daf5c677da6a15d32e6f9214a0abaa4dd03d4"}) r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) accept(r2, &(0x7f00000001c0)=@x25={0x9, @remote}, &(0x7f0000000000)=0x80) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) 10:46:50 executing program 1 (fault-call:6 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) 10:46:50 executing program 0: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) munlockall() r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000040)=0x14) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) write$ppp(r3, &(0x7f00000001c0)="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", 0x1000) 10:46:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) r1 = open(&(0x7f0000000000)='./file0\x00', 0x210040, 0x10) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r4 = dup(r3) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r4, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000240)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x6c, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3a}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000001}, 0x8001) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r5, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x110, r6, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x81}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x82c}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x66}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x14}, 0x20000011) [ 1863.915975] FAULT_INJECTION: forcing a failure. [ 1863.915975] name failslab, interval 1, probability 0, space 0, times 0 [ 1863.954968] CPU: 1 PID: 30085 Comm: syz-executor.1 Not tainted 4.14.181-syzkaller #0 10:46:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ff, 0xfffffffffffffffe}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) [ 1863.962887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1863.972251] Call Trace: [ 1863.974848] dump_stack+0x1b2/0x283 [ 1863.978488] should_fail.cold+0x10a/0x154 [ 1863.982654] ? mempool_free+0x1d0/0x1d0 [ 1863.986635] should_failslab+0xd6/0x130 [ 1863.990609] kmem_cache_alloc+0x40/0x3c0 [ 1863.994676] ? mempool_free+0x1d0/0x1d0 [ 1863.998661] mempool_alloc+0x111/0x2d0 [ 1864.002564] ? remove_element.isra.0+0x1b0/0x1b0 [ 1864.007326] ? remove_element.isra.0+0x1b0/0x1b0 [ 1864.012090] ? HARDIRQ_verbose+0x10/0x10 [ 1864.016165] bvec_alloc+0xcc/0x2d0 [ 1864.019794] bio_alloc_bioset+0x3fa/0x640 [ 1864.023947] ? bvec_alloc+0x2d0/0x2d0 [ 1864.027755] ? iov_iter_alignment+0x153/0x670 [ 1864.032269] blkdev_direct_IO+0x2a2/0xe70 [ 1864.036419] ? current_time+0x16/0xb0 [ 1864.040243] ? __blkdev_direct_IO_simple+0xa50/0xa50 [ 1864.045350] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1864.050462] ? __mark_inode_dirty+0x17d/0x1040 [ 1864.055043] ? put_itimerspec64+0x190/0x190 [ 1864.059364] ? preempt_count_add+0xaf/0x170 [ 1864.063686] ? filemap_range_has_page+0x9e/0x2c0 [ 1864.068475] ? find_get_pages_range+0x9b0/0x9b0 [ 1864.073231] ? generic_update_time+0x1b0/0x270 [ 1864.077823] ? preempt_count_add+0xaf/0x170 [ 1864.082145] ? __mnt_drop_write+0x40/0x70 [ 1864.086301] generic_file_direct_write+0x1df/0x420 [ 1864.091237] __generic_file_write_iter+0x2a5/0x590 [ 1864.096199] blkdev_write_iter+0x1e8/0x3a0 [ 1864.100439] ? check_disk_change+0x120/0x120 [ 1864.104936] ? selinux_file_permission+0x7a/0x440 [ 1864.109784] ? security_file_permission+0x82/0x1e0 [ 1864.114721] ? rw_verify_area+0xe1/0x290 [ 1864.119134] aio_write+0x2ba/0x4f0 [ 1864.122672] ? trace_hardirqs_on+0x10/0x10 [ 1864.126913] ? aio_read+0x300/0x300 [ 1864.130541] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 1864.135511] ? lock_acquire+0x170/0x3f0 [ 1864.139487] ? lock_downgrade+0x6e0/0x6e0 [ 1864.144431] do_io_submit+0x930/0x1400 [ 1864.148344] ? aio_write+0x4f0/0x4f0 [ 1864.152066] ? vfs_write+0x319/0x4d0 [ 1864.155894] ? SyS_read+0x210/0x210 [ 1864.159521] ? SyS_clock_settime+0x1a0/0x1a0 [ 1864.163931] ? SyS_io_destroy+0x300/0x300 [ 1864.168082] ? do_syscall_64+0x1d5/0x640 [ 1864.172138] do_syscall_64+0x1d5/0x640 [ 1864.176032] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1864.181218] RIP: 0033:0x45ca29 [ 1864.184488] RSP: 002b:00007face659ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1864.192540] RAX: ffffffffffffffda RBX: 00000000004e0d00 RCX: 000000000045ca29 [ 1864.199840] RDX: 00000000200000c0 RSI: 0000000000000008 RDI: 00007face657a000 [ 1864.208328] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 10:46:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8001, 0x4e4401) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000440)="b9800000c00f3235000800000f300fba7af505c4a2cdaa8600000000c7442400479f1dd5c744240206000000c7442406000000000f011424b9b60300000f3266ba2000b804000000ef360f07d112c462293d5c8f00c4a1b1598f00800000", 0x5e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x11c000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) [ 1864.215606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 1864.222910] R13: 00000000000001fb R14: 00000000004c4446 R15: 00007face659f6d4 10:46:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) mknod(&(0x7f0000000000)='./file0\x00', 0x800, 0x1) 10:46:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x40280, 0x0) read$dsp(r3, &(0x7f0000000200)=""/3, 0x3) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) getsockopt$inet6_dccp_int(r3, 0x21, 0x3, &(0x7f0000000240), &(0x7f00000002c0)=0x4) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000000c0)={0xa00000, 0x5, 0xffff95eb, r2, 0x0, &(0x7f0000000080)={0x990afb, 0x7, [], @ptr=0x100000001}}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4138ae84, &(0x7f0000000280)={0x0, 0x0, [0x0, 0xfffff000, 0x0, 0x8, 0xfdfdffff]}) 10:46:50 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r1, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'bond_slave_0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r3 = dup(r2) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r3, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r8 = dup(r7) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r8, 0x0) ioctl$VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000100)={0x3, 0x4, 0x4, 0x400000, 0x3, {r4, r5/1000+60000}, {0x5, 0xc, 0x1, 0x80, 0x40, 0x7f, "64c95c1f"}, 0x2, 0x4, @fd=r8, 0x6}) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) fcntl$setpipe(r9, 0x407, 0x4) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f}) 10:46:50 executing program 1 (fault-call:6 fault-nth:3): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) [ 1864.644236] FAULT_INJECTION: forcing a failure. [ 1864.644236] name failslab, interval 1, probability 0, space 0, times 0 [ 1864.656174] CPU: 0 PID: 30132 Comm: syz-executor.1 Not tainted 4.14.181-syzkaller #0 [ 1864.664173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1864.673898] Call Trace: [ 1864.676604] dump_stack+0x1b2/0x283 [ 1864.680252] should_fail.cold+0x10a/0x154 [ 1864.684440] should_failslab+0xd6/0x130 [ 1864.688426] kmem_cache_alloc_node+0x54/0x400 [ 1864.692999] create_task_io_context+0x2a/0x3c0 [ 1864.698987] generic_make_request_checks+0x1605/0x1a20 [ 1864.704714] ? get_user_pages_fast+0x1b3/0x2b0 [ 1864.709306] ? part_round_stats+0x5c0/0x5c0 [ 1864.713630] ? __get_user_pages_fast+0x2d0/0x2d0 [ 1864.718415] ? mempool_free+0x1d0/0x1d0 [ 1864.724997] ? mempool_alloc+0x11e/0x2d0 [ 1864.729153] generic_make_request+0x6b/0x850 [ 1864.733574] ? blk_queue_exit+0x1d0/0x1d0 [ 1864.737761] submit_bio+0x234/0x390 [ 1864.741396] ? generic_make_request+0x850/0x850 [ 1864.746071] ? zero_fill_bio+0x380/0x380 [ 1864.750133] ? iov_iter_alignment+0x153/0x670 [ 1864.754749] ? iov_iter_npages+0x17b/0x7b0 [ 1864.759082] blkdev_direct_IO+0x5e0/0xe70 [ 1864.763230] ? current_time+0x16/0xb0 [ 1864.767037] ? kiocb_free+0xa0/0xa0 [ 1864.770706] ? __blkdev_direct_IO_simple+0xa50/0xa50 [ 1864.775844] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1864.780862] ? __mark_inode_dirty+0x17d/0x1040 [ 1864.785443] ? put_itimerspec64+0x190/0x190 [ 1864.789775] ? preempt_count_add+0xaf/0x170 [ 1864.794098] ? filemap_range_has_page+0x9e/0x2c0 [ 1864.798958] ? find_get_pages_range+0x9b0/0x9b0 [ 1864.803631] ? generic_update_time+0x1b0/0x270 [ 1864.808228] ? preempt_count_add+0xaf/0x170 [ 1864.812668] ? __mnt_drop_write+0x40/0x70 [ 1864.816917] generic_file_direct_write+0x1df/0x420 [ 1864.822072] __generic_file_write_iter+0x2a5/0x590 [ 1864.827022] blkdev_write_iter+0x1e8/0x3a0 [ 1864.831267] ? check_disk_change+0x120/0x120 [ 1864.835686] ? selinux_file_permission+0x7a/0x440 [ 1864.840830] ? security_file_permission+0x82/0x1e0 [ 1864.845769] ? rw_verify_area+0xe1/0x290 [ 1864.849845] aio_write+0x2ba/0x4f0 [ 1864.853409] ? trace_hardirqs_on+0x10/0x10 [ 1864.857650] ? aio_read+0x300/0x300 [ 1864.861274] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 1864.866215] ? lock_acquire+0x170/0x3f0 [ 1864.870196] ? lock_downgrade+0x6e0/0x6e0 [ 1864.874355] do_io_submit+0x930/0x1400 [ 1864.878255] ? aio_write+0x4f0/0x4f0 [ 1864.881977] ? vfs_write+0x319/0x4d0 [ 1864.885694] ? SyS_read+0x210/0x210 [ 1864.889406] ? SyS_clock_settime+0x1a0/0x1a0 [ 1864.893813] ? SyS_io_destroy+0x300/0x300 [ 1864.898137] ? do_syscall_64+0x1d5/0x640 [ 1864.902197] do_syscall_64+0x1d5/0x640 [ 1864.906208] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1864.911395] RIP: 0033:0x45ca29 [ 1864.914582] RSP: 002b:00007face659ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1864.922293] RAX: ffffffffffffffda RBX: 00000000004e0d00 RCX: 000000000045ca29 [ 1864.929564] RDX: 00000000200000c0 RSI: 0000000000000008 RDI: 00007face657a000 [ 1864.936831] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 10:46:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000d000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000000)="26fec53e360f015fd90f2096660f38216d9fc4c26906720066ba2100ed440f20c03509000000440f22c0b8010000000f01d9b9f20a00000f3266b8f4008ed0", 0x3f}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0xfff3) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0xfffffffe, 0x4) sendto$inet(r3, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) sendfile(0xffffffffffffffff, r3, &(0x7f0000000080)=0x2, 0x101) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x9d) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000140)={0x2, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 1864.944112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 1864.951382] R13: 00000000000001fb R14: 00000000004c4446 R15: 00007face659f6d4 [ 1865.073227] audit: type=1804 audit(1590490011.345:81): pid=30134 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir507100555/syzkaller.2eofDg/2346/file0/bus" dev="sda1" ino=16445 res=1 10:46:51 executing program 5: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x8003, 0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) syz_mount_image$xfs(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000240)='Y`', 0x2, 0x1}, {&(0x7f0000000580), 0x0, 0x3ff}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x6f}], 0x22080, &(0x7f0000000800)=ANY=[@ANYBLOB='dax,smackfsroot=!,uid', @ANYRESDEC=0x0, @ANYBLOB=',appraise_type=imasig,smackfshat=,fowner>', @ANYRESDEC, @ANYBLOB="2c6f62646e2758b4b263c95f752c"]) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x400, 0x0) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) fdatasync(r3) [ 1865.122020] audit: type=1804 audit(1590490011.345:82): pid=30133 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir507100555/syzkaller.2eofDg/2346/file0/bus" dev="sda1" ino=16445 res=1 10:46:51 executing program 3: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x46802) dup(0xffffffffffffffff) io_setup(0x100000000000c333, &(0x7f0000000180)=0x0) open(0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) accept$inet(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10) ftruncate(r0, 0x48280) r3 = socket$inet6(0xa, 0x400000000001, 0x0) close(0xffffffffffffffff) r4 = open(0x0, 0x143042, 0x0) sendfile(r3, r4, 0x0, 0x200fff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1f, 0x6, 0x0, 0x0, 0x7f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x45, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 10:46:51 executing program 1 (fault-call:6 fault-nth:4): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) [ 1865.159054] audit: type=1804 audit(1590490011.375:83): pid=30133 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir507100555/syzkaller.2eofDg/2346/file0/bus" dev="sda1" ino=16445 res=1 [ 1865.206944] audit: type=1804 audit(1590490011.475:84): pid=30151 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir972608049/syzkaller.8ww3Xc/2839/bus" dev="sda1" ino=16442 res=1 [ 1865.236736] FAULT_INJECTION: forcing a failure. [ 1865.236736] name failslab, interval 1, probability 0, space 0, times 0 [ 1865.255981] CPU: 1 PID: 30155 Comm: syz-executor.1 Not tainted 4.14.181-syzkaller #0 [ 1865.263902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1865.273344] Call Trace: [ 1865.275947] dump_stack+0x1b2/0x283 [ 1865.279589] should_fail.cold+0x10a/0x154 [ 1865.283833] ? mempool_free+0x1d0/0x1d0 [ 1865.287835] should_failslab+0xd6/0x130 [ 1865.291797] kmem_cache_alloc+0x40/0x3c0 [ 1865.296390] ? mempool_free+0x1d0/0x1d0 [ 1865.300716] mempool_alloc+0x111/0x2d0 [ 1865.304599] ? remove_element.isra.0+0x1b0/0x1b0 [ 1865.309427] ? blk_queue_exit+0x1d0/0x1d0 [ 1865.313578] bio_alloc_bioset+0x352/0x640 [ 1865.317894] ? bvec_alloc+0x2d0/0x2d0 [ 1865.321705] ? iov_iter_alignment+0x153/0x670 [ 1865.326238] ? iov_iter_npages+0x17b/0x7b0 [ 1865.330573] blkdev_direct_IO+0x609/0xe70 [ 1865.334869] ? current_time+0x16/0xb0 [ 1865.338831] ? kiocb_free+0xa0/0xa0 [ 1865.342536] ? __blkdev_direct_IO_simple+0xa50/0xa50 [ 1865.347663] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1865.353060] ? __mark_inode_dirty+0x17d/0x1040 [ 1865.357657] ? put_itimerspec64+0x190/0x190 [ 1865.362001] ? preempt_count_add+0xaf/0x170 [ 1865.366483] ? filemap_range_has_page+0x9e/0x2c0 [ 1865.371231] ? find_get_pages_range+0x9b0/0x9b0 [ 1865.375890] ? generic_update_time+0x1b0/0x270 [ 1865.380546] ? preempt_count_add+0xaf/0x170 [ 1865.384853] ? __mnt_drop_write+0x40/0x70 [ 1865.388998] generic_file_direct_write+0x1df/0x420 [ 1865.394105] __generic_file_write_iter+0x2a5/0x590 [ 1865.399034] blkdev_write_iter+0x1e8/0x3a0 [ 1865.403292] ? check_disk_change+0x120/0x120 [ 1865.407692] ? selinux_file_permission+0x7a/0x440 [ 1865.412522] ? security_file_permission+0x82/0x1e0 [ 1865.417444] ? rw_verify_area+0xe1/0x290 [ 1865.421597] aio_write+0x2ba/0x4f0 [ 1865.425215] ? trace_hardirqs_on+0x10/0x10 [ 1865.429441] ? aio_read+0x300/0x300 [ 1865.433080] ? perf_trace_lock_acquire+0x10d/0x4b0 [ 1865.438120] ? lock_acquire+0x170/0x3f0 [ 1865.442081] ? lock_downgrade+0x6e0/0x6e0 [ 1865.446221] do_io_submit+0x930/0x1400 [ 1865.450131] ? aio_write+0x4f0/0x4f0 [ 1865.453925] ? vfs_write+0x319/0x4d0 [ 1865.457981] ? SyS_read+0x210/0x210 [ 1865.461597] ? SyS_clock_settime+0x1a0/0x1a0 [ 1865.466034] ? SyS_io_destroy+0x300/0x300 [ 1865.470175] ? do_syscall_64+0x1d5/0x640 [ 1865.474939] do_syscall_64+0x1d5/0x640 [ 1865.478981] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 1865.484167] RIP: 0033:0x45ca29 [ 1865.487432] RSP: 002b:00007face659ec78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1865.495251] RAX: ffffffffffffffda RBX: 00000000004e0d00 RCX: 000000000045ca29 [ 1865.502598] RDX: 00000000200000c0 RSI: 0000000000000008 RDI: 00007face657a000 [ 1865.510383] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1865.517846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 1865.525131] R13: 00000000000001fb R14: 00000000004c4446 R15: 00007face659f6d4 10:46:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x40280, 0x0) read$dsp(r3, &(0x7f0000000200)=""/3, 0x3) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) sendto$inet(r2, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r2, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) getsockopt$inet6_dccp_int(r3, 0x21, 0x3, &(0x7f0000000240), &(0x7f00000002c0)=0x4) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000000c0)={0xa00000, 0x5, 0xffff95eb, r2, 0x0, &(0x7f0000000080)={0x990afb, 0x7, [], @ptr=0x100000001}}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4138ae84, &(0x7f0000000280)={0x0, 0x0, [0x0, 0xfffff000, 0x0, 0x8, 0xfdfdffff]}) [ 1865.568176] print_req_error: I/O error, dev loop5, sector 0 10:46:51 executing program 1 (fault-call:6 fault-nth:5): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x0, 0x30051, r2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nullb0\x00', 0x4000000044882, 0x0) io_setup(0x101, &(0x7f00000004c0)=0x0) io_submit(r4, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r3, &(0x7f0000000000)="98", 0x3e80000000}]) [ 1865.712860] FAULT_INJECTION: forcing a failure. [ 1865.712860] name failslab, interval 1, probability 0, space 0, times 0 [ 1865.755130] CPU: 0 PID: 30172 Comm: syz-executor.1 Not tainted 4.14.181-syzkaller #0 [ 1865.763069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1865.772713] Call Trace: [ 1865.775343] dump_stack+0x1b2/0x283 [ 1865.779084] should_fail.cold+0x10a/0x154 [ 1865.783575] ? mempool_free+0x1d0/0x1d0 [ 1865.788508] should_failslab+0xd6/0x130 [ 1865.792929] kmem_cache_alloc+0x40/0x3c0 [ 1865.797102] ? mempool_free+0x1d0/0x1d0 [ 1865.801362] mempool_alloc+0x111/0x2d0 [ 1865.805455] ? remove_element.isra.0+0x1b0/0x1b0 [ 1865.810732] ? remove_element.isra.0+0x1b0/0x1b0 [ 1865.815818] ? blk_queue_exit+0x1d0/0x1d0 [ 1865.820240] bvec_alloc+0xcc/0x2d0 [ 1865.824053] bio_alloc_bioset+0x3fa/0x640 [ 1865.828620] ? bvec_alloc+0x2d0/0x2d0 [ 1865.832632] ? iov_iter_alignment+0x153/0x670 [ 1865.837160] blkdev_direct_IO+0x609/0xe70 [ 1865.842341] ? current_time+0x16/0xb0 [ 1865.846168] ? kiocb_free+0xa0/0xa0 [ 1865.850095] ? __blkdev_direct_IO_simple+0xa50/0xa50 [ 1865.855232] ? rcu_read_lock_sched_held+0x10a/0x130 [ 1865.860269] ? __mark_inode_dirty+0x17d/0x1040 [ 1865.865094] ? put_itimerspec64+0x190/0x190 [ 1865.869519] ? preempt_count_add+0xaf/0x170 [ 1865.873874] ? filemap_range_has_page+0x9e/0x2c0 [ 1865.878937] ? find_get_pages_range+0x9b0/0x9b0 [ 1865.883758] ? generic_update_time+0x1b0/0x270 [ 1865.888452] ? preempt_count_add+0xaf/0x170 [ 1865.895074] ? __mnt_drop_write+0x40/0x70 [ 1865.899348] generic_file_direct_write+0x1df/0x420 10:46:52 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000001c0)={0x20a927, 0x1f, 0x0, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f000000a000/0x200000)=nil, 0x200000, 0x1000003, 0x30051, r2, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000015c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="07170000000000005c4b4fccd90f000016000000050009d66ae3d76a9a40093e116edcfd650a2496a4b77722b7a30ed8de44be2ae8b9e7afbb93b261b8741f37e21a495152cc2fec6b32e9cd68cda8b18ea312b2eaee0853657ed91124a4cb6dfc37c8fbacd040399d18590a27f01f7e91f28cd6ce52144a7b4e98002842e45e922a01f260e1863372750711f1bde1a952d9ac2c5e577d23c5d924cf088b254d6788c44b2e5cf49e08ce34d1db23d2a282a28bd5853dc5fe6170699c182fe3d39fcaad480748686954016409294c3b"], 0x38}}, 0x0) sendmsg$SOCK_DESTROY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x113c, 0x15, 0x10, 0x70bd28, 0x25dfdbfb, {0x1d, 0x80}, [@INET_DIAG_REQ_BYTECODE={0x39, 0x1, "caa2535f6a0d4c9f37420d676d8c7e025c931dfb7f45b0bc752e2e92447c1312a57f19e14719932d02c77189e1ea64e0f49f6edd9a"}, @INET_DIAG_REQ_BYTECODE={0x7, 0x1, "d33cd2"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "f0754a8eedd6b2ad1ce01b26d86adee75f569c41f7ba14f9df"}, @INET_DIAG_REQ_BYTECODE={0x24, 0x1, "dac9e7818422590c1d3fa4372fbf4822377c3944bd04d2f5e490428e2a7412d7"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "9f545f719da0193dc4772947cf1ca4f8f7be0c4ad7aa76b75729d501cc8e2bb6f479e490cfafce40376308f15d8749f63dd45a19dcc982c99d5ccec093deb72cd783eeaef2e22524368739441092860fc508da1dd7b0df7d04312dd40e9c0b22add0e00629c59bab94f21760d951d0"}, @INET_DIAG_REQ_BYTECODE={0x22, 0x1, "0fb7120678b12a28cca10ded68258cac199836576a6e63fbcd879d2bbb04"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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