[ 36.739187] audit: type=1800 audit(1567014201.019:32): pid=7381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2450 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Start[ 37.455069] audit: type=1800 audit(1567014201.829:33): pid=7381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 ing file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.162' (ECDSA) to the list of known hosts. 2019/08/28 17:43:31 fuzzer started syzkaller login: [ 47.493103] kauditd_printk_skb: 2 callbacks suppressed [ 47.493117] audit: type=1400 audit(1567014211.869:36): avc: denied { map } for pid=7565 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/08/28 17:43:34 dialing manager at 10.128.0.105:38479 2019/08/28 17:43:34 syscalls: 2482 2019/08/28 17:43:34 code coverage: enabled 2019/08/28 17:43:34 comparison tracing: enabled 2019/08/28 17:43:34 extra coverage: extra coverage is not supported by the kernel 2019/08/28 17:43:34 setuid sandbox: enabled 2019/08/28 17:43:34 namespace sandbox: enabled 2019/08/28 17:43:34 Android sandbox: /sys/fs/selinux/policy does not exist 2019/08/28 17:43:34 fault injection: enabled 2019/08/28 17:43:34 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/08/28 17:43:34 net packet injection: enabled 2019/08/28 17:43:34 net device setup: enabled 17:44:58 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0xffff, @mcast1, 0x1}}, [0xfff, 0x9, 0x1, 0x9, 0x5, 0x7, 0x85, 0x0, 0x6, 0x7, 0x1, 0x800, 0x4f4, 0x5, 0xb509]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r1, 0x4) get_mempolicy(&(0x7f00000001c0), &(0x7f0000000200), 0x20, &(0x7f0000ffe000/0x1000)=nil, 0x4) write$FUSE_POLL(r0, &(0x7f0000000240)={0x18, 0x0, 0x5, {0x5}}, 0x18) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000280)={0xe, 0x4, 0x300000}) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={r1, 0x1, 0x7, 0xffffffffffffff00}, 0x10) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x77, 0x4}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000400)={0x6, 0x0, 0x10000, 0x7f}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000440)={0x88, r2}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000480)={r1, 0x10000, 0x5, [0x81, 0x3ff, 0x98f, 0x0, 0x1]}, &(0x7f00000004c0)=0x12) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000500)={0x97ce4ef19c5533cf, 0x103, 0x0, {0x7ff, 0x1ff, 0x5, 0x1}}) ioctl$SIOCRSSCAUSE(r0, 0x89e1, &(0x7f0000000540)=0x1f3) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=r1, &(0x7f00000005c0)=0x4) write$smack_current(r0, &(0x7f0000000600)='veth0_to_hsr\x00', 0xd) bind$x25(r0, &(0x7f0000000640)={0x9, @remote={[], 0x0}}, 0x12) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000680)={0x1b, 0x3}) getsockopt$nfc_llcp(r0, 0x118, 0x3, &(0x7f00000006c0)=""/156, 0x9c) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000780)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f00000007c0)=0xc, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000800)={0x6, 0xa4a9, 0x0, 'queue0\x00', 0x7ff}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000a40)={&(0x7f00000008c0), 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x90, r4, 0x920, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000a80)=@assoc_id=r1, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000ac0)={0x7fffffff, 0xffffffff, 0x3, 'queue1\x00', 0x7}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000b80)='vboxnet1wlan1\x00') ioctl$TIOCLINUX6(r3, 0x541c, &(0x7f0000000bc0)={0x6, 0x8}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c00)='TIPCv2\x00') socket$inet6(0xa, 0x5, 0x1) [ 134.211090] audit: type=1400 audit(1567014298.589:37): avc: denied { map } for pid=7582 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=14031 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 134.302864] IPVS: ftp: loaded support on port[0] = 21 17:44:58 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000040)=""/195) sendmsg$nl_crypto(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@getstat={0xe0, 0x15, 0x200, 0x70bd27, 0x25dfdbfc, {{'rfc7539(xts(twofish-generic),sha224-avx2)\x00'}, [], [], 0x400, 0x400}, ["", "", "", ""]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x801) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000300)="f407ada4c048775ea9fa7292fef673fa32bc3070bebbb8915c637575fbb88a9990dc283b9fc03546", 0x28) sendmsg$nl_route_sched(r0, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000380)=@newtaction={0x47c, 0x30, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{0x124, 0x1, @m_nat={0x120, 0xe, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1e, 0x6, 0x4, 0x7}, @remote, @broadcast, 0xff, 0x1}}}, {0xe4, 0x6, "59a7d53b898e19791b45c4e53665a6f1719f61dbf1975eabd55965bb0a1c7cbc5dc8debff4bd1f1a07ff8cb07a6ff288ded760f870b52a87ac8c8ec2ef64cb1dcbf6cefb59a84ae70aad122af0057a01cd1bcb004522ae31e15fb8241638883740b75a517edd4cf58b6d97f05b136d10af5f24de1541472c5b3a0193ace30c318b63596621f6c819b7c58e71cdd17551f3f549780daccdbf78b910a0537b959bb6ce631682cbe08bfe557fc0f7072cb778016e705e8227618aab955387b098e3b5252fa6afbea40bfe65e0cfc9ff2cbb57f888d453d73eaa53bdaca20d51f5"}}}}, {0x124, 0x1, @m_nat={0x120, 0xe, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, @TCA_NAT_PARMS={0x28, 0x1, {{0x200, 0x7f, 0x1, 0x0, 0x5}, @remote, @multicast1, 0xff}}}, {0xe4, 0x6, "d71ed5bcf8258d2352afe59d43ec178062a88e478a022dca6b4d837a71d66ab6e25b0479f71fc45a7ad457ba15c091613d628a9c338a0d2d9db1dd9baf57e2d451a72d87a4c582610912b84c5682dd9a20017c678cd9e446b53a9eeae02b7334e95d22e067c889ec3dc18f91e44d5a3f8fe7e957b609d5faefdc39428fc7514a46dba5efed59dbb40fb7682fda82b715e46509074ab097885ec90a587a3f3c00ac84088f64f43b755120d6c8c5764fab21d4c38b6ab41bca8807c5c108cb24ecdc83698d02de61e73f05db38f5a1ed82fc8de97af25ef2974eca0159a30b9427"}}}}, {0x5c, 0x1, @m_skbedit={0x58, 0x1c, {{0xc, 0x1, 'skbedit\x00'}, {0x14, 0x2, [@TCA_SKBEDIT_QUEUE_MAPPING={0x8, 0x4, 0x40}, @TCA_SKBEDIT_PTYPE={0x8, 0x7, 0x4}]}, {0x30, 0x6, "4aa44dc077bd9688bdb6970a851d96b915e92ab3e7c4ef0de548b5b3c72c97728c49e915ae51e399bb68351b"}}}}, {0xa0, 0x1, @m_skbmod={0x9c, 0x20, {{0xc, 0x1, 'skbmod\x00'}, {0x70, 0x2, [@TCA_SKBMOD_DMAC={0xc, 0x3, @local}, @TCA_SKBMOD_DMAC={0xc}, @TCA_SKBMOD_SMAC={0xc, 0x4, @dev={[], 0x20}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x100000000, 0x6, 0x7, 0x17b}, 0xe}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xf60, 0x0, 0x2, 0xffffffffffffffff, 0x2}, 0x8}}]}, {0x18, 0x6, "7104429797ea53a7560d85964da3ee268dfa"}}}}, {0x124, 0x1, @m_simple={0x120, 0xb, {{0xc, 0x1, 'simple\x00'}, {0x5c, 0x2, [@TCA_DEF_DATA={0x8, 0x3, ':%\x00'}, @TCA_DEF_DATA={0x10, 0x3, '/dev/null\x00'}, @TCA_DEF_DATA={0x10, 0x3, '/dev/null\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1ff, 0x1, 0x7, 0x7439, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x8000, 0x8, 0x20000000, 0x4, 0x100000000}}]}, {0xb0, 0x6, "f2ab6f92ebc9609d0f726faaa9d8e2e50e6be77c1094ade326a6795b030107982c191269b3fb3c30759ded3d387b5aa309ebfe65821416e50ae04cc361bc865f0685d9397fde3f50e98ee6874ad00b0ad9cf6f802f447fbd899ef649ca65952828611a4597a3278502e0c4f5e8bdfabfc261246f30455f9953ab37043c349db9cb310cdc187d0dfc96d67645611b00ea2a6ab0aaecd44c2831b25fec8e2c1f745cacc1d00dbe67c9d8"}}}}]}, 0x47c}, 0x1, 0x0, 0x0, 0x8800}, 0xd0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000880)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000008c0)={r0}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000900)={0x3}) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000940)={0x1}, 0x4) timerfd_create(0x0, 0x80000) setsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000980)={@broadcast, @loopback}, 0x8) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f00000009c0)={0x0, 0xff, 0x301f}) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000a80)) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000ac0)={'HL\x00'}, &(0x7f0000000b00)=0x1e) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000b40)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000c40)=0xe8) getresgid(&(0x7f0000000c80)=0x0, &(0x7f0000000cc0)=0x0, &(0x7f0000000d00)) fchown(r1, r3, r4) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000d40)={0x6, "f389a3e0217294e7fc005bf324c874437428000703a53e8d65e9e5649f439968", 0x8, 0xf84, 0x1, 0x1, 0x1}) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000dc0), &(0x7f0000000e00)=0xb) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000e40)={0x1, 0xffffffffffff8000}) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000e80)=0x4b) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000ec0)=0x80) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000f00)={0x8, 0x0, 0x1, 0xe2c2}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000f40)={0x5, r6, 0x1, 0x2}) write$P9_RLINK(r0, &(0x7f0000000f80)={0x7, 0x47, 0x1}, 0x7) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000fc0)={0x0, 0x7}, &(0x7f0000001000)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001040)={r7, @in={{0x2, 0x4e20, @multicast1}}, 0x80000000, 0x400, 0x401, 0xfff, 0x44}, &(0x7f0000001100)=0x98) r8 = getpid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001140)={r8, r3, r5}, 0xc) [ 134.412467] chnl_net:caif_netlink_parms(): no params data found [ 134.506617] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.513415] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.520959] device bridge_slave_0 entered promiscuous mode [ 134.536035] IPVS: ftp: loaded support on port[0] = 21 [ 134.544346] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.555291] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.564263] device bridge_slave_1 entered promiscuous mode 17:44:59 executing program 2: r0 = dup(0xffffffffffffffff) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000000)=0x800, 0x4) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x3}) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000080)={0x4, 0xc40084, "8262a95860205345053925f3585b2fe626111263d0eb6a92", {0x8, 0xffffffffffff0001}, 0x8}) r1 = socket$inet(0x2, 0xa, 0x7fff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x1e8, r2, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x114, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x41}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x26}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x21}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MEDIA={0xc0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3dc8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x945a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffe0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x79987d8a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7aa3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x10}, 0x40) syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000003c0), &(0x7f0000000400)=0x4) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000440)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000540)={r3, &(0x7f0000000480)=""/169}) write$binfmt_misc(r1, &(0x7f0000000580)={'syz1', "e050d2c31a3faa67767a"}, 0xe) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000005c0), &(0x7f0000000600)=0x4) fremovexattr(r1, &(0x7f0000000640)=@known='security.apparmor\x00') ioctl$TIOCEXCL(r0, 0x540c) socket$xdp(0x2c, 0x3, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000680)={0x7, @capture={0x1000, 0x1, {0x0, 0x4}, 0x1000, 0x5}}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000780)={0x8, 0x15e2c151, 0x8000, 0x6, 0x7, 0x9, 0x9, 0x9, 0x0}, &(0x7f00000007c0)=0x20) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000800)={r4}, &(0x7f0000000840)=0x8) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000880)) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000008c0)={0xffff}) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000900)={0x4, 0xffff, 0x5, 0x3f}) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000940)={0x0, 0x5}) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000a80)={0xdeb6, 0x4, 0x6, 0x6, &(0x7f0000000980)=[{}, {}, {}, {}]}) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00'}, &(0x7f0000000b80)=0x44) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000bc0)='trusted.overlay.upper\x00', &(0x7f0000000c00)={0x0, 0xfb, 0x26, 0x1, 0xff, "7d5363d7c76f622405858f2ccecccd0c", "886d82de7b0105297bf2d42effc3ab6ba5"}, 0x26, 0x1) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c80)='TIPC\x00') sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10400010}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x4000000) write$vnet(r1, &(0x7f0000000e80)={0x1, {&(0x7f0000000d80)=""/13, 0xd, &(0x7f0000000dc0)=""/173, 0x2, 0x4}}, 0x68) init_module(&(0x7f0000000f00)='TIPC\x00', 0x5, &(0x7f0000000f40)=',:\xcblowlan1ppp1+@selfloem0usercpuset+md5sumwlan0user\x00') [ 134.620829] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 134.633119] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 134.738406] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 134.746092] team0: Port device team_slave_0 added [ 134.781869] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 134.791109] team0: Port device team_slave_1 added [ 134.801618] chnl_net:caif_netlink_parms(): no params data found [ 134.815448] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 134.823865] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 17:44:59 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xa) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000100), 0x2) syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0xf1d, 0x4, &(0x7f0000000440)=[{&(0x7f00000001c0)="f715150472a9c7dba631b308634cc413c2a2209ac6e8de5c996b1d7647df1dbaa56a4be3d1b2984cb3765ecf5feb5819719e2deb816e02992fd59a1b26c31e8b410e4d59c234728ef0b2802b51a90121ba8c513a772e4bee9013445ee2e11790475ffda67bd19045968b898613902f6d16584ce524c19828a6daf9fbd01da947405c13ac1a9a87f100cdb0d03a655dda22885bb012dd3d3dd3a8f772b07671d65cb7fcc90a7c879ce8333ad7a6a6624d9ee009ee0b73a46401fc70", 0xbb, 0x7}, {&(0x7f0000000280)="5f1562cb5f75b49a4ed87ad507476805a9b3ef8921b38d010e59dea6741b6af30fd58971cba6b43d7fcd3d758fd076a572efa40625ebdcab07db49c4ca115c78c39cdcd26c16ddbf16d2fb5c2a3baebdd9edc6fc77cadcf8b9e33d2508b437859b422c46ab930047ca94e63ebb3ecf221948ddb1d241ca9c9ae3c9001e300b7dbadd208063a295d1fd66093bdecf57e8fe358a3005d9fa2be57a35afb0cdde711c19eb7468f7d2b9c762558c529115810b36224ac99080b3d25e1dfa11894f73ba647f434224fb57efc7ea3a39970f9153c848142b4525d069d29ef1c6b506538bb624237a6b1d19ff352d52072101371e0a", 0xf2, 0xffff}, {&(0x7f0000000380)="d76bdb101828a4c04e5b061f3387fa3664c537cd4c2d16", 0x17, 0x1f}, {&(0x7f00000003c0)="f49ad12ae6539df9b09580dda628f22c4a173f0b3eab09504952dbaf924a7406eb22afa45a84676bb32ae17225714ef6cf0c6dc5a649831ea914c303360999d591a5f3484771c4e84e805598f9362794c0c269e8f4afefbdb8910c40dc7a2be9fc0547", 0x63, 0x15b3c0000}], 0x1000000, &(0x7f00000004c0)={[{@shortname_lower='shortname=lower'}, {@shortname_winnt='shortname=winnt'}, {@shortname_lower='shortname=lower'}, {@nonumtail='nnonumtail=1'}, {@numtail='nonumtail=0'}, {@shortname_lower='shortname=lower'}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '*\\*#-&%'}}, {@pcr={'pcr', 0x3d, 0x15}}, {@seclabel='seclabel'}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}]}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000580)={0xfffffffffffff001}, 0x1) bind$pptp(r0, &(0x7f00000005c0)={0x18, 0x2, {0x3, @multicast1}}, 0x1e) r1 = getuid() syz_mount_image$vfat(&(0x7f0000000600)='vfat\x00', &(0x7f0000000640)='./file1\x00', 0x40, 0x6, &(0x7f0000001a40)=[{&(0x7f0000000680)="1744e34e81ffde9adbd3caaa837b4895f7474581345dfd4d66597702e1182e5818dfab0593e0f948b1970082b5f59b4a9bc0cfbd5a8697667a36ee6829d418d9689d2074f70808b586d8e53a0fe969f01b6938c090ae498fda10172bdde3bc5e2353508a5f24bbac4e7e1ec95e520f836eddd80df8f1fb614d0a010e56a75315ce08dc2c5df7ca3961885f464ac0aab7a079cc7cedd9516ea10290156311f52c43adba5be6c6311ba83fdf8e38c814df336a3ca493be59b36e561de8a5c491716fcfaefaf70b413728ad5cd1492d84164dfdb1161914a9428ebbfc6219a1c14d33", 0xe1, 0x4}, {&(0x7f0000000780)="bc37247243f6fc7c5168d91d62a492754502939d46dd2131692c6df1f25d717a774d66e5c446c5ce6d69d6f8cf8d3500e4a5634a5e56d9669009d095f5eec17c90a87e7259d0df19935176bb97e7a9415cdcdc25521ec83a3c6275d611e53dbb89f4a10c82290a462c6fbf21ac16124a3a99d0d7fc915081c8864449d8b85309", 0x80, 0x3}, {&(0x7f0000000800)="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", 0x1000, 0x4}, {&(0x7f0000001800)="e7d46144ef12042982ebc54e520c62f6ab6c35dca89ea2c0e2aca0886ece1d9a5a49582463b85eafcb3f0fa6e573f85a5795e113ea413ac4ea7740be4a0f011414b75ab336cef7155d786aae8daa14f8b4171c3c5524a69e39168c84324390719a59d6b07fed4380d316b6f249a0c658eec5aa7cf699c0ed000e8b86f1653322c060ee0bc3e0c2a3cc3c552ebd6d335b5c3c995a3e", 0x95, 0x3}, {&(0x7f00000018c0)="9d45cbb4297388665e0ca6ac6aab1f23e4e34e628cd1e5a1c40d66a1ce9ed69b55582c8e639f0c17f911804744ef617253c35487dffe9bd7b49983c1a16be914c8d817fd1f15dd23f743", 0x4a, 0xfffffffffffffffb}, {&(0x7f0000001940)="ae2a96426979f9b3b747e4d7a8746d23004d5f7fdbd1a41c41c2ecd06a0717a8194898742014aad0d9767fede2ba321d486edf574e856d6783a54dc7aaff19d07bdb3ef47bfed336b6ea132a3b54719ec6611d148a43268da4579fd530b1627e0420fd6b667e9e2b102be58b4006211b27f9ab44f1e49d8b5ae31058048abe0df7382427995bd37d6dbaf44d4d29274fed1c451a62d5a883a21999aafa2740e28a66d161061e2e91424d4a1500117a35900f5b2e3538c97e9674a66bc7e29dff2c20f23163ebcffbf91213e0d33d21c2e221b12d", 0xd4, 0x4}], 0x1000, &(0x7f0000001b00)={[{@rodir='rodir'}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@rodir='rodir'}, {@nonumtail='nnonumtail=1'}, {@shortname_win95='shortname=win95'}, {@utf8='utf8=1'}], [{@smackfsdef={'smackfsdef', 0x3d, '&$)GPLsystemppp1vboxnet0%vboxnet0](!'}}, {@seclabel='seclabel'}, {@subj_user={'subj_user', 0x3d, 'smackfsfloor'}}, {@context={'context', 0x3d, 'system_u'}}, {@euid_gt={'euid>', r1}}]}) pipe(&(0x7f0000001bc0)={0xffffffffffffffff, 0xffffffffffffffff}) write$ppp(r3, &(0x7f0000001c00)="4d8976475600275a62e4b34313553534a3b9abaa0e82071daa2466c09af1018c4207fb0462ddac8b39e2b617e8d48ef765acf709cfc8fb58701f13ecf45eaf5690a3549216abda93128311d266e0219983404c3c8fb0e17259dba752827d4cfc13322d38f903f3329c1fa945b2272d4c16e3488d90da69443742f69f1d2c153dec26a7a0c5b5c48ebc8f2d4427776a8a5c701ccf8b33effa262d70c779c9e1e3d9137ccc29cad31ddee81bd1e65ba9dfe1", 0xb1) socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000001cc0), &(0x7f0000001d00)=0xb) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000001d40)={0xe3, {{0x2, 0x4e21, @remote}}, 0x0, 0x6, [{{0x2, 0x4e24, @remote}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e24, @empty}}, {{0x2, 0x4e21, @remote}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e23, @broadcast}}]}, 0x390) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000002100)=[@in6={0xa, 0x4e22, 0xdd, @ipv4={[], [], @empty}, 0x8}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x6, @ipv4={[], [], @multicast1}, 0x10000}], 0x48) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000002180)="61157259266a19d480f8650cb15af1f129b4668f0006e599033ab0fb42d4b6e646fd7c1f33ca1c4163355765d16381c7593c6b54d9bb3be763c18bcbc23b62f40a83aab368fc518c2b06bbe5aae388d989185c0816b6532c288fbdad071d6595ef1224b56046cd701a76f3fa6ccc0460eb49305263847e3a1fdfe71514df4a9df8568a011eafd4f7e14b00bfdc3c93b742fe7432ad2a1cc36a30d728a2b04790a09884975c4a6d17341826", 0xab) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000002240)={{0x2, 0x100000000, @broadcast}, {0x6, @broadcast}, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 'veth1_to_bond\x00'}) recvmsg$kcm(r3, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f00000022c0)=""/91, 0x5b}, {&(0x7f0000002340)=""/132, 0x84}], 0x2, &(0x7f0000002440)}, 0x1) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000024c0)={0x4, 0x4, "ca5297ea38f25db43621c957c7cbe62eb35ca3d044c7c0e39cb16fd4a753c7f0", 0x1000, 0x1, 0x200, 0x9, 0x21}) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000002580)=@add_del={0x2, &(0x7f0000002540)='team_slave_1\x00'}) mount$9p_tcp(&(0x7f00000025c0)='127.0.0.1\x00', &(0x7f0000002600)='./file1\x00', &(0x7f0000002640)='9p\x00', 0xc0000, &(0x7f0000002680)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@mmap='mmap'}, {@cache_none='cache=none'}, {@privport='privport'}, {@access_user='access=user'}], [{@smackfsroot={'smackfsroot', 0x3d, 'POLICY_CHECK'}}]}}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000002740)={0x2a32983b71292827, 0x5, 0x8408, [], &(0x7f0000002700)={0x9a090f, 0x0, [], @value=0x3ff}}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000002780)={0x0}, &(0x7f00000027c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000002800)={r4, 0xce, 0x6, [0x3, 0x8c58, 0x5, 0x6, 0x8, 0x7]}, &(0x7f0000002840)=0x14) fcntl$getownex(r2, 0x10, &(0x7f0000002880)={0x0, 0x0}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000028c0)={[], 0x1, 0x1, 0x2, 0xffff, 0x2, r5}) bind$unix(r2, &(0x7f0000002940)=@file={0x0, './file1\x00'}, 0x6e) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f00000029c0)=r4, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002a40)={&(0x7f0000002a00)='shortname=winnt', r2}, 0x10) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000002a80)={0x3, 0xf, 0x6, 0x9, "71296fcb789d112e421a48786fb69f457f731b865381896cc61300a671910f61"}) [ 134.902042] IPVS: ftp: loaded support on port[0] = 21 [ 134.960970] device hsr_slave_0 entered promiscuous mode 17:44:59 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x1000, "331c5e61e9f731e1cf605492f1535aa4b4c289881d686c1e70014eba14163d21616df6c0667fc7dd6c0d18e8b55045105a9e40abcf519310c747c3bbf8b936271f55ae9c661d3adf87f39a90961ec584456eea442633b4ea9e6b982fb27a3962d85ebafb9278aa2cbdb745ba8eb7e50739aa953abd176b5f725cfd5f949d4c3028ee890617ead43b9d49e32c313d99156b86294e0637988bb45e796c604122127d8dbdb787f08ca1ae1d0bd5919e640bddc59fdddc6439dfc91c1f87b7d361652a52186fb10b80935201771f13c6f5cd3574871f1d4249440d6a13657cea1cb1f72a8e8ac24f008893569cd9716f116d2a9ef36da9bf2605373fb3303c0b3cdae220afe7b473ff08c966e3eaa64c454b43ff3f09abb14b677aafd01531b04c4a483f389efa5bb696046f71b5a3a72273ac5afbb88b94d15d2ae7044638fd8d15e9133a69256d3fe99009c53c6617e7e3364c3af60ecda3ce43347fd7d04e071970f5d17f0ef77faa21396f4044aabd6aea8f35d5ec933badb956bec23941d20ad6e83dcc76dff49b00db77220ec2287572a798dc4cd28c2bf9baff34567054e532588516edea224844269f1916c36e8008efbae434f06fe6aeac5e487d230ad5360b20ee71c37972639dcb187d5042469fa89a9e26ce7707c0c4cb0be3d8b0b73f8c3b06bead5afa10d0127cdd6dbdc8c80a201674c9aed046460d29a3cc606a223dfc49b6161e8d385de3402e464ef1cccd1cfa1614ac2f43e5b4decc48178e5e79b46e602cf569d5d2bcb84cb34b7c7047597a21fe8af08430586c51cdfff2cae880d41c7913e23aea65d0495c3f32cb10612a888dde1187d35952e836971a0095ad24ee3faf732f98c6712a2bf2bcdcf97deee87a16efac6ff4845681cb1fd8e14f9c55b471a8bad23f74137e512da916930c1d09f0bbe3c49670dc44e948cb2043fef987b2141f944a96521bf599541d9cab4aa2d4c1b4dc555194502647dfc3ea4d5cde1c2c9ef467ec00632a447fcb45dd05dd22ecce60fd60b6c9806a3529aeb189fa0a1451a3f0fd487ced1c3d68db423e56390f59893c73beff803b5685c2a706016b5ded511c9ec808d83e2fc11ad9adeff6e7aa58e49a138fac7944e53dcd0596a8ff31ba05c7a5c2154c03e598d1b1a97002d4e83739a3686542a6fed11cca22871e472109cadc623a2a91bd552a94437e4b21ed1ba1db853622537af7169e8795a8776bbeff9f2e81db193f9f58d639a72922ffadf82177753bfb1498784a9e111a5f1d24982b79f57879d49ada3127119b90be187772a1943b40e37fb97a5df380c5a800fd87c4282094051751cb9c55f5499e6b1be55935658f259caba3c94df6fb241d99fb52bb10d61499d7e0988bd5835db6a02ed36e012cbd98bcbdf97823c745830c23df3ff312cd05fb84162604ce50d7476e9d612074c37fc82c609f7d35f8a352362c80892a106af69875e71a094b9a9ac1d2dd0e4a50b08c9c27615985767062ea56d64b21df83639c7d9e68c3fcc6e89f567a54d83eec577f0ba481d2e76514a761312d4cc61546e678f2cd64554bad963dcd5d688d060b41b2d0b6a8052d4ae72a7703ef6f750e2a4bb6d98e2c4a8b47b6bde055cead0085cba37cfcdfb8f9ab6df4e582558fb976d48f964ab88a75652b6cbf60faa8b65344094b86f58f61d3b1d4604ba10e0847596e7b541efbe9331fde28b6422a05917b0f848d10109647d815115f0c148526b9b9f965efa8731bc77193f225b1ef8b514046a8c2d1ca1f80001717c0c9b5c6adb55be75db660510d270a1355cbff82362b459819e62a636336b53d116fca6a012253598a4938a35c735f4d155ec7d5b4a2860e70389bfdec165cd9902db669bf132fba82d6262c6bc10b75d0900d5ea791ef0cb4f90f648d72b7bdb4802aadb81bfe0b0e5a2314279c88b20f6e1b4751d5e01f81f413b56e7cfd1f8366b4fb379a7b0e8d9f40da93a3bce82c3d7ba5d34ae89493f4ef4d5c02c0c5ee9f5eaaf6cd786534195c6210b09be4547159dcfef3d6b7538266d8a056fd7db6243df9d2902a38a2976be709d427da43b7ac90dd02e6e6131e9a17b5fbf867559b003e38a432843b08320ebd131125f8855e2337d319168a87d4ed103feb688c00e3169cedd005c039446bb4bc40fb97794413ba2e7a04e85b3d24792dbc102aa7979cd72c74e40435cc8398c9c5dbdabd1294b7f71d777724458a5e6d4a74e6ec3e5f608a25e3c511676e6bee4319714cebafe2e2da753e8efa066b5fd3d87acb142484ab603fe4fb68acc5ade77a3c7dad8b4c3550f6af61915095b0c7991d0506912f6bdf2bba1bb6e6927dc64dcf0f03db5c9120f17fef8a96b0dfc49b6c8fdaf8433c0ee45a7b9345c8b1dbfeb2451e6a4e77a05fcb49c0bd943efc62f99a57d1cfcb572c030018a4a5febe8b84c265efca88382f66ec7f955f0dc3975051e2f846b69012309e6550d49550c6155520cbe2b5a1123d35b39f03a39566b5b2fc33b3ce1ed1a000edff59d0a0e5104254281fe874c695220df53f1407e209a0c09e81358399ffd28e5c03a2e4ff3a2f3912ac5cba84f49b7ca499a929d2ef5fe3cc4db05d0d20ea3f0dfbf2606f26d57890a0a732e8b58f30e76e830603e3271398653dca382b9fdf072d767228a47a4e4a4fc9437a260e5ecbe37beaf8ea07e8afaea08fdb40e705eec4f4fddcf7e4dabb34b57950645518a2fcef56567a8579c2ef8c4ca3c8a61cf657bc54952b79ed818a3248c3de6adf21b77f6e8f7fddf2d6854d83afb9ee5ee85a1cf10cd115e2a9a7afebd82016b68720a21d41f138bd9d8a4596c6cfa7c712391bf5f0d5cbf6b5432e4a24061fecc252945b3e6674ff16995a1bd52c9997c44f9e87ead80e8efa268a86715307d98d55574d560a4e3c26b84a21165d000a17c966ee4a9ab6309da0671b96b79ae94458fc0a3a9a3a6e71b7dfe1f58d26a93ab7abcf21574e831a9f67c7e795f4d8504de75aec700aeb157d71adf322f9fae4a3af7e9d7c283acdc7df42b39368c35935ea869dd03c162677c4ad47b0f292f694a956c5b5fc9ba0a6cb1806008671645c0e69e4c935433b455a983f61cbc484913f09c8a365355ca5ca018a32c2ac87552b94cf61409d722ceb722cbe4616a5ce9efaab0d2d693f0cd64432104a3ff39821b60e11d8a7111586dba5f4d6fc4904e6efed51f4141a2eab3716b55a3d77f2feb76180b0c439f25113a49f9a64b4742d930d8384de4e8e39b9e61eec572c024c00818430e05dc67eb689726cab7e8b13e2d1186f3e06aef17a8703dc9669248dfe3f9c7dae765331794c341deabed9a8c2208fbb06502759f11e2a41c5acdd4d1284d3538236e9be3868e882f43220edcc6b2fc4320bfdf13743162fef3af8ab91883d3dc6bc024a79418522c5c7fc19e9c0cc094fc3823149a1e32d962ca0bd7b462598c8e95104d838f140936d57bc7e8fba42c6e4e378424ece91b333089743ecf0b7fe9a9a6f022d2912cadafdc853394aaf8bed3b7065983b1d11fa21b997e4b3f6dc17e09bb28419163903e896feadf2ec93dcc78fd73ffa0d79f9385b3d6a72cbb703a67a4effbcd25195344793e3db6e314f6b3a14f10e7fbb1c34e3bd13ea765b649b12e873d47dd4b249f358d19767d9870db157d6a029f4cb21a955d409d60dc84c45b7492ecaefd0851a7dd30b9232f1a59e557f6b20df3d5334e729948fd29fab422f1eb8c205154b6537ea93624ea9c0702f8c6fc11049896e43d6ba6bebeb551f0895432046b9a1e7f62c3e6ddb67241ee030db6f661ec3075383fb3b7b07a26326d6c88c674ed770dfd395a8b3685018eb6e2dc990e054b1a8ef99a6574355916b6447c97657e28734c0142b85c57adc229696ed6bffc48465247660d502b1e9b8158bcd14a6a3777e4de14e9683e3f8a2b20a8b7a9512517ac7e33627d93660ce380bbe910a394124e1d0a8275ccea80580c26859a7c0c917f42379e05e3add67d33825258aba2f8fcb4053b6683adf44f9be14706dd3ff016aa93f78ee0ee9564bad9d72f8b21196a7c91ef03b73835c6da46c42e2ce3c7cfe83cfcc2443b943f51ad0d5546be6426bad72de60d864284d0a10ee08624be6bc1b73c0142877f9a2f81b409c5d6c3f5c46f8729adccfa70b72da8a6a469f2692a9ece42f989d6a144dc62e3fc68627e33f018ca260948251178e39449ce9f4b22718df9d268981d4f021fcb1cd211dd8b4ccb155358cd4819337036f02740f72fddbe8880ff31da8b85bb46819ad45322ec5235833fa8b9b4321f9b5641ebea4e6aa37e887bb3193f29df8d15191e13409a91a0a5179ae9ccabef29aa17c2e1598cf43c1cbd1d52f928c42576f140261a4ae661ccf9f76a2f14a1f4643511342c11d6b9604ed645d0ff7185903d2acf4563d1b407de52851582796ab54f07c0972802297b6c283183ff5027629611f576cb51e385f58ab5275d5ed093729f92de109d77a73c1d7fdcadfc237fcba1d7e23f4fbcdc57f4e9accece66145b340493353c1bfe09419d5d662aa1084c4733225dcde8acdee1dd6352d048174aeafbb7311a037e58fb23a131da384a9d3d4881475c1a00d5615f095016b851f11f8d7439fb706743d2218a2daf0a456f9a04ee0d9420ca6ef24f9181e7a786f6c31406daaccc5bb5ad15328aa70d02543f2534d9a12870073295e5d837e4d83fa807bda61ed6f9bbdddf6654015d421d63d43401d94be9dee676b1dfe8b07dbd43978c179b1180587b5017005f0c3bec29ff59057a04e8fa69f6fe8898c2aaa7e998f2a7d1651a04b1e3410ea31d0ed79d14cb29adcf040bc434581999cc33f405643d14c145816c62be3779a5fa738c6f43a8198711259b7ba95113b4d9636fd25c7bd9ce30ab61ccbfb373ee59972dc5a0967238f35433c01bd421844794d00c3f601f200214410e337a70a816f68b6195d2e5172799c0dddbd4a012505d09090effbd589ea1707f90e0bd59dc8f15f6d3ed0b63a94d51b4994f22c4437447d8c4a3ac508dbaa110471bf465e41fe97507042fa4d2d5a3eabe8e162ef0cba1af5196c2c37391082481a8059344b6ea0d234488bb622fc703e712d69b0184930483a1e28a6a3b2bb9720c7d167a4b42106683ee5d2e4129023f82369ba54e27d66859fc73f280ac03a920ce15bdebc8cb2a339448868ca4fe8e8f30284d34c1b8e6a1bf55ba8c115ecd5d1c3f00cd742a1faf23768e3f88c691c2e97e1a3f94c09b657ec2e75ffbe15ca8d29945168e3f27b04d9dc61f0df6d2422ceea3a89eee5cd8989bb46f7c65540b3448f6eda6d582fac202a6079ef62590d9414b99962e4fb6605cbe53b740ba89c0c3921c0ed0fb4e4f7a34f6966a1c5faf237e37c31a8a09291761a28eff11ff69d3dc9fcb7afb126194fd6c9c7e8399fc4c7d3efad52c382e23232bc0c78be0685e798e08ea20a8e2dcd458f2573dd1bebdf545c667816d400922b601e88e04c1e0d0611ea7e291461344c93d6b4af3f414ad611e66174120aab8d3fe4e44ba3943adf97d4d1b31fb14f409c341f97168a2eded83c088d0526b32425a8454e2909d7a6a98a5ece88b0b4f996298109d45ccacce011bb6374a34f6e6aae8ed9221f5aa0669841990df83abe1c9f2dfd5419543fcf02731cf91b2a7dad0e147d0e549ed7b35a3b97676579fb023a0bd6da5007cfae31b0297cc0794027a5d3daf46c3c4c808d9c6593d817259cf60a1de4eaa2701fe5b4cc51c7015a6b3561d904e08caabfd63b"}, &(0x7f0000001080)=0x1008) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000010c0)={r1, 0x8, 0x30, 0x6, 0xfffffffffffffffb}, &(0x7f0000001100)=0x18) ioctl$CAPI_SET_FLAGS(r0, 0x80044324, &(0x7f0000001140)) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000001180)={r2, 0x7ff}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000011c0)={0x6f2, 0x8, 0x4, 0x4, r1}, 0x10) clock_gettime(0x0, &(0x7f0000001200)={0x0, 0x0}) write$evdev(r0, &(0x7f0000001240)=[{{0x77359400}, 0x11, 0x3, 0x1}, {{}, 0x1f, 0xb9, 0x800}, {{r3, r4/1000+30000}, 0x2, 0x8001, 0x3ff}], 0x48) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000012c0)={r1, 0x9}, &(0x7f0000001300)=0x8) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000001340)) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000001380)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000013c0)={0x8}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000001400)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x28}, 0x100}], 0x2c) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001440)={@initdev, @local}, &(0x7f0000001480)=0xc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000014c0)={0x1e, 0x1, 0x101, 0x0, 0x5}, 0x14) close(r0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000001500)={0x0, @motion_det}) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000015c0)) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001600)='/selinux/member\x00', 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001680)={r0, 0x28, &(0x7f0000001640)={0x0, 0x0}}, 0x10) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000016c0)={r6, 0x9, 0x10}, 0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001740)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000001840)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000001880)={{{@in=@multicast1, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000001980)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000019c0)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000001ac0)=0xe8) fstat(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001b80)={0x0, 0x0, 0x0}, &(0x7f0000001bc0)=0xc) r15 = getgid() fsetxattr$system_posix_acl(r0, &(0x7f0000001700)='system.posix_acl_default\x00', &(0x7f0000001c00)={{}, {0x1, 0x4}, [{0x2, 0x0, r8}, {0x2, 0x1, r9}, {0x2, 0x0, r10}], {0x4, 0x2}, [{0x8, 0x9302da398cbd6404, r12}, {0x8, 0x1, r13}, {0x8, 0x1, r14}, {0x8, 0x4, r15}], {}, {0x20, 0x3}}, 0x5c, 0x2) fsetxattr$system_posix_acl(r7, &(0x7f0000001c80)='system.posix_acl_access\x00', &(0x7f0000001cc0)={{}, {0x1, 0x4}, [{0x2, 0x0, r9}, {0x2, 0x4, r11}, {0x2, 0x1, r11}, {0x2, 0x1, r11}], {0x4, 0x4}, [{0x8, 0x0, r15}], {0x10, 0xa19fc2232eb6da20}, {0x20, 0x5}}, 0x4c, 0x1) [ 135.016634] device hsr_slave_1 entered promiscuous mode [ 135.094955] IPVS: ftp: loaded support on port[0] = 21 [ 135.100940] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 135.109799] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.116160] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.129313] device bridge_slave_0 entered promiscuous mode [ 135.141111] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 135.169482] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.175877] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.183798] device bridge_slave_1 entered promiscuous mode [ 135.239274] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.245795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.252830] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.259210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.284252] bond0: Enslaving bond_slave_0 as an active interface with an up link 17:44:59 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x100, 0x0) bind$rose(r0, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) prctl$PR_CAP_AMBIENT(0x2f, 0x7, 0x25) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000080)={0x8c5ec3979c7a7edc, 0x0, {0x0, 0x10000, 0x2016, 0x5, 0x1, 0x4, 0x3, 0x1}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x80000000, 0x9, 0xc8, 0x5, 0x3, 0x3, 0x62, 0x2, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x4}, 0xb) setitimer(0x1, &(0x7f0000000140)={{0x77359400}}, &(0x7f0000000180)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0xffffffff, 0x440) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in=@initdev, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000340)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r3}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e22, 0x68, @loopback, 0x81}}, [0x6, 0x4, 0x7, 0x1ff, 0x1, 0xf, 0x3ff, 0x9, 0x0, 0xee6, 0x9, 0x4, 0xfffffffffffffffb, 0x6, 0x7]}, &(0x7f0000000480)=0x100) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000004c0)={r4, 0x8}, 0x8) r5 = semget(0x1, 0x0, 0x100) semctl$GETZCNT(r5, 0x0, 0xf, &(0x7f0000000500)=""/4) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000540)) r6 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0xffffffffffff8000, 0x0) set_tid_address(&(0x7f00000005c0)) r7 = fcntl$getown(r2, 0x9) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000600)=""/16) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000640)={0x1, @raw_data="c1dc0e1eae1165f00cd9dd9b52f5db27fc40e4b184d5eaef155dbbfa142df911f02e6822533f2f421cced593daa628bffcf19d9a8d4c40122d402415c8d7cec7d8d32de247bf790b12a9115f775b9f8bfec0fde4c9b93d2191b19d61ebab2281e8e9c840c521e8d4750d70af6b16b17f184201097ad1f374cff91d078415226820f18f41e6e1c33f1e9943de0a25cc85835df5bfccb274fa27d1adfb14de5f0a695bedfd0711f82ceb383681b2f242b4f5aae56b885788fc0b26d670aa91f4d212edf78bbb827062"}) getpgrp(r7) setsockopt$inet_sctp_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000740)={r4, 0x7, 0x91, "acbed35b24c8aa92099239abfebe2c7f534354f9a45a129709d420f66a7fa9eab7b5959719aa52b08e4f93cebef1b870fc45718c686a28a61df345b177c49427c7b2776c231649360056a8abaa0eb3b30e0a14cf1080a0a503994f7e640d8cb56943792df7a9639a7805bcfbd79e1b25fe3cd4c360688c90539bfb58a37791ad6fb85b8db8e0cf236a57a029a1f6570841"}, 0x99) fcntl$setlease(r1, 0x400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000840)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000008c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000800), r8, r2}}, 0x18) accept4$packet(r2, 0x0, &(0x7f0000000900), 0x800) clone(0x4000, &(0x7f0000000940)="186054555413b64740030a3f05639e5f6d344fffc02a8e1c6b18cdb89af5471ea05dc470f983f48dd76f28bd586faedeeb12cc0929e7f9ae4a8e0a3611777997e12512ab5a4794a2", &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)="39831232f72470c335c3e93186e869968c6db8f129114abbeda89bb30c214cae08361d5e24ccd6e7b7e6cf68c487f28b93e7b53c771457b2d7ff9b5b0aafc1aaad4f7eea4b4daf2852b467bf15910b9abcfbfd9ef8fd31475261f348a6dcd6a610c0b3a3a917887e7e92c54cee5d29") openat$null(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/null\x00', 0x200200, 0x0) fadvise64(r6, 0x0, 0x7, 0x5) ioctl$TIOCSIG(r6, 0x40045436, 0x21) [ 135.331105] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 135.352728] IPVS: ftp: loaded support on port[0] = 21 [ 135.438599] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.445749] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.467897] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 135.475150] team0: Port device team_slave_0 added [ 135.496203] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 135.504351] team0: Port device team_slave_1 added [ 135.509790] chnl_net:caif_netlink_parms(): no params data found [ 135.547740] IPVS: ftp: loaded support on port[0] = 21 [ 135.563603] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 135.573425] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 135.631348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.678095] device hsr_slave_0 entered promiscuous mode [ 135.736528] device hsr_slave_1 entered promiscuous mode [ 135.780201] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.788689] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.795609] device bridge_slave_0 entered promiscuous mode [ 135.802483] chnl_net:caif_netlink_parms(): no params data found [ 135.816718] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 135.823047] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 135.830260] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 135.849698] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.856060] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.863345] device bridge_slave_1 entered promiscuous mode [ 135.899885] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 135.913699] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 135.952658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.960305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.971828] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 135.980661] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 136.001110] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.008035] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.015879] device bridge_slave_0 entered promiscuous mode [ 136.035947] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 136.043766] team0: Port device team_slave_0 added [ 136.053266] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 136.060556] team0: Port device team_slave_1 added [ 136.066853] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 136.072944] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.082533] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 136.089761] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.096090] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.103533] device bridge_slave_1 entered promiscuous mode [ 136.114908] chnl_net:caif_netlink_parms(): no params data found [ 136.122683] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 136.134584] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.142541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.150525] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.156926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.166834] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 136.194302] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 136.204172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.212133] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.220263] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.226656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.235029] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 136.243850] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.291018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.300926] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 136.378351] device hsr_slave_0 entered promiscuous mode [ 136.438004] device hsr_slave_1 entered promiscuous mode [ 136.477027] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 136.484716] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 136.514669] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 136.525983] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 136.533525] team0: Port device team_slave_0 added [ 136.540769] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 136.549335] team0: Port device team_slave_1 added [ 136.554337] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.561068] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.568387] device bridge_slave_0 entered promiscuous mode [ 136.575123] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.581588] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.588983] device bridge_slave_1 entered promiscuous mode [ 136.595302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 136.609075] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 136.617173] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 136.624830] chnl_net:caif_netlink_parms(): no params data found [ 136.640001] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 136.648208] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 136.655998] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 136.664336] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 136.671037] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 136.681812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.698073] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.711427] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 136.726820] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 136.733287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 136.744339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 136.753464] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 136.774699] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 136.791776] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 136.859104] device hsr_slave_0 entered promiscuous mode [ 136.896731] device hsr_slave_1 entered promiscuous mode [ 136.936741] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 136.949080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.956949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.964466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.971635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 136.981099] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 136.991158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.001916] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 137.008136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.021653] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 137.028520] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.034875] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 137.047338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.054879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.063660] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 137.071227] team0: Port device team_slave_0 added [ 137.078445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 137.085691] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 137.093732] team0: Port device team_slave_1 added [ 137.104006] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.111560] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.119150] device bridge_slave_0 entered promiscuous mode [ 137.129094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.136906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.144532] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.151012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.158018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.165922] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 137.174907] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.182006] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.189868] device bridge_slave_1 entered promiscuous mode [ 137.208805] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 137.226034] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.234021] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 137.245433] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 137.252984] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.261549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.269493] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.276291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.283137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.300122] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.308380] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.330398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.342033] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.351927] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.362354] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 137.429306] device hsr_slave_0 entered promiscuous mode [ 137.477290] device hsr_slave_1 entered promiscuous mode [ 137.533838] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 137.542146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.550248] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.560956] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 137.575647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.582968] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 137.591545] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.599718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.607669] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.617276] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 137.627429] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 137.635250] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 137.643104] team0: Port device team_slave_0 added [ 137.649601] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 137.657318] team0: Port device team_slave_1 added [ 137.662688] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 137.673412] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 137.686020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.693749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.701261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.709070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.717760] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 137.723765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.734248] audit: type=1400 audit(1567014302.109:38): avc: denied { associate } for pid=7583 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 137.743197] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 137.786842] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 137.798469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.821827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.878469] device hsr_slave_0 entered promiscuous mode [ 137.916579] device hsr_slave_1 entered promiscuous mode [ 137.959566] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 137.968547] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 137.974918] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 138.024766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.053943] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 138.055396] QAT: Invalid ioctl [ 138.073269] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 138.080770] QAT: Invalid ioctl [ 138.094705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.101678] QAT: Invalid ioctl [ 138.102060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.105172] QAT: Invalid ioctl [ 138.122731] QAT: Invalid ioctl [ 138.126190] QAT: Invalid ioctl [ 138.126756] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 138.130919] QAT: Invalid ioctl [ 138.141903] audit: type=1400 audit(1567014302.519:39): avc: denied { create } for pid=7606 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 138.145661] QAT: Invalid ioctl [ 138.168399] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready 17:45:02 executing program 1: [ 138.175236] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.201883] audit: type=1400 audit(1567014302.519:40): avc: denied { write } for pid=7606 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 17:45:02 executing program 1: [ 138.228250] audit: type=1400 audit(1567014302.519:41): avc: denied { read } for pid=7606 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 138.243753] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 138.277583] QAT: Invalid ioctl [ 138.277780] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.283982] QAT: Invalid ioctl [ 138.299276] QAT: Invalid ioctl [ 138.302683] QAT: Invalid ioctl [ 138.304420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.311952] QAT: Invalid ioctl [ 138.315914] QAT: Invalid ioctl [ 138.319455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.319647] QAT: Invalid ioctl 17:45:02 executing program 1: [ 138.331239] QAT: Invalid ioctl [ 138.343886] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.352221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.365568] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.371983] bridge0: port 1(bridge_slave_0) entered forwarding state 17:45:02 executing program 1: [ 138.398357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.412811] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 17:45:02 executing program 1: 17:45:02 executing program 0: [ 138.441730] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 138.449038] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.462688] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.470812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.484221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready 17:45:02 executing program 0: 17:45:02 executing program 1: [ 138.514267] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.531117] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.537568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.568331] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 138.596091] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.611760] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 138.653327] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.661607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.669501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.677865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.685474] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.691846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.698877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.709609] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 138.715673] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.724333] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.732765] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.740510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.748350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.755865] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.762244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.770826] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 138.781320] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 138.791225] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 138.799262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.807247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.814963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.824812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.832007] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.845069] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.852722] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.861328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.870356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.878669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.886206] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.892587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.900724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.911080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.920776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.928043] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.935685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.947051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 138.954830] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 138.963180] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 138.972396] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.979488] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.987376] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.994842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.002772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.012691] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 139.021290] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 139.031545] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 139.040364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 139.048817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 139.055707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.063925] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.071801] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.078187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.085126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.093180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.103907] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 139.110277] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.117732] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 139.125915] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 139.135089] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 139.143320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.151447] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.159541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.167461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.174866] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.185543] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 139.201216] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 139.209947] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 139.218933] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 139.224984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.232898] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.241056] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.248878] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.255253] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.262348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.270077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.278129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.285577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.294619] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 139.304741] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 139.312381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.321309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.329039] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.335374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.342767] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.351990] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.360541] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 139.366990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.377778] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 139.391485] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.398999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.409733] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.417969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.425626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.433739] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.441659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.448962] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.464066] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.474723] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.487882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.495930] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.503923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.513722] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.528604] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 139.544181] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 139.552556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.561171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.578762] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 139.589428] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 139.601483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.609158] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.617000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.624481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.632719] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 139.643172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.654048] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 139.660748] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.671847] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 139.684104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.697941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.705488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.715261] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 139.722105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.734148] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 139.764745] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 139.803095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.808129] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 139.818944] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 139.823322] 8021q: adding VLAN 0 to HW filter on device batadv0 17:45:04 executing program 2: [ 139.983190] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value 17:45:04 executing program 3: 17:45:04 executing program 1: 17:45:04 executing program 0: 17:45:04 executing program 4: 17:45:04 executing program 2: 17:45:04 executing program 5: 17:45:04 executing program 2: 17:45:04 executing program 4: 17:45:04 executing program 0: 17:45:04 executing program 5: 17:45:04 executing program 1: 17:45:04 executing program 2: 17:45:04 executing program 3: 17:45:04 executing program 4: 17:45:04 executing program 5: 17:45:04 executing program 1: 17:45:04 executing program 0: 17:45:04 executing program 2: 17:45:04 executing program 3: 17:45:04 executing program 4: 17:45:05 executing program 1: 17:45:05 executing program 5: 17:45:05 executing program 0: 17:45:05 executing program 4: 17:45:05 executing program 0: 17:45:05 executing program 2: 17:45:05 executing program 3: 17:45:05 executing program 1: 17:45:05 executing program 5: 17:45:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00', 0x7) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x6c002, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000180)={0x10}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x56c4685cbd11140, 0x0) accept$netrom(r2, &(0x7f0000000040)={{0x3, @bcast}, [@null, @remote, @null, @null, @null, @default, @netrom, @default]}, &(0x7f00000000c0)=0x48) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 17:45:05 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f000072eff0)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3303909b8f8896e33719fe3bb036e0bc90900000040000000000000ffff5bf10900001eed5e000000006203005b", 0x48}], 0x1a4) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3, 0x2002) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000140)={{0x2, 0x4e20, @broadcast}, {0x307, @broadcast}, 0x0, {0x2, 0x4e24, @multicast1}, 'ip_vti0\x00'}) ioctl$TIOCEXCL(r1, 0x540c) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000240)={0x1, @sdr={0x33767753, 0x2}}) 17:45:05 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:05 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x0, 0xff, 0xcc7}}, 0x30) 17:45:05 executing program 5: waitid(0x0, 0x0, 0x0, 0xb5a7dd4275e35127, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xffffff65, 0x0, 0x0, 0xffffffffffffff75, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) r2 = dup(r1) bind$rds(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0xfffffffffffffff9, 0x7ae815047e0a35ea) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32=r0, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000ff010000080008000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00\x00', @ANYRES32, @ANYBLOB="000000000300"/28, @ANYRES32, @ANYBLOB="000000000500"/28, @ANYRES32, @ANYBLOB="00000000e00900"/28]) ioctl$TCGETX(r3, 0x5432, &(0x7f00000001c0)) munlockall() 17:45:05 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x6a56448d15e09e1f, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0x3, 0x6, 0x2, 0x6, 'syz0\x00', 0x2a4}, 0x3, 0x8, 0x3, r2, 0x5, 0x2, 'syz0\x00', &(0x7f00000000c0)=['\x00', '\x00', '+\x1b-eth1\\%md5sum\x00', '\\vboxnet0user:vmnet0[selinuxvboxnet0systemppp0\'\x00', '^cpuset^selinux^\x00'], 0x53, [], [0xfffffffffffffffa, 0x5, 0x1, 0x9]}) ioctl$int_out(r0, 0x2, &(0x7f0000000300)) write$apparmor_current(r1, &(0x7f0000000540)=@hat={'changehat ', 0x2, 0x5e, ['\x00', ')posix_acl_access!vboxnet0[-em0%{)eth1mime_typeeth1trustedem1.vmnet1\x00', '-\x00', '%\x00', '\\vboxnet0user:vmnet0[selinuxvboxnet0systemppp0\'\x00', '+\x1b-eth1\\%md5sum\x00', '+\x1b-eth1\\%md5sum\x00', '^cpuset^selinux^\x00', '\x00']}, 0xc9) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) fcntl$getown(r1, 0x9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0x9, @ipv4={[], [], @remote}, 0x7fff}}, [0x6d, 0x80000001, 0x6dfb, 0x3, 0xfffffffffffff52f, 0x7fff, 0x8, 0x8, 0x841, 0x4, 0x3, 0x4, 0x9, 0x8001, 0x6]}, &(0x7f0000000440)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={r5, @in6={{0xa, 0x4e21, 0xfff, @ipv4={[], [], @remote}, 0x4}}, 0xe452, 0x7f, 0x101, 0x4, 0x4}, 0x98) [ 141.071067] audit: type=1400 audit(1567014305.449:42): avc: denied { map } for pid=7738 comm="syz-executor.1" path="/dev/ashmem" dev="devtmpfs" ino=15878 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 141.096264] hrtimer: interrupt took 44680 ns 17:45:05 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:05 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:05 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:05 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:05 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x0, 0xff, 0xcc7}}, 0x30) 17:45:05 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:06 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') socket(0x1, 0x80000, 0x90a) 17:45:06 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:06 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x0, 0xff, 0xcc7}}, 0x30) 17:45:06 executing program 3: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[]}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) 17:45:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00', 0x7) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x6c002, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000180)={0x10}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x56c4685cbd11140, 0x0) accept$netrom(r2, &(0x7f0000000040)={{0x3, @bcast}, [@null, @remote, @null, @null, @null, @default, @netrom, @default]}, &(0x7f00000000c0)=0x48) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 17:45:06 executing program 5: msgctl$IPC_SET(0x0, 0xd, &(0x7f0000000500)) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x20000000) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x801, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x36c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd7ad}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4000080) 17:45:06 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') socket(0x1, 0x80000, 0x90a) [ 142.204376] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 17:45:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={0x0, 0x7b9d019def61f109, r0}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x7ec5810bdc002585, 0x2) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) 17:45:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffd) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0xd5bb3d6ca8bd64ff, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:45:06 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x5dcf00beb612513b, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x101, 0x1}) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020900060500"/16], 0x10}}, 0x0) read$FUSE(r1, &(0x7f0000000180), 0x1000) 17:45:06 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff020000000d0000000000000088a8736974300000000000000000000000006c6170623000000000000000000000007369743000000000000000000000000074756e6c300000000000000000000000aaaaaaaaaa1fff00ffffffff0180c200000f00000000000000001809000068090000b0090000616d6f6e670000000000000000000000000000000000000000000000000000008008000000000000040000000300000003000000080000003903000000000000800000000008000001000000000000009e030000010400005f0000003f000000008000000400000006000000400000008100000000080000020000005a0700000000000004000000ff0f0000090000000500000009000000ff0f0000add800000100000001000000010000008100000018bb00000500000001000000ff07000003000000fdffffff00080000ff00000004000000000001000700000005000000070000000c0a0000060000000600000001000080ff7f00000500000001000080ff7f0000ac000000070000008e900000080000004a0000000800000006000000ff010000c016000002000000ffffffff05000000ff0700000100000000080000f3000000030000000000008088000000e502000081000000018000000600000005000000008000000500000000000000a48b000000100000b971000044010000b44d000000000000ff0f00001f0000000400000001800000ca00000000100000000000000000ffff0000000004000000080000000200000006000000dc0b000002000000ff0f000001000000ff0f000004000000020000000004000002000000008000008000000009000000000000008600000007000000050000008000000006000000ffffff7f010000000600000000800000720000008100000005000000fbffffff020000000600000004000000000000000100000001000000080000000500000002000000060000008f0000000200000002000000ba7400000100010001000000a80000000300000003000000030000001d11ffff710f00007f000000010001003f00000004000000eef400003f0000000100000000000100000000000400000005000000ca000000070000000600000003000000ffff00000200000003000000070000000600000006000000f8e70000050000000000000001000000060000000002000001000000c80e0000ff03000072000000ffff000000000000010001003f927470050000000400000005000000010001000100000007000000d94d7b64ffff000006000000cd7f547903000000000000000200000000000000ff070000ffffffff0700000002000000e2f0000000140000020000003000000056790000ee0000000100000001000000660300005892314d090000000900000009000000400000000100000000000000ff030000d00000006afbb2190400000000000000070000001f0000000300000003000000ff070000040000000200000006000000ff010000ff0300000800000000040000ffff0000ff030000459319f1010000000400000000080000000100000101000004000000040000004c000000a00000000300000000000000ff7f00009036000003000000000400000004000002000000000000001c0a00000004000004000000ffffffff040000000000000081000000000000810400000007000000000000060000000000000000ac14141a0600000064000000ac141410c30500000300000002000000e1ffffff0202000030fa000002000000ffffffffff01000005000000000000000000000000000000000200009600000006000000020000000400000006000000000100000900000000000000050000000700000008000000000400005f01000008000000400000000200000007000000010000000600000008000000070000000800000005000000ff07000008000000010001"]}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x0, 0xff, 0xcc7}}, 0x30) 17:45:06 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') socket(0x1, 0x80000, 0x90a) 17:45:07 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x2, 0x80000) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000140)='\xf2mime_typebdevsystem\x00') r2 = socket$inet(0x2, 0x3, 0x19) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1}}, {{@in6}, 0x0, @in6=@loopback}}, 0xe8) setsockopt$inet_mtu(r0, 0x0, 0x14, 0x0, 0xfffffffffffffd0f) 17:45:07 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:07 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:07 executing program 3: r0 = userfaultfd(0x0) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x40, 0x208003) recvfrom$unix(r1, &(0x7f0000000140)=""/96, 0x60, 0x40000000, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000003c0)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xe0e1be4ec9c3baf1, 0x0) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000040)={0x0, 0x1, [0x80000001, 0x101, 0x6, 0x4, 0xffffffffffffff81, 0x0, 0x9c6b, 0x20]}) r4 = userfaultfd(0x0) close(r4) clone(0x0, &(0x7f0000001f37), 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000}) 17:45:07 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='sit0\x00', 0x7) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x6c002, 0x0) ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f0000000180)={0x10}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x56c4685cbd11140, 0x0) accept$netrom(r2, &(0x7f0000000040)={{0x3, @bcast}, [@null, @remote, @null, @null, @null, @default, @netrom, @default]}, &(0x7f00000000c0)=0x48) sendmmsg(r0, &(0x7f00000002c0), 0x4cc, 0x0) 17:45:07 executing program 5: msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9160, 0x101000) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000040)) 17:45:07 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) pipe2(&(0x7f0000000100), 0x4800) 17:45:07 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:07 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x4, 0x10000) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x6, 0x10, 0x1, "e3aa129a10aac21250a1f8bcba9a049393151cd9321331342d9398e87428267457d9758dd83c7c35019f15334f7af94c409db1815590f125fbe95c5d4e35c02b", "02498a805678b0f11f3230ce605f3196f4bf53d41fede87c185c049dbf0e1509ee375bccce0796b5249606c207a660479387803fc249ed3e07b5c9c7ba8900a9", "6496fba1aee78e0e982ba825e39c91d9a3466467dc706d1c964ae7c4a761e96c", [0x9]}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) timer_create(0x5, &(0x7f00000000c0)={0x0, 0x1b, 0x6}, &(0x7f00000002c0)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{}, {0x77359400}}, &(0x7f0000000380)) socket$netlink(0x10, 0x3, 0xb4e45ea273f37b2b) r4 = accept4(r2, 0x0, 0x0, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000040)) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x100000000) sendmsg$netlink(r4, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000004c0)={0x10, 0x0, 0x200, 0x0, 0x25dfdbfd, "", [@generic]}, 0x10}, {&(0x7f0000001680)={0x70, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x77, @u32}, @generic="c9ec0efec113294e95c3e8754c52fbe6befd33253afc2c2ea0077f4b2af1e20c5ddebaa5", @typed={0x14, 0x0, @ipv6=@remote}, @typed={0x8, 0x0, @uid}, @typed={0x4}, @generic="3e119fa7031e0bf00fc4338daace8f73b93188"]}, 0x70}], 0x2}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={r4}) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000300), 0x4) 17:45:07 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) pipe(0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f00000001c0)=[{0x81, 0x0, 0xd1, 0x3ff}, {0x0, 0x0, 0x0, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) syz_emit_ethernet(0x55, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x1c00}, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4}, @icmp=@parameter_prob={0x21, 0x3, 0x0, 0x0, 0x0, 0x3000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[]) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x52f, 0x11b100) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)={0x1}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f0000000480)) openat$ashmem(0xffffffffffffff9c, 0x0, 0xe3f1b74c991c0272, 0x0) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) 17:45:07 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f00000000c0)=""/131) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x401, 0x401}, {0xf255, 0x7}, 0x2, 0x1}) socket$kcm(0x29, 0x7, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff3f}, 0xc) 17:45:07 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) sendmmsg$unix(r1, &(0x7f0000000500)=[{&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000400)="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", 0xff}, {&(0x7f0000000200)}, {&(0x7f0000000580)="ff387fbfb9c29556b8730c0380879abb1e842f5623089086ef93cfc8757d297c5a6f83417d0d8e12cac24b48425701c05dfbf3838f1b844386071a7721d007122e85fcf09f6e4400e3916de75bd3e48eb789ebbb9f421e15d8b42f1ec2e8c0e7e4878cb2cbf818a45fdead3b4abce7800612a40139b1d2eacd0e1b217946f83e5393ef5159a4736d557292faf14fab03510885a8b4fd447b59ed684920c6ebb9c3d2a190289e823ab83f88276d9d6c975069245391d29bba725deaa2c2cb4e5d0218bb51ca7128a27ca0b5fe38f8dea205877ce3321ed51b235c2dd858bf339965b0c8cefd06fb8b6e06", 0xea}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="120fbc4563720e3ceddebdecb60ad32116bdbebbdcdc2d12ed08648f9f5e7f5052ca4185892cce31c35cdac960562696295397c372d5d97a328ccbf51d08427f87967b7988ccaf076965fee876e453659e1f1c8de3457bdbc42aeb784531558271b1a4c274437e80d85c895694897926d3a68eabba82c4df941a264a0f499c7f4fd58335e8734962f514405d32c865c493e3b31738192f2e730ca62607619ee5dfaf795d4650665f28721f70cc7ccd09f791a9b0d6e86a69a5a82ad7c79390273d8b383d7a7226405b2e448189ccb6237c8ced4aa3c7c19c7e24ffacac0acd3689d9", 0xfffffffffffffe9b}], 0x5, 0x0, 0x0, 0x1}], 0x1, 0x10040) pwrite64(r0, &(0x7f0000001800)="ee6cf37a84e7a9d39d132d1b65874ab9ae2f9c81be1f1ac6ca1d0766b40380aaa70bc92c3856e29be612853275f4e81093e0ce607fea0e50e56c2fc97a93af9abd622127f1dc2da8622db0b7fdcbdfa73bad1663258e5973ad3b581c0e8390718f6a8b8ab90c7726c2387f380f71f71fa944203f6926ddb086a7dd6ce499b932ba4944f519811a689495e30f82cb30559ae045ef4af03a33faba740bd5140584213f518a0137c6d0c14f9c39babcbb25569aad1cf21332f2b577f5981900eb34", 0xc0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x759a}], 0x18}], 0x1, 0x0) socketpair(0x8, 0x800, 0x3, &(0x7f0000000200)={0xffffffffffffffff}) connect$inet(r4, &(0x7f00000018c0)={0x2, 0x4e24, @empty}, 0x10) fsetxattr$security_evm(r1, &(0x7f0000001900)='security.evm\x00', &(0x7f0000001940)=@v1={0x2, "6731f26f147014f8d93e94f9b008b667"}, 0x11, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) r5 = creat(&(0x7f0000001980)='./file0\x00', 0x188) ioctl$RNDADDENTROPY(r5, 0x40085203, &(0x7f00000019c0)={0x7fffffff, 0xce, "09b80b435dfe337ee7be54933f9ee272e234f328b5ac95cef0b67adf95820e904d68d953e6027fcc586a48a6c382fae34f3cf6ca4ed44dbc3129a3f8c53b30d7faa8ad6922e601ec0ca0d0e3e1708e2abe37a7463d052e1413d1ba400e42767a410a874e9dd13428a9b688e9aeab2427eebc5548a000a0325fd7076b59644738e9a63ddc752fb219ac161b8330e1beef37d371cbc7a10c6fe7b38a7f4003e3e42b9be309d956c497a3247c92aeb528ca72160b749980c719448d8bcf75d629d8f0748158e5af992fafbf3f5bb58e"}) recvmmsg(r3, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/48, 0x7509}, {&(0x7f0000000680)=""/120, 0xf}, {&(0x7f0000000300)=""/230, 0xffffff6f}], 0x3}}], 0x23d86, 0x0, &(0x7f0000008bc0)) 17:45:07 executing program 5: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='\xedemory.events\x00', 0x26e1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0xc6b, @rand_addr="b1addfaf813d9074d0ec6a42ce445447", 0x2}}, 0x7, 0xff}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0xffffffffffff0000, 0x2, 0x4, 0x57fc, r2}, &(0x7f00000001c0)=0x10) ioctl$NBD_SET_BLKSIZE(r0, 0xab01, 0x80) 17:45:07 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:07 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) pipe(0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f00000001c0)=[{0x81, 0x0, 0xd1, 0x3ff}, {0x0, 0x0, 0x0, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) syz_emit_ethernet(0x55, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x1c00}, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4}, @icmp=@parameter_prob={0x21, 0x3, 0x0, 0x0, 0x0, 0x3000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[]) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x52f, 0x11b100) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)={0x1}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f0000000480)) openat$ashmem(0xffffffffffffff9c, 0x0, 0xe3f1b74c991c0272, 0x0) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) 17:45:08 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x0, 0x0) r2 = dup(r1) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000080)={0x4, @vbi={0x0, 0xfffffffffffffffa, 0x5, 0x1beb8cb020dcff92, [0x242, 0x8], [0x0, 0x1ff], 0x108}}) ioctl$UI_END_FF_ERASE(r2, 0x400c55cb, &(0x7f0000000040)={0x0, 0xfffffffffffffffa, 0x4}) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000400)={0x0, 0x3}) connect$tipc(0xffffffffffffffff, &(0x7f0000000240)=@nameseq={0x1e, 0x1, 0x50f99c799b9a4b6a, {0x2, 0x2, 0x1}}, 0x10) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r1, 0x4000000000005) r4 = dup3(r0, r1, 0x80000) ioctl$TCSETS(r3, 0x5402, 0x0) write$UHID_INPUT(r4, &(0x7f00000015c0)={0x8, "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", 0x1000}, 0x1006) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000300)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x0, 0x0) 17:45:08 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:08 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) pipe(0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f00000001c0)=[{0x81, 0x0, 0xd1, 0x3ff}, {0x0, 0x0, 0x0, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) syz_emit_ethernet(0x55, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x1c00}, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4}, @icmp=@parameter_prob={0x21, 0x3, 0x0, 0x0, 0x0, 0x3000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[]) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x52f, 0x11b100) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)={0x1}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f0000000480)) openat$ashmem(0xffffffffffffff9c, 0x0, 0xe3f1b74c991c0272, 0x0) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) 17:45:08 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:08 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) pipe(0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f00000001c0)=[{0x81, 0x0, 0xd1, 0x3ff}, {0x0, 0x0, 0x0, 0x20}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') socket$inet_udp(0x2, 0x2, 0x0) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)) syz_emit_ethernet(0x55, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x1c00}, @dev, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x4}, @icmp=@parameter_prob={0x21, 0x3, 0x0, 0x0, 0x0, 0x3000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @multicast1}}}}}}, 0x0) syz_mount_image$msdos(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[]) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x52f, 0x11b100) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000180)={0x1}) getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xa, 0x0, &(0x7f0000000480)) openat$ashmem(0xffffffffffffff9c, 0x0, 0xe3f1b74c991c0272, 0x0) r1 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x50) 17:45:08 executing program 0: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usbmon(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000080)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x21) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000400)=0x5) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000300)={0x0, @reserved}) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r3, r3, &(0x7f0000000000), 0x8080fffffffe) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) mkdir(&(0x7f0000001540)='./file0\x00', 0x0) 17:45:08 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:08 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x2880, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='\x00', r0}, 0x10) r1 = socket$inet(0x10, 0x200000000003, 0xc) chroot(&(0x7f0000000140)='./file0\x00') ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000040)=0x20004000000) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="240000000b0607031d0100061d85680c1baba20400ff7ef84245ff5e134f9fcb75fc60e5", 0xffffffffffffff8b}], 0x1}, 0xc0) [ 144.480421] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 144.487644] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500) 17:45:08 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff020000000d0000000000000088a8736974300000000000000000000000006c6170623000000000000000000000007369743000000000000000000000000074756e6c300000000000000000000000aaaaaaaaaa1fff00ffffffff0180c200000f00000000000000001809000068090000b0090000616d6f6e670000000000000000000000000000000000000000000000000000008008000000000000040000000300000003000000080000003903000000000000800000000008000001000000000000009e030000010400005f0000003f000000008000000400000006000000400000008100000000080000020000005a0700000000000004000000ff0f0000090000000500000009000000ff0f0000add800000100000001000000010000008100000018bb00000500000001000000ff07000003000000fdffffff00080000ff00000004000000000001000700000005000000070000000c0a0000060000000600000001000080ff7f00000500000001000080ff7f0000ac000000070000008e900000080000004a0000000800000006000000ff010000c016000002000000ffffffff05000000ff0700000100000000080000f3000000030000000000008088000000e502000081000000018000000600000005000000008000000500000000000000a48b000000100000b971000044010000b44d000000000000ff0f00001f0000000400000001800000ca00000000100000000000000000ffff0000000004000000080000000200000006000000dc0b000002000000ff0f000001000000ff0f000004000000020000000004000002000000008000008000000009000000000000008600000007000000050000008000000006000000ffffff7f010000000600000000800000720000008100000005000000fbffffff020000000600000004000000000000000100000001000000080000000500000002000000060000008f0000000200000002000000ba7400000100010001000000a80000000300000003000000030000001d11ffff710f00007f000000010001003f00000004000000eef400003f0000000100000000000100000000000400000005000000ca000000070000000600000003000000ffff00000200000003000000070000000600000006000000f8e70000050000000000000001000000060000000002000001000000c80e0000ff03000072000000ffff000000000000010001003f927470050000000400000005000000010001000100000007000000d94d7b64ffff000006000000cd7f547903000000000000000200000000000000ff070000ffffffff0700000002000000e2f0000000140000020000003000000056790000ee0000000100000001000000660300005892314d090000000900000009000000400000000100000000000000ff030000d00000006afbb2190400000000000000070000001f0000000300000003000000ff070000040000000200000006000000ff010000ff0300000800000000040000ffff0000ff030000459319f1010000000400000000080000000100000101000004000000040000004c000000a00000000300000000000000ff7f00009036000003000000000400000004000002000000000000001c0a00000004000004000000ffffffff040000000000000081000000000000810400000007000000000000060000000000000000ac14141a0600000064000000ac141410c30500000300000002000000e1ffffff0202000030fa000002000000ffffffffff01000005000000000000000000000000000000000200009600000006000000020000000400000006000000000100000900000000000000050000000700000008000000000400005f01000008000000400000000200000007000000010000000600000008000000070000000800000005000000ff07000008000000010001"]}, 0x653) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) [ 144.522938] FAT-fs (loop0): Filesystem has been set read-only [ 144.573098] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 144.603624] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006500) 17:45:09 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:09 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) write(r1, &(0x7f0000000380)="3fd1c26bb8855d7167b4c008c84ce108ed5b486fddfdef3aa032391bac25bfcc47806912de8dc4ad465ff6ba7fc6c46367bb0f1e10eb159aa74593e0d828ff8db4feb062f92610dc642c71bb3c5bd65f74f46aa54558bf0c6dd94354d48d911a83dcc35449662840f8dc233ef93ac54142c89582bbdc750ae6be09ba2d0887656ab886626ecaa524c5059093bf44b9edc0acf73602dd87b6f4522334d16173561c0e4659e738971ec88b37e1613c32dfeff07ecebb0de62338241b23e62249f91c4a2ad9d5b8e29e", 0xc8) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80140200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x7}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00^\x00\x00\x00\x00', @ANYPTR, @ANYRESOCT, @ANYPTR, @ANYBLOB="0000000000ffffffff30000000000000c60000e9af0000", @ANYBLOB="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"]) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f00000001c0)=0x4) [ 144.612280] audit: type=1400 audit(1567014308.979:43): avc: denied { create } for pid=7901 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 144.652100] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) 17:45:09 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:09 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 144.807996] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) 17:45:09 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:09 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000080)) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000d80)={"8346031956217c8127a9cbf0311cb0bba8459c31155c151ee03e6dc12fcc84ef7efb65001afcfc4f04e552af1288e398cf76017dced939da460e39645c2d68555f4d243d5cd4ae4157dd7bbe2b6eff50bc31c395e21af0b81976bff0b12df08f7882ab60a88b71282933b0d6c94cdc002b4131f1775613d953eb7f1f595c8c53c6b5260ba0edd8e6a72f9cbdf14db9b61479425eb46e175c4bb45bf4694bb785a47c2cedb6d579b3b6d1aab15af9d9e71eee2a4ba767e298ec420640cf5687b92cc84876fbc35a805ad38295bfeb40a992e02a6e3809432ab1329f01efd3a686271e0873b3584d157c5bb0fb5e8ebf4153af5dbc9d2a2d9d8e99ce920b9dc023ee8bda2af043fdd1d59eed9ec3b0fae816f6dec5fe7d1ca9ac10dec5ce3434d08b61fdf7691f8f0f4570c4128f12831a69fa170ceddcc38c6a75220112aa8c7df440deee0f42e569d1070d04524c485f206bf3cee9f13f13100a8e7f0808ec4f5e69a708f20335153bb8418aa0dd1ab23d4cac2a8b44dbbf6f8cb0f87905ed98e71bf14a0680ee67319b389d465af296f08c3830756e4ab712eaab11dd952b01252633626a43e6e169a40c3d98274e8d5d9a862396f69d91cd9f46ca81f7c09a40b5572fa8e12865ebc8d7eb2e14a19b535597035384b1efd4cf11d513f7e814cc4f12e2fde179b5b92af36c0aff3f82bb524cfbba6bcc3eec698bc66e0f624b3db970967777eba175d2e422ab5b791991c29b083bd028c7aa57060675363d4b63d52b61fdc21ca60b8c1a51b0045ebb909db59777bf135ec1c9da071ef88f9b85acf2442ca8500d4fce7de8ecde1b712fe534d3435e44c805b7c8fd35f128cba523844af0667366bcdcfbc09cb9c39594fb9abd6508211553a979715625cd99aea34cc7268893e0a4c13cc2805d9dbc0ee999c023405a34766b0094cbafaf51e314c9940423b0a1958da8d780dce6e733e8bb167d5afbff572994be6a88b6c61009fb2eae071fc6c47d750f175df8ecdc71a6ce85bcbb7b516ae83048bb6868517a6038f12c6a591f718d0223ccaefd8e0fadc650143ec469151f5cb8c184e3fee83f03d1341e8310961be5c047f68139670417fd590fd7e37b12b3783314a5e1d93896cc9551829b2dedc5f1b6dfd02b8e43646a41edcdd9ab8d0924568b86d9981169efc5d490ba71c53896dd39e24be2688f6e5a45dfa61d608985ac0209fd0a0f2417412f1967f2568cae2fda3ec283e883c70c101f769ba1caf4d08a4ef791f203dcf517678518bb0983da3f3793c6af39a3ea14fe55c7c24e6d0cda92fdedd7a90308a92b3c836f52e1130ed0bcd6e3b3864336c0ac240db1df6d2c4451dbf1ae1ab26f37b798b3349b853bf412bd3486738ac68e527475ef1504f5df07cebbad4e7423ec1689082e8a3a5158f48aaad6a63be47c44ca826b984fced3"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x100, 0x0) 17:45:09 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000001c0)='teql0\x00') bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000000)="0503000406023e0001a041a0c52cf7c25975e697b02f08066b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0x4c, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000000c0)={0x0, {{0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, [], 0x19}, 0x100000000}}}, 0x88) connect$x25(r1, &(0x7f0000000080)={0x9, @null=' \x00'}, 0x12) [ 145.716563] protocol 88fb is buggy, dev hsr_slave_0 [ 145.721791] protocol 88fb is buggy, dev hsr_slave_1 [ 146.455179] IPVS: ftp: loaded support on port[0] = 21 [ 146.629151] chnl_net:caif_netlink_parms(): no params data found [ 146.764909] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.771639] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.778873] device bridge_slave_0 entered promiscuous mode [ 146.785646] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.792092] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.799505] device bridge_slave_1 entered promiscuous mode [ 146.811163] device bridge_slave_1 left promiscuous mode [ 146.817731] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.859013] device bridge_slave_0 left promiscuous mode [ 146.864478] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.048870] device hsr_slave_1 left promiscuous mode [ 150.119397] device hsr_slave_0 left promiscuous mode [ 150.180278] team0 (unregistering): Port device team_slave_1 removed [ 150.192382] team0 (unregistering): Port device team_slave_0 removed [ 150.203589] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 150.250220] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 150.352188] bond0 (unregistering): Released all slaves [ 150.404778] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 150.414458] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 150.430781] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 150.439844] team0: Port device team_slave_0 added [ 150.445396] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 150.452728] team0: Port device team_slave_1 added [ 150.458236] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 150.465452] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 150.518996] device hsr_slave_0 entered promiscuous mode [ 150.556675] device hsr_slave_1 entered promiscuous mode [ 150.606815] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 150.614035] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 150.630680] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 150.662466] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 150.668988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.678849] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 150.709337] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 150.715517] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 150.724868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 150.732342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 150.747992] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 150.754158] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.770413] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 150.782981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 150.794406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 150.808993] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.815373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.825509] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 150.833190] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 150.841321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.852369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.863701] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.870143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.886000] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 150.893352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 150.917634] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 150.926111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 150.947227] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 150.955530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 150.969716] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 150.989203] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 151.003710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 151.021363] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 151.030521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.042816] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 151.060234] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 151.066838] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 151.078504] 8021q: adding VLAN 0 to HW filter on device batadv0 17:45:15 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x80000000, {{0x2, 0x4e21, @broadcast}}}, 0x88) ioctl$sock_SIOCETHTOOL(r0, 0x541b, 0x0) 17:45:15 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x7f, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f00000001c0)={0x0, 0x0, 0x8, 0x0, 0x0, r0, 0x0}]) r2 = accept(r0, &(0x7f0000000080)=@in={0x2, 0x0, @remote}, &(0x7f0000000000)=0x80) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x3, {{0xa, 0x4e21, 0x1, @mcast1, 0x9}}, {{0xa, 0x4e21, 0x8, @remote, 0x11f000000000000}}}, 0x108) 17:45:15 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:15 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) keyctl$set_reqkey_keyring(0xe, 0x4) keyctl$join(0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='}\x00', 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 17:45:15 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000200)=0x2, 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000e9ffffff002a4429af02"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000240)={0x2, [0x1, 0x8001]}, 0x8) r4 = gettid() write$P9_RREADLINK(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1000000017010007002e2f66696c6530bb9ee4a1357a41ceb65c6b2c26df124f59880b1dbe7e84efb55410e3cc4ab8830878558347c5c3ec1cbd2659db133d74267551d86feb1e3f8646b557b31939a8ddcd182d493651e99952af379196b1132ce392f88abd0ff5e93aa97900e9c07edfdc088ef332892f2ff3d952ce6d1e6ed687c6b54e4f80b7e47f6f596f774a46b5c249ea7b4f519788ea"], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @rand_addr=0x7}], 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={r4, r1, 0x0, 0x367, 0x0}, 0x1c) accept4$tipc(r0, &(0x7f0000000400)=@name, &(0x7f0000000440)=0x10, 0x0) 17:45:15 executing program 1: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r0 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 151.373209] audit: type=1400 audit(1567014315.749:44): avc: denied { prog_load } for pid=7953 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 17:45:15 executing program 1: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r0 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:15 executing program 0: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/userio\x00', 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x3}, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x7ffffffff000, 0x10, 0xfa00, {&(0x7f00000000c0)}}, 0x2) r1 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) ioctl$RTC_UIE_ON(r1, 0x7003) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000), 0x2) 17:45:15 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:16 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x69, 0x80000) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000380)={0x3, 0x427a, 0x3f, 0x7f}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000340)=0x3, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x7653112b, @local}, 0x1c) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@initdev}}, &(0x7f0000000000)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@rand_addr="bdb4f06e6da0523deeca13f380d00061", 0x4e22, 0x8, 0xecb, 0x6, 0x2, 0x20, 0x20, 0x87, r1, r2}, {0x3, 0x218, 0x8001, 0x0, 0x2, 0x40, 0x54e5, 0x5}, {0x8000, 0x63, 0x1, 0x1}, 0x1, 0x6e6bbc, 0x10a8d86398d261b8, 0x1, 0x1, 0x1}, {{@in6=@remote, 0x4d4, 0x3c}, 0xa, @in=@local, 0x3503, 0x4, 0x2, 0x4, 0x1db4ff2c, 0x1, 0x7}}, 0xe8) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0), 0x235) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000003c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000440)={r3, @in6={{0xa, 0x4e21, 0x1, @ipv4={[], [], @local}, 0x600000000000000}}, 0x8000, 0x1}, 0x90) 17:45:16 executing program 1: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r0 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:16 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = add_key(&(0x7f0000000180)='s&vka\x8eler\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) unshare(0x22000400) bind$netrom(r0, &(0x7f0000000200)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x40, 0x0) signalfd4(r2, &(0x7f0000000000), 0x8, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm, @timestamp, @timestamp], 0x3) inotify_init() ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x5) ioctl$KDMKTONE(r0, 0x4b30, 0x5) 17:45:16 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x4, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x342, 0xffffffffffffffc0, 0x401, 0x3, 0x19, 0x5, 0xffffffffffff446a, 0x1, 0x985a, 0x8001, 0xfffffffffffffffb}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x3) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote, 0x1}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0}}], 0x4000000000000d0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 17:45:16 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) readv(r1, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) close(r1) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) umount2(&(0x7f0000000980)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xa2e6) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000180)={0x2f, 0x4, 0x0, {0x0, 0x3, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000640)=ANY=[@ANYPTR=&(0x7f0000000540)=ANY=[], @ANYBLOB="000000000000000000000100"/24, @ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYBLOB, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/166], @ANYBLOB='\x00\x00\x00\x00']) 17:45:16 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) [ 152.227327] audit: type=1400 audit(1567014316.599:45): avc: denied { name_bind } for pid=7989 comm="syz-executor.0" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 152.282069] audit: type=1400 audit(1567014316.629:46): avc: denied { node_bind } for pid=7989 comm="syz-executor.0" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 152.322166] audit: type=1400 audit(1567014316.649:47): avc: denied { name_connect } for pid=7989 comm="syz-executor.0" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 153.627440] IPVS: ftp: loaded support on port[0] = 21 [ 153.901930] chnl_net:caif_netlink_parms(): no params data found [ 154.144292] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.150861] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.158226] device bridge_slave_0 entered promiscuous mode [ 154.164979] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.172265] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.179708] device bridge_slave_1 entered promiscuous mode [ 154.411219] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 154.422626] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 154.437482] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 154.444693] team0: Port device team_slave_0 added [ 154.451388] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 154.458697] team0: Port device team_slave_1 added [ 154.463924] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 154.471620] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 154.738553] device hsr_slave_0 entered promiscuous mode [ 154.786688] device hsr_slave_1 entered promiscuous mode [ 154.827080] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 155.058118] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 155.075419] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 155.322413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.332140] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 155.559388] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 155.566492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.573508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.582050] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 155.588700] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.597189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 155.604958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.613181] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.620938] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.627322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.856892] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 155.864207] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.871586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.879611] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.887411] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.893764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.904008] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 155.911125] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.922349] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 155.929415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.938289] device bridge_slave_1 left promiscuous mode [ 155.943784] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.987034] device bridge_slave_0 left promiscuous mode [ 155.992864] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.047457] device bridge_slave_1 left promiscuous mode [ 156.052907] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.097483] device bridge_slave_0 left promiscuous mode [ 156.103041] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.228691] device hsr_slave_1 left promiscuous mode [ 162.269736] device hsr_slave_0 left promiscuous mode [ 162.309770] team0 (unregistering): Port device team_slave_1 removed [ 162.324179] team0 (unregistering): Port device team_slave_0 removed [ 162.334240] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 162.362311] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 162.434700] bond0 (unregistering): Released all slaves [ 162.548249] device hsr_slave_1 left promiscuous mode [ 162.609687] device hsr_slave_0 left promiscuous mode [ 162.669538] team0 (unregistering): Port device team_slave_1 removed [ 162.682524] team0 (unregistering): Port device team_slave_0 removed [ 162.692763] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 162.752018] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 162.849529] bond0 (unregistering): Released all slaves [ 162.931123] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 162.938689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.947084] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.955595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.968620] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 162.976704] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.984898] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.994484] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 163.004491] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 163.012120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.019712] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.027819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.035260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.044135] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 163.050301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.070522] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 163.082216] 8021q: adding VLAN 0 to HW filter on device batadv0 17:45:27 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x4, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x342, 0xffffffffffffffc0, 0x401, 0x3, 0x19, 0x5, 0xffffffffffff446a, 0x1, 0x985a, 0x8001, 0xfffffffffffffffb}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x3) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote, 0x1}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0}}], 0x4000000000000d0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 17:45:27 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:27 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x00', 0x902}) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x5) 17:45:27 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:27 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) readv(r1, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) close(r1) accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0) umount2(&(0x7f0000000980)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0xa2e6) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000180)={0x2f, 0x4, 0x0, {0x0, 0x3, 0x7, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2f) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000640)=ANY=[@ANYPTR=&(0x7f0000000540)=ANY=[], @ANYBLOB="000000000000000000000100"/24, @ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYBLOB, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/166], @ANYBLOB='\x00\x00\x00\x00']) 17:45:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x4, 0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000100)={0x342, 0xffffffffffffffc0, 0x401, 0x3, 0x19, 0x5, 0xffffffffffff446a, 0x1, 0x985a, 0x8001, 0xfffffffffffffffb}) ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f00000000c0)) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x3) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote, 0x1}, 0x1c) r3 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0}}], 0x4000000000000d0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 17:45:27 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:27 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:27 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:27 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:27 executing program 4: r0 = socket$unix(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x63) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r0, &(0x7f0000001800)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) 17:45:28 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:28 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003300000018000000020000000000000000000003000000000500000002000000001000000000"], &(0x7f0000000140)=""/156, 0x32, 0x9c, 0x1}, 0x20) 17:45:28 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) [ 164.983665] IPVS: ftp: loaded support on port[0] = 21 [ 165.060884] chnl_net:caif_netlink_parms(): no params data found [ 165.093015] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.099545] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.106706] device bridge_slave_0 entered promiscuous mode [ 165.113457] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.120005] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.127100] device bridge_slave_1 entered promiscuous mode [ 165.145809] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 165.154953] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 165.172709] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 165.180374] team0: Port device team_slave_0 added [ 165.185774] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 165.193104] team0: Port device team_slave_1 added [ 165.198488] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 165.205727] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 165.259562] device hsr_slave_0 entered promiscuous mode [ 165.296552] device hsr_slave_1 entered promiscuous mode [ 165.346776] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 165.353716] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 165.367655] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.374049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.380727] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.387118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.419760] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 165.425845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.434018] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 165.442456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.450378] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.457322] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.464201] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 165.473875] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 165.481286] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.490146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.498053] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.504505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.513803] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.521937] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.528331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.548096] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.555824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.563710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.571458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.582215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.592598] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 165.598739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.605707] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.623079] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 165.633019] 8021q: adding VLAN 0 to HW filter on device batadv0 17:45:30 executing program 3: socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.events\x00', 0x0, 0x0) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000580)="eb3c90656b09002e666174000204010002000270f3f832afc3ca5152eb9baa2714e4be223515742ec6a4871658ff34df5d9311b992614aac48ef2dad70069be96f5d87e8a78d8c0bf9d64e3d04e35ce914fcae84f9b771b76bfb00193534651ae504953de6da13a2c2296e5d2ee1ea004e4995852ca5761606b685102610a3d346f5c71072ec0f333ae626499c313faa84c06a2bf2ece14259e0f6f300f760673ad524129acfece73ea791f805f546ae2642c22d7d5386033a34820ed6b8926b3619249b8f467a0184d9fa30c27e38e85ad5e8b8feddb06c192d46cc57d65ad082f9a3e84226a3be7e28d6793e97e838c2dddcf4578b8e1451e02ea3c3e3fc792a48e81a", 0x104}], 0x0, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, &(0x7f0000000140)=0xfffffe88) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 17:45:30 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:30 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0xd2, "3d291db7208def41dc2366035548f221571aa313a1f3a2428aaf47d4868abd9dd962cd7650b6755818e7dd64712d1dfb469e53e8a4655b428163338214e3b631dc6abe9b217ae268027023d542ae5a097196f7ce05554c5ab93987ca7ce49771b68ca22298e77bc44550cee7d46e77757701eac854fa8b4352b498314b39a9d80774dc956ba2a1dba8f4032224dceff661273b1d7d645265c8cb3c3e92f58da6fc4da223f94b5cc381414f2a8374d8c12df90e8b2a907524b5c6d32a4ede3af9592fe33f6f239c268c318481399b6ce75078"}, &(0x7f0000000340)=0xda) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={r1, 0x3fe, 0x10, 0x2, 0xc1}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={r2, 0x9, 0x26e, 0x9, 0x4, 0x9, 0x7fff, 0xc3c2d11, {r3, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xa6d, 0x0, 0x20, 0xff, 0x4}}, &(0x7f0000000200)=0xb0) ioctl(r0, 0x40084146, &(0x7f0000000000)) 17:45:30 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) unshare(0x24020400) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x104, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'teql0\x00', 0x100}) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000001c0)={{0x2}, 0x0, 0x8001, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0x100, 0x5, 0x100}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00'}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000002c0)={@remote, @rand_addr="fbd863e2c2059d42f000b6e7d490d105", @mcast1, 0x7, 0x6, 0x8, 0x400, 0x1, 0x41000000}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgrou?\x00controllers\x00', 0x0, 0x0) creat(&(0x7f0000000400)='./file0\x00', 0x10) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040), 0x4) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000100)=0x68) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) 17:45:30 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000480)='/dev/input/mice\x00', 0x0, 0x800) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000200)="b9800000c00f3235001000000f30c422d9bb5294b977080000b8b97e0000ba000000000f300f20e035040000000f22e02e0f216d65672e64400fc73ec74424003d000000c744240200800000c7442406000000000f011c240f791b440f79d8b9f70b00000f32", 0x66}], 0x14e, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f]}) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x0, 0x91]}) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000001c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/context\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f00000004c0)=0x0) r7 = getpid() kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r4, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x36, &(0x7f0000000380)=""/120, &(0x7f0000000280)=0x78) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000040)={0x0, @speck128}) ioctl$KVM_RUN(r5, 0xae80, 0x0) fstat(r3, &(0x7f0000000400)) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000000)={0x2, r3}) 17:45:30 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:30 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x3, 0x0) getsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r3, r0}}, 0x18) 17:45:30 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:30 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:30 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 165.933880] FAT-fs (loop3): count of clusters too big (11481598) [ 165.946416] FAT-fs (loop3): Can't find a valid FAT filesystem 17:45:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000005035e9a31c400020ff00000000000069703665727370606e0000000c0002000800030000000000"], 0x40}}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000140)=""/255) [ 166.024020] FAT-fs (loop3): count of clusters too big (11481598) [ 166.041061] FAT-fs (loop3): Can't find a valid FAT filesystem 17:45:30 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 166.093906] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. 17:45:30 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$VIDIOC_ENCODER_CMD(r0, 0xc028564d, &(0x7f0000000000)={0x2, 0x1, [0x6, 0x8000, 0x2, 0x9, 0xac79, 0x8a, 0x7, 0x4841]}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80044d00, &(0x7f0000000040)) 17:45:30 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:30 executing program 5: r0 = memfd_create(&(0x7f0000000300)='/dev/null\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$bt_cmtp(0x1f, 0x3, 0x5) r3 = shmget(0x3, 0x2000, 0x0, &(0x7f0000000000/0x2000)=nil) shmctl$SHM_LOCK(r3, 0xb) getsockopt$sock_timeval(r2, 0x1, 0x56, &(0x7f00000001c0), &(0x7f00000000c0)=0xfffffffffffffd33) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) utime(0x0, &(0x7f0000000280)) [ 166.164798] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.266931] audit: type=1400 audit(1567014330.629:48): avc: denied { create } for pid=8119 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 166.320072] audit: type=1400 audit(1567014330.679:49): avc: denied { map } for pid=8119 comm="syz-executor.5" path=2F6D656D66643A2F6465762F6E756C6C202864656C6574656429 dev="tmpfs" ino=29658 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 17:45:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f0000000180)="52eb7eb5828985dd897bc622ec6689dee01eeecdfbb0bb14d0b9310257318cb6803e63400a3e57f4281982ad6b643cc747cd"}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x101000, 0x0) ioctl$CAPI_GET_SERIAL(r3, 0xc0044308, &(0x7f0000000200)=0x4) ioctl(r2, 0x1000008912, &(0x7f0000000140)="c0dca5055e0bcfec7bf070") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000300)="c4814de238b9a50a00000f32c744240048000000c744240200180000ff2c24400f793b0f381e1dfb7f0000b9590900000f32c42319681416ba65f3410f1ec52667477700450f015e00", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17:45:30 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:30 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000080)={0x5, 0xf41, 0xc00000000000000, 0x5, 0x8001}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='timers\x00') preadv(r1, &(0x7f00000017c0), 0x1d0, 0x0) pipe2(&(0x7f0000000000), 0x4000) 17:45:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB="8e62d9c19823332a"]) 17:45:30 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x10000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x80, @mcast2, 0x100}}, 0x3ff, 0x8}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={r1, 0x3, 0x7, 0x8, 0x1, 0x9, 0x7, 0xffffffffffffffff, {r2, @in={{0x2, 0x4e22, @remote}}, 0xfffffffffffffff8, 0x6, 0x0, 0xe1, 0xfffffffffffffff8}}, &(0x7f0000000300)=0xb0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x0) close(r3) syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000080)) [ 166.359100] audit: type=1400 audit(1567014330.679:50): avc: denied { map } for pid=8119 comm="syz-executor.5" path="socket:[29783]" dev="sockfs" ino=29783 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 17:45:30 executing program 3: r0 = socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup(r0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r2) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f00000000c0)=""/108, &(0x7f0000000140)=0x6c) 17:45:30 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:30 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[]}, 0x78) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) [ 166.495701] audit: type=1400 audit(1567014330.679:51): avc: denied { read } for pid=8119 comm="syz-executor.5" path="socket:[29783]" dev="sockfs" ino=29783 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 17:45:30 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x400000, 0x0) ioctl$sock_bt_hci(r0, 0x20c28300e0cd2b84, &(0x7f00000000c0)="449429004a3b059978c5ebda5873036cd6f5ac84a26075dccb2df130f1df15d2a40cc61f67026ea94b1d98c33bd68e4e0aedb4b3b01c2475b4032aa0c1b7806ee1eaf74f658eb9e3e452179a5d3380eab8861b6da8490bae8197f12397492f2992493ddf0ec5e4ff4f90d2028cf5a7ae5c1e7892cf746b7bf3b5cfff9eae6129") r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000140)={0x0, 0x9effffff, &(0x7f0000000000)={&(0x7f0000000200)={0x3c, r3, 0x439, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}]}]}, 0x3c}}, 0x0) 17:45:31 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000100)) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000280)=0x0) syz_open_procfs(r2, &(0x7f00000002c0)='net/route\x00') mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) connect$inet6(r1, 0x0, 0x0) fallocate(r1, 0x10, 0x0, 0x10fffe) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000180)='./file0\x00', 0x8000, 0x8, &(0x7f0000000680)=[{&(0x7f00000001c0)="bff1d7d78c577e068eca49a81f0f401270efb2033356939cee68e2f90ff82a2f8f0ef1e2b0b5334cd7352bf7505cffdc042b95be7c226d1b67d86c869206105472efc46aa9cd330eb9e4307e94a392a857594cc7385d0910", 0x58, 0xffff}, {&(0x7f0000000300)="d2561416d00c586e099f499496d80e1d328a06f0ad1ef02cadd4c5952c5ac150b8ca6aff58bdc10b6392ff0566152a76a910b0011e8da63aaa3f875ff37d965f5b8ecd461507dcf32d4821c21879b96d48570a0264edd0e35b333131c9c4831f105fc2261d90", 0x66, 0x9}, {&(0x7f0000000240)="75a4c5b5", 0x4, 0x200}, {&(0x7f0000000380)="b239a6ed52af2c891435cd8c14355c22d02756c61642cfc0ae5951f052fa19c0f96a5286ca7a42622ba79aad0639e1734b7750136c5856eb8845a86342e432", 0x3f, 0x7ff}, {&(0x7f00000003c0)="1083704522fa476c54e0e2643e275b6bea13248b2001ade6be84daec9d0a5bf6e07d712ef72627ba8e4668056500cfbc4f62d9aa5078b281022e324395f019be5e068d9dcc106fffbfaa7846acab50736005f50a49bea2bae1576a4c26186b0dd6d5d76c7752ce8d661da739d80a018e510594d024417ac34babaa0c94e8116d7aca6d3349d5310a915fcadeb3abad5b302467708219f5dca194b47bdfce1b9b07736c62e088d96fb34f272cd864a99d798014770d51c790d38f29ce", 0xbc, 0x1}, {&(0x7f0000000480)="89930ee242950947aa473751f98f1a0800a775b3d8e9eeb6a43b4ca97ba353a790c31104a1ec14553da06576916454e04058100a3f0fd8e019d5d71b3d1030a910044b4597ea316316fd62fab29e6bb237c6d83155301e6ae6c6432e2792a126cf1be136b35ec6e08e65fa29d015d4e83b19bf9fef590b72c1c456d7a649a7e1df391bc15ba1126f45b385a21df2b59a298b34f3690fb8d4a8d5ba9c3223163942e27ee99a0b3d57475151ad2989f943f2d44fbe54206d2dfbabc7ce6c371e39a38a0872f957ee3e5364ed35d8a5d8d37d3ba171417c4e", 0xd7, 0x401}, {&(0x7f0000000580)="bfde8bb93f71376cc2981159218cb4915c8f8e5c9f04dfaae87c912e149cd23dd68371e3c69539a454447eb91064acec", 0x30, 0x8}, {&(0x7f00000005c0)="86de09a2c61f40a522e4f4d4bdd59b0168701183a4b37d074177741e4536d2b5d8d85db1c538b781e419b6ac238f23144d85df8b735760ced0eafc0a8bf8d1911eb5c62aec0ee86bf7c66d22fa027c87e581289504dc81e39279c934a1301eb04daa09a85d5477af82ee75fb33eb67a91fde191b4260ecf20a24c46c2b0166fbebe0b5fa42b3a062", 0x88, 0x2}], 0x20000, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 17:45:31 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000005c00), 0x0, 0x0) 17:45:31 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 166.665449] IPVS: Error connecting to the multicast addr [ 166.744624] IPVS: Error connecting to the multicast addr 17:45:31 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x10040, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000814}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xc8, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'hsr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="34a74f8cd11ed375e2936639a87d57a6"}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfffffffffffffff7}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x800}, 0x40) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x1, 0x1, 0xffffffffffffffff}, 0x14}}, 0x0) 17:45:31 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[]}, 0x78) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:31 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:31 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'yam\xdd\x02\x0e5\xc3\x02\x00\x1e\x00\x00\x00\x00b', 0xc00}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x800454e0, 0x0) 17:45:31 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = getpgid(0x0) r2 = syz_open_procfs(r1, &(0x7f00000001c0)='net/ipx\x00') write$P9_RWALK(r2, &(0x7f0000000000)={0x30, 0x6f, 0x1, {0x3, [{0x100000010}, {}, {}]}}, 0x30) 17:45:31 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x400100, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x1, 0x4) io_setup(0x1, &(0x7f0000000100)=0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000080)={0x0, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{&(0x7f0000000140)={0xa, 0x4e24, 0x7fffffff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000280)="43d035cd025977df3126a6c4349940ce425ae4264219a4068d13f76daad1833d8baa199c9d20f15e901d8e11cce305138780265d35de5b2c29271d0e3d09feb6e3146b199f2c24a0276d03957850f4b9750528840cdd630b630a7046ccfffb44895f146b68253fca850a13862248dc2ec60e36f7d8e0935154fd6d7a061e45452453753454", 0x85}, {&(0x7f0000000340)="c5ac6567f307f89a285608010dc89c92a1e729519f617c94b9736b5170c7a2e14885aa35def0f1b65973dbaf5bd77a73c4465a1583ee5b7020cc87cc246aa7c2cff892d929ad6294a82193a9522e4e30227f00664bf8687a91e024afd834bbefacd06219e932d7c78667cfbccb95ee6a2b0574b28a21cb5878715b12150b2994ec509d5af054b2d9bee9f9296233f6bd0ed304aab01ab695804bfcd9e04cc8ba0ccdf8dd1a2d4e5046ad67d94c388a3676fc932010b3bbb551e4ffed65b2006848414608a6", 0xc5}], 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x98}}], 0x1, 0x4000) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000440)='/dev/dlm-control\x00', 0x280, 0x0) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000001, 0x0, r2, &(0x7f0000000080), 0xfdef}]) [ 167.006601] audit: type=1400 audit(1567014331.369:52): avc: denied { write } for pid=8185 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 17:45:31 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[]}, 0x78) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:31 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x6, 0x209e1e, 0x3, 0x1}, 0x2c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000f0000000f000000002000000000000000000000800000000000000000000000900000000000000000000000b00000000000000000000000c000000000000000006000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000006040000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000005000000000000000000000000000000000000000000000000000000000000000005"], 0x0, 0x101}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000b40)={r1, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r2 = request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='@)\x00', 0xfffffffffffffff9) keyctl$describe(0x6, r2, &(0x7f0000000440)=""/204, 0xcc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r1, &(0x7f00000000c0)='B\"\f\tt', 0x0}, 0x18) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000100)=0x8, 0x4) 17:45:31 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 167.221858] audit: type=1400 audit(1567014331.599:53): avc: denied { map_create } for pid=8207 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 167.292700] audit: type=1400 audit(1567014331.599:54): avc: denied { map_read map_write } for pid=8207 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 17:45:31 executing program 5: r0 = syz_open_procfs(0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000100)) write$P9_RREAD(r1, &(0x7f0000000200)=ANY=[], 0x5aa78d33) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000280)=0x0) syz_open_procfs(r2, &(0x7f00000002c0)='net/route\x00') mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) connect$inet6(r1, 0x0, 0x0) fallocate(r1, 0x10, 0x0, 0x10fffe) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000040)) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000180)='./file0\x00', 0x8000, 0x8, &(0x7f0000000680)=[{&(0x7f00000001c0)="bff1d7d78c577e068eca49a81f0f401270efb2033356939cee68e2f90ff82a2f8f0ef1e2b0b5334cd7352bf7505cffdc042b95be7c226d1b67d86c869206105472efc46aa9cd330eb9e4307e94a392a857594cc7385d0910", 0x58, 0xffff}, {&(0x7f0000000300)="d2561416d00c586e099f499496d80e1d328a06f0ad1ef02cadd4c5952c5ac150b8ca6aff58bdc10b6392ff0566152a76a910b0011e8da63aaa3f875ff37d965f5b8ecd461507dcf32d4821c21879b96d48570a0264edd0e35b333131c9c4831f105fc2261d90", 0x66, 0x9}, {&(0x7f0000000240)="75a4c5b5", 0x4, 0x200}, {&(0x7f0000000380)="b239a6ed52af2c891435cd8c14355c22d02756c61642cfc0ae5951f052fa19c0f96a5286ca7a42622ba79aad0639e1734b7750136c5856eb8845a86342e432", 0x3f, 0x7ff}, {&(0x7f00000003c0)="1083704522fa476c54e0e2643e275b6bea13248b2001ade6be84daec9d0a5bf6e07d712ef72627ba8e4668056500cfbc4f62d9aa5078b281022e324395f019be5e068d9dcc106fffbfaa7846acab50736005f50a49bea2bae1576a4c26186b0dd6d5d76c7752ce8d661da739d80a018e510594d024417ac34babaa0c94e8116d7aca6d3349d5310a915fcadeb3abad5b302467708219f5dca194b47bdfce1b9b07736c62e088d96fb34f272cd864a99d798014770d51c790d38f29ce", 0xbc, 0x1}, {&(0x7f0000000480)="89930ee242950947aa473751f98f1a0800a775b3d8e9eeb6a43b4ca97ba353a790c31104a1ec14553da06576916454e04058100a3f0fd8e019d5d71b3d1030a910044b4597ea316316fd62fab29e6bb237c6d83155301e6ae6c6432e2792a126cf1be136b35ec6e08e65fa29d015d4e83b19bf9fef590b72c1c456d7a649a7e1df391bc15ba1126f45b385a21df2b59a298b34f3690fb8d4a8d5ba9c3223163942e27ee99a0b3d57475151ad2989f943f2d44fbe54206d2dfbabc7ce6c371e39a38a0872f957ee3e5364ed35d8a5d8d37d3ba171417c4e", 0xd7, 0x401}, {&(0x7f0000000580)="bfde8bb93f71376cc2981159218cb4915c8f8e5c9f04dfaae87c912e149cd23dd68371e3c69539a454447eb91064acec", 0x30, 0x8}, {&(0x7f00000005c0)="86de09a2c61f40a522e4f4d4bdd59b0168701183a4b37d074177741e4536d2b5d8d85db1c538b781e419b6ac238f23144d85df8b735760ced0eafc0a8bf8d1911eb5c62aec0ee86bf7c66d22fa027c87e581289504dc81e39279c934a1301eb04daa09a85d5477af82ee75fb33eb67a91fde191b4260ecf20a24c46c2b0166fbebe0b5fa42b3a062", 0x88, 0x2}], 0x20000, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 17:45:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000240)={{0x20000000000, 0xfffffffffffffffe}, 'syz0\x00', 0x1}) 17:45:31 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:31 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500000000000000c5000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x5, 0x338, &(0x7f000000cf3d)=""/195}, 0x48) 17:45:31 executing program 3: r0 = memfd_create(&(0x7f0000000080)='&lo(#securitylo\x00', 0x8000000017) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x106, 0x5011, r0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ftruncate(r0, 0x0) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x2, 0x1, 0x80, 0x400, 0x100000000, 0x1ff, 0x81, 0x7f, 0x10000, 0x7, 0x3, 0x4}) 17:45:31 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB]}, 0x78) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:32 executing program 3: socketpair(0x3, 0x1, 0xff, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) connect(r1, &(0x7f0000000200)=@ipx={0x4, 0x2, 0x7, "544eaf761912", 0x7f}, 0x80) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x1, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000000c0)=0x3) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x100, 0x88603) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000140)=0x3) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000300)=0x20, 0x4) getsockopt$inet_dccp_buf(r2, 0x21, 0xc0, &(0x7f0000000040)=""/118, &(0x7f0000000100)=0x76) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000340)={0x100, 0xb05, 0x1ff, 0x7f}) 17:45:32 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video35\x00', 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname(r1, &(0x7f0000000140)=@nfc, &(0x7f00000001c0)=0x80) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000000)={0x0, 0x4, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000400)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 17:45:32 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:32 executing program 0: r0 = signalfd(0xffffffffffffffff, &(0x7f00000011c0), 0x8) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write(r0, &(0x7f00000003c0)="c33f26dc11e6e0432a2014114a7e01a78612a67bdf1ee27e81e35c57ee375723bc6a951803d1c542d0e98a822e314413084bb1e96c1b92eccb694f3d53411fe09815a8bda0698f483a29e15ca0602f25ea0c0c9f3f9cd02ae11f0c4880322d681f53b5377dbbe7b62a238e8db93ca28fcc9f663bfc20147d2a55ca88a5df13880d9e5359ca83e55e29b90d63df5b70ffc93bd18e14865ed572ba500e7ff02083eab49cf95bc0a9acc5a56b89c07a6acbc86776f4f0417f19", 0xffffffffffffff9f) pselect6(0x40, &(0x7f0000000000)={0x7, 0x5, 0x1, 0x9, 0x9, 0x2, 0x0, 0x1}, &(0x7f0000000040)={0x7ff, 0xbc9a, 0x6, 0x2, 0x4, 0x7, 0x8, 0x2}, &(0x7f0000000080)={0x0, 0x8000, 0x9, 0x485, 0x0, 0x4, 0x1, 0x4}, &(0x7f0000000100)={r1, r2+30000000}, &(0x7f0000000180)={&(0x7f0000000140)={0x2}, 0x8}) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x480800, 0x0) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000200)="ada83a661ce165d638fd7d0f17b83ed5379dc00ee39578a46f2d7e5ef56c6e2e5c7604b9fee799d6d2f5e76386c6aaae824ecc7ccdcd51f01f423854b5ef1212ad010011463f658b6fd19b818dc13c4439c6285aedab3fbc8ecc0374da34035b91476d63b495b568ff0ab7fd128af851afc760141cd7a9") readv(r0, &(0x7f0000001400)=[{&(0x7f0000001080)=""/114, 0x72}], 0x1) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/status\x00', 0x0, 0x0) sendto$ax25(r3, &(0x7f0000000300)="0b18bb05644402a117223c65db7ec46f1a86053e85a03d99b7f35c", 0x1b, 0x80, 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f00000002c0)) [ 167.725564] mmap: syz-executor.3 (8233) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 17:45:32 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB]}, 0x78) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) [ 167.773841] vim2m vim2m.0: vidioc_s_fmt queue busy 17:45:32 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) [ 167.842019] vim2m vim2m.0: vidioc_s_fmt queue busy 17:45:32 executing program 5: r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x4000) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x3, 0x7f, 0x7fff00000, 0x7, 0x0, 0x9, 0x4, 0xd, 0x9, 0x242, 0x4, 0x4, 0x800, 0x2e5, 0x1, 0x401, 0x1, 0x4, 0x6, 0x8, 0x0, 0x1, 0x0, 0x6, 0x100000000, 0x40, 0x9, 0xfff, 0x0, 0x89, 0x7fffffff, 0x2, 0xfff, 0x5, 0x8, 0xfff, 0x0, 0x3, 0x0, @perf_config_ext={0x8001, 0x3}, 0x14040, 0x5, 0x3, 0x8, 0x6, 0x80c, 0xc1e}, 0xffffffffffffffff, 0x7, r0, 0x2) bind$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0xfffffffffffffe3c) setns(r1, 0x33df5f6ad650ebb9) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000140)) ioctl$TCGETX(r1, 0x5432, &(0x7f0000000180)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 17:45:32 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x20000, 0x0) bind$x25(r0, &(0x7f0000000100)={0x9, @null=' \x00'}, 0x12) creat(&(0x7f0000000040)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1003e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='ubi8'], &(0x7f00000000c0)='./bus\x00', &(0x7f0000000400)='ubifs\x00', 0x0, 0x0) 17:45:32 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:32 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000040)=@l2={0x1f, 0xffffdd86}, 0x2f5, 0x0, 0xffffff37, 0x0, 0x125}, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nfc={0x27, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="c109000800002f78100000e4ac141417e0000001e5de6a0c15965ff499f270a8b7f9d5fb4eeefb35", 0x28}], 0x1}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x800, 0x80100) write$capi20(r1, &(0x7f00000001c0)={0x10, 0x4, 0x41, 0x80, 0x401, 0x7ff}, 0x10) 17:45:32 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB]}, 0x78) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:32 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:32 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 168.464264] UBIFS error (pid: 8275): cannot open "ubi8", error -19 [ 168.498127] UBIFS error (pid: 8278): cannot open "ubi8", error -19 17:45:32 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @loopback, r2}, 0xc) 17:45:33 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x2ee, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x366) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:33 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:33 executing program 3: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB]}, 0x78) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:33 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e24, @local}, {0x1, @dev={[], 0x14}}, 0x8ffce2b15d284aed, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, 'bridge_slave_0\x00'}) r2 = socket$inet(0x2, 0x1, 0x0) timerfd_create(0x8, 0x80000) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000080)) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x6, 0x0, 0x0) [ 168.899977] audit: type=1400 audit(1567014333.269:55): avc: denied { wake_alarm } for pid=8300 comm="syz-executor.4" capability=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 17:45:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$getregset(0x4204, r1, 0x206, &(0x7f0000000040)={&(0x7f0000000280)=""/196, 0xc4}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0x400013e) r3 = fcntl$dupfd(r2, 0x0, r2) read$eventfd(r3, 0x0, 0xfffffda8) r4 = syz_open_pts(r2, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x111300}) 17:45:33 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:33 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x2ee, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x366) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) ioctl$int_in(r0, 0x5473, &(0x7f0000000000)=0x9) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) 17:45:33 executing program 4: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040)=0x400, 0x2) writev(r0, &(0x7f00000003c0), 0x63) 17:45:33 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:33 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, 0x0) r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:33 executing program 4: unshare(0xbc439991bbdd7259) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001040)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000f00)=0xfffffffffffffd81) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000380)=0x271) creat(&(0x7f0000000200)='./file1\x00', 0x0) waitid(0x0, 0x0, &(0x7f0000000240), 0x8, &(0x7f0000003cc0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000500)={0x1, 0x1, {0x2, 0x1, 0x8, 0x2}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000039c0)=[{{&(0x7f00000008c0)=@tipc, 0x80, &(0x7f0000000980)=[{&(0x7f00000004c0)=""/3, 0x3}, {&(0x7f0000000940)}], 0x2}, 0x3}, {{&(0x7f00000009c0)=@nl, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000a40)=""/205, 0xcd}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/252, 0xfc}], 0x3}, 0xffffffffffff1149}, {{&(0x7f0000003400)=@pppol2tpv3, 0x80, &(0x7f00000003c0)=[{&(0x7f0000003480)=""/155, 0x9b}, {&(0x7f0000003540)=""/94, 0x5e}, {&(0x7f0000000440)=""/64, 0x40}, {&(0x7f0000003700)}, {&(0x7f0000003740)=""/243, 0xf3}], 0x5}, 0x8}], 0x3, 0x0, &(0x7f0000003ac0)={0x0, 0x1c9c380}) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000180)={0x0, 0x7, 0x1, {0x8, 0x9}, {0x1ff, 0xd37}, @cond=[{0x6, 0x9, 0x800, 0x5f, 0xffffffff, 0x3}, {0xb9, 0x5, 0x0, 0x2, 0x6, 0x7}]}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ptrace(0x421f, 0x0) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r0, 0x0, 0xb, &(0x7f0000000000)='/dev/audio\x00', 0xffffffffffffffff}, 0x30) tgkill(r2, r3, 0x2c) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80044dfd, &(0x7f0000000080)) 17:45:33 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x2ee, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x366) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:33 executing program 3: r0 = add_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="fb0eb85f6fb222367b22e96577ca3b5ce0afa509c959b2e1834009f601aec89b68e724f6b8ee9370ecc6f0785c4897acb611903c211a73405c712cd3d5811f264c019d178111e6bcfc9a15034bcf0a2c2f9df23ab9228951e4f6bcf1e636e7432bf23e04e0d1088634cecbb96ac99fc13c5f68c51e78392c54a687f8ad05e103ad0d48ba60189b57", 0x88, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, 0x0, 0x0, r0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/attr/current\x00', 0x2, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, r2) bind$x25(r3, &(0x7f0000000040)={0x9, @remote={[], 0x3}}, 0x12) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)=@secondary='builtin_and_secondary_trusted\x00') 17:45:33 executing program 5: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000100)='./file0\x00') ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000280)=""/103) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) open(&(0x7f0000000380)='./file0/file0\x00', 0xf0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) renameat2(r0, &(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f0000000000)='./file0\x00', 0x2) 17:45:33 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x0, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000080)={0x7b, 0x5, [0x6e0, 0x0, 0x40000107], [0xc1]}) 17:45:33 executing program 4: unshare(0xbc439991bbdd7259) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001040)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000f00)=0xfffffffffffffd81) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000380)=0x271) creat(&(0x7f0000000200)='./file1\x00', 0x0) waitid(0x0, 0x0, &(0x7f0000000240), 0x8, &(0x7f0000003cc0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000500)={0x1, 0x1, {0x2, 0x1, 0x8, 0x2}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000039c0)=[{{&(0x7f00000008c0)=@tipc, 0x80, &(0x7f0000000980)=[{&(0x7f00000004c0)=""/3, 0x3}, {&(0x7f0000000940)}], 0x2}, 0x3}, {{&(0x7f00000009c0)=@nl, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000a40)=""/205, 0xcd}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/252, 0xfc}], 0x3}, 0xffffffffffff1149}, {{&(0x7f0000003400)=@pppol2tpv3, 0x80, &(0x7f00000003c0)=[{&(0x7f0000003480)=""/155, 0x9b}, {&(0x7f0000003540)=""/94, 0x5e}, {&(0x7f0000000440)=""/64, 0x40}, {&(0x7f0000003700)}, {&(0x7f0000003740)=""/243, 0xf3}], 0x5}, 0x8}], 0x3, 0x0, &(0x7f0000003ac0)={0x0, 0x1c9c380}) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000180)={0x0, 0x7, 0x1, {0x8, 0x9}, {0x1ff, 0xd37}, @cond=[{0x6, 0x9, 0x800, 0x5f, 0xffffffff, 0x3}, {0xb9, 0x5, 0x0, 0x2, 0x6, 0x7}]}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ptrace(0x421f, 0x0) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r0, 0x0, 0xb, &(0x7f0000000000)='/dev/audio\x00', 0xffffffffffffffff}, 0x30) tgkill(r2, r3, 0x2c) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80044dfd, &(0x7f0000000080)) 17:45:33 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup2(r0, r0) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = memfd_create(&(0x7f0000000300)='\x00\xb3y\xb1\xc4\xc5)\xa3\xc6\x9cjuu\xa1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00', 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='&\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000e1000000000400040008000600000000000800050000bd132d95000400000000000800050094b3b123"], 0x38}}, 0x0) r5 = dup2(r4, r3) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}) write$P9_RLINK(r5, &(0x7f0000000280)={0x7}, 0x269) clock_settime(0x2, &(0x7f0000000080)={0x77359400}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x16}) sendto$inet(r2, &(0x7f0000000180)="46f9b05cec91d82fe25e426a1bea11f7a27b634e44d22fc3a126a1e64f53aea3b51da0474aeea988f64508b33664214ad56072f9f596e559a33da472848daf71a1e873d004a8441c4b4b9fd6b8f2438d72a68723105d5711cca280298db821617fff19fb02d4a7517fd81330bd954c151807e48f58a55a4b35ff785bdada9bbae5e2f1ddaa6174bcaa7e394cd0f40ee67ead3c2ca4520c78ec64512b340cbfd0d5b56fd0dffe27727884df9c993b01443680d377c85da206d46c9c29f40d661a5bed7e5e103b3703e276812c18d3a451746ef062ba4ec5a27ca33dcddfba6867ddef69f5ff1f155084d627d3050ec4814fddc679f524b8c2b06340baef41d704efe4767652c0fe1a68ee1978c8460e80c1f557cb1fa93df1b1d4dc61ea351bb559bb79987db61275fddd7d8e1b2a248dda0813e826145a10c280fd06aa7a0c37efd34b24585ee662a1e36bc31eab771994a13501ca8aa226cd8852ed1571bf3b80dd24c41a2faa3934fae16e2a44f079c478de661c04ede2b66bf037ace685b9b45427df7249d8866c03d188030b030f0f70b0c76ceed462abbafe740e794dfec17d2d766f6799cf6da299aa7ec5a2c2df45bf73e611c8395bbb348c7db88d9b06cbd6fb4a2e117ae92b6af5e21c7a7ed79767c1227f3bab94d2f1fe8b7b62dc936d26dbc5135c0fd866775e9aa56b596a83cd012187b6e535debdc2714f882081245fda2adfe5552db4d108d8684280f2e84c92c72bae22ef4c774621f28063751a630a074f93e5b5fb95c7b98888efe2c44570249c67a51f244fac1f27d974a9b2cd4bac547bedbc830c7676a2ef732b1e8b7546ef34f978fa7bbb6e7e63bd1344fe2293a2ba85850ff36ed8276861b7e42b68964af24b60d5e131c1d8e8a59665c02854c58de427bf1f269bce315b1a264e1c7558a27cc410765516b37da4f78341b570b10a20ae4a90b6665107bfa549a03dd3c6796572edcc27629f2622c2f841c2488d6347116eebf121cacea6a2ea5a2ea0a47a477a618645d07dd65f60c9751123973ce52acd1ec2f39961e089cf9aca2ed18b49732a92ab6b5a76400fda53acff48f92e6a147b57fd7293bea1559c2838cce6b9c2c9dec6163e829e6d70475ccefe2f919871799019c644f5d1667c1e58cdf10f88f2c9758121ef66df4cb9448f3aecec7c46f854bae4a828516f2bc26f64172b51fc3dfcb74da6de58a195de35450a9ce7917244017cff25b36a101dcbd1946b596271dda3f3dcc21c317ca91fa9bff028dd64fc5be666c2aeaa4de73dafd6506424c5c9a1a805202f654ba77b5cbb445f2fd394018dcc11462d850b3f13d8d8a80138a628258d879cc90dbb6c7e00ad5f535bf76b5319eb9ba05f5ec635701ab301a698d7a78382fbc9cacd77792ae64b4bea8a50d48de6d01191e2fff7fae7a028422c3b4098235eb7460a32c7a1f8eb0dd410700d1c5586ce4e3abec78155ea9ea1f80f8b0e9a8a7750e6574a46d0e52dbfc0e390bd5a36d43269dc09aac3638a70040b7ca2d762f8424131b4dcca76ff51641aec7b5ae9ac4ddacb461f22cb39086aa343052a4db14a55a255ba44e022051564facd99c7a4335c0ae468fae95fd8933782e0743f1674186d5eb64967ef2a2a652ce3be8662a2a045864fdf1577898423345a10747bf5f93bb89d92d3719b3b6b911b313fbada9296b055333edbea4113644be055444f18aef9985de89c6f10cd9187446bc832a4055fc9608340851dd053f8af505bc9b424531998d9d228426708029ea949e640251af6eef7c2a1003dce79856a12c702930a18a83230dfa87e43003e6cfff51ad0ab2d13e5b83437af9730de4ec79196c8210f92c4d690c2c3de31b085e4a5f18ad191c0326c728f3ebaf01e24ace6550118efd591824c639e6d5c2ca7fdc37013bcfe50f408abbdbe902d8a353d584d22c5748a37469106dd3702a67fe9d98222880e7d0ebee91b54e7993b090e01025b3976016b63f0f2597c77b2dabb34cde55f6e3f3c3064ac4c5593c20b3fa731da3273cc250dcc4468cb5dac7f9f3e655e52e4ee8f116d5389127073d3d49910d7a04d3dc5b020ecbe128afe4b65621be94265f2c059791204a953a476e872514dc450f23ee73de0043615a75a9e430763faa47ebd9e9bcaea6d293103f5f1629ce05e551eca57a28d0adfbfb3ef1d06156be2c1a96ad708ce0bca9d0879ba6298d1598d6741afa08ac882cb7fad2658cb383bc2946a6f686947612d7a4fb11d6bb5b8dd0c1cf6c364cca0c02fb58ee54dfb008ffdd3af88a33690bbe4ed07f638b4b5ea5ec9181bcadbe6b35983781715a41a5e29d83ea091ebd28c1ed0cf30cd6959f4aacd7fccab1141d0103b78dd0b06fdda8bdb68fc6efc54daab1dfd6682c129e43f8d947f99c8af7d6f591a7277fa543e062e786f886df6aa5ecaf5e0ba1997c4119427d24e57ab37180630a3f5409b369d9d43576f9f87ca15bf7dcf79a08bcde1ea84df3fe768da061888b7d89da4656ac86b60155f4789224f977fbf008c77ef58da075b059e68ecde878712f2149c31090c6a07d9ea35040208cc00aec9cb5d197ba499555036663a1dbfc26132dcceec5f7ff38378d32749614aace5d11494bcacd6716ce50b77608fd73761a4af9fad1c3391dd510ad2f6b722f065a432c0dc7c2dcba474fdbad907d8a266c79ba29201c8b3fbba357bea1940382537df34b99a027fc29b5771c3c259025f298b601c5dbe869c2f667cf69179f6fadb8e5cd83e0669cb28fbd86f8d102280121eecea4a5210c652e5bac8a63d38ec848c84973455a78a147593384d1769c996a583faaf7bb9e792b54519098cdc6b4106998e909dd4e75161854a8d622fe7dfc7fd4696d134d2aa731aad4a63ea4b69ca73360dd32c720cc62961b5f6d2a3ef1b885dac6419cb78713c85ef5e285f30d94d51f6cb7c92d7359a661df20e66a18925d62b7f4eedf9c61fd88b6b84125470c30bcd64b6092ad2716a50c54450638eb3308796449a9de90068c22cb895b7c27af650aa3e719d05faf0fdcd8dd3264e9d97e44a3896427c76743c9fa9fbf32edd51338c9136c63ae3a242e47973e7cb49a4220449e1f016a723e02d0fbb3c36a757e0c18a275c5f1b0bdcde74f789d8610c60e23dfa860de9df66c5c4d86a70e80506152ef77aac6833dfbce1534bae64c338c6417917324662681a80c2bd407203c75b8dfbb7a3f1bdf71493d946cce2018afe9928c1fd7f83b00f2458cc1f5591c52f99e44f19cc3420c25d3f896ff8eca69541221d6a911e42700f696800b0b02ffabbc50391786d28e49fc395ce7790a9656a035cedf5183697929a338273a9b66b67b6c800dfa88f63092878be392f6ce2c4fd934d2209e910c6d0c753e78d37e39ce2028ac787f0d41fcc32e8cc8761578328a6a10702bcfe7c569e8367193b7e9f88cda8b79433fe01dbd8c21b3dd0260f0a09ed8345eceeca4b877c88f57a93712eec677637fb188eb36adce3c38a729edc322f56d32dcc43192949b5dd392b87b2f740e7f0b7082b8c730c03e9cdb910e82cf697817417e119328067ffc5b788ddd088f608bc6b79aa4d1e5dcfc14ef7bd6134998236ee0f6e68a3a42108f3cac2249a6c0c93d38f3677b809a0e4d5f6ecc90ae1737159aee2cb0e062d414d205598b0a3de36ac3aa50eecfa602ce9e14e7a48aa81f90550e0ca2f5c072e7d4cbc65e137827b657e726231c80a7bea3d112ae2ad290b7aae72f2ecf446039855d0c4bcafd8ffbbb4b5ec50b193f151af15543e0fb7e6183450a67f39c253dee95b5d410725f4cb651de0c35a9399896c994fec804200b811564c9bcee8a187303add7b57d40a303e2dd93aac108cbe2e0f17edd03963b3ad4576e5d2336ec8e33ce12c2054a1bba06a67c7e09a2872c2c92f6eb5239061041fbb505e36765fefd7220f98d966ee8ac9e47b2489040e9879f378abd635cb26b5e1f5753d914b75541d7d3f7560abe59947caaf050445ee50cf0d79d2d258abfaa75fbe10b512cc7199313dc13053acfa902fd23ef382c73788de130bf8b76ef8e681efc1bbb9e499f16c05a2968cdf96acad31e606c7a60eb9e465e892a0be4a91b7c28d3a15cf8d2bf616ceeb69ba38e2ebd89bdb44bb723b55dbf1480e241db59c00e18dad17b2a6cdac389b85dcca1e1d10e227bee2454853593ebd8765999f546d10fe004034992e9410a609e1891485ca3acb6584c388008441e5d1010680c0c8e4f328a13099df74c00e8380e02d426d348bf2f189dde92fdd521d113eeecee01c19c7fa8f71e602e921923cdce2d68d2f5d8569f9c4a65485c8303912456d719f1d753d85e16aafa6efc37f9191c4b900af3027a88473516d42a4c40fe3fda8e9308cf7e691b7fe31dafee41f07aa498cc9c6fbf96730b3b2d8126cde7af82f98f67c5f98bf7ee7d0777162bc164351b00fb37746ce8aee3c90a6fb473951ce3adad08acaa825f1f9bb22d735039b57a763300298980d6a88279a4b8547e91919e9fb9a5423de33129d82b43309b0fc2cca6ffb92fa504fa53eec65a7fa7b253e60747a472780d6d5a33bfac8ca685ee8fb3c126a1647579f8a557cd37509cbced32036498037d884fc9987ee573154ba36a23df66fa9965bd942d3265f6705c012754d4fcbe50e24a9b83af202496179a585604a7bf22903a132e88878b0be2fb68dc046741c7b5fb6075e124cf27efe5d4b845572b1a3135a9c09f57664f827c9936c08d4a5c7f228e30e2bd7c497d05bf355265446da8f92df1ea07065e0bfebb99d1d08000a1aa063db515a9f8233a78ff653106b551c9c9d2743b28b81e3fc850894c30d004fe7763f4211e956d37fc9215ad821f8c451671c7e95c2ab0dba30a29bcad6ce9bdcd395dcb519280c9cb033223337ea2bc90c7a9bb5f872b8e6ae09ecfe00f3e6321d8212542c622b050782342c8c68687561868b7f8cf698fdcac93d612d164308448e5ebf4da4a7128f93729e5c28219321b63d8b5813e1674d54e3c31be132e1b60df2446f4a2d7ff4bb96a22523ccab0e51d9466f59607ae6bafa781002cf0c82bcfd0e42eb89953b514946f95d6031b70edfd315d77127ff7c1e34e772b296db7c3738e4988419ba1d49f204821a0f3a21fdfab7e0b1975682c70d572ffc22cfbb0076fe943d4555b362c45d85d24bd97521bfcc3e9fa9e414d7bdbf1244e01b2fb9086b8c3113232d8c08147a43f3ac86223fb9d2875f77afb211d753d3c236862329de4e75d4b52909cb7e88a6ad49b20fd4e4b11e89fc49f3a01a07629d2bc991df07a9826c5df5d777ed3c848c2d64bc6423663cfb90d12a5a1e86238a4d978a27d73459c9ff62624acbb63dde54cad547d8678ea3ade3b751d16ec6a44854bfed8784dd5163df4f3413c11f1e475d076e69adaaa1f93ce21678fac608a5d71b42a458559c8c50d142d0b08d2588563106d911beaacc84d2801f7d5af9b8a6651127cf0d1364f5ecc7cb424bf46a01dc9e3da5aaf96709e82e01282bd2492c24465b318636f8a0feb9365ad12f0b5733b0342d4bcb069b277f3fbc3bdaa9ecc1143dca9ceb2d39868960d36de0e911a61d009355c47f2c0232d007a22602d85de6d7892d7ab59e04f9eb66e6b2e0d6f689099e3a2e71d3310ad5982809889b0daf561858ad7f4f595ff536a3ffc56f7b1d60eaa50774f2b8e4783c24fbcb7076a5bbf7e6061deaaa4c52e2d78ba6cb2c4dd2e5ee8a6b9b2d3818669211733080ee6fe5043ed6cf17ee3b", 0x1000, 0x8000, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) 17:45:33 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x465, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x4dd) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:33 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x0, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 169.553995] kvm [8353]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0 17:45:34 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:34 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x5, @dev={[], 0x1c}, 'bridge0\x00'}}, 0x1e) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0xcd79973eb5ca6caf, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmmsg(r0, &(0x7f000000d180), 0x33b, 0x0) 17:45:34 executing program 5: getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r1}}, 0x10) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) r4 = semget$private(0x0, 0x3, 0x1) semctl$IPC_RMID(r4, 0x0, 0x0) prctl$PR_GET_SECCOMP(0x15) r5 = dup3(r2, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x3c) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x33c) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r6, r5}}, 0x18) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0}) close(r7) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x127) sendmsg$tipc(r8, 0x0, 0x5c00) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f00000006c0)) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x810, r5, 0x0) 17:45:34 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x465, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x4dd) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:34 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x0, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:34 executing program 4: unshare(0xbc439991bbdd7259) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x8) r1 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001040)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000f00)=0xfffffffffffffd81) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000380)=0x271) creat(&(0x7f0000000200)='./file1\x00', 0x0) waitid(0x0, 0x0, &(0x7f0000000240), 0x8, &(0x7f0000003cc0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000500)={0x1, 0x1, {0x2, 0x1, 0x8, 0x2}}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000039c0)=[{{&(0x7f00000008c0)=@tipc, 0x80, &(0x7f0000000980)=[{&(0x7f00000004c0)=""/3, 0x3}, {&(0x7f0000000940)}], 0x2}, 0x3}, {{&(0x7f00000009c0)=@nl, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000a40)=""/205, 0xcd}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/252, 0xfc}], 0x3}, 0xffffffffffff1149}, {{&(0x7f0000003400)=@pppol2tpv3, 0x80, &(0x7f00000003c0)=[{&(0x7f0000003480)=""/155, 0x9b}, {&(0x7f0000003540)=""/94, 0x5e}, {&(0x7f0000000440)=""/64, 0x40}, {&(0x7f0000003700)}, {&(0x7f0000003740)=""/243, 0xf3}], 0x5}, 0x8}], 0x3, 0x0, &(0x7f0000003ac0)={0x0, 0x1c9c380}) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000180)={0x0, 0x7, 0x1, {0x8, 0x9}, {0x1ff, 0xd37}, @cond=[{0x6, 0x9, 0x800, 0x5f, 0xffffffff, 0x3}, {0xb9, 0x5, 0x0, 0x2, 0x6, 0x7}]}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ptrace(0x421f, 0x0) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r0, 0x0, 0xb, &(0x7f0000000000)='/dev/audio\x00', 0xffffffffffffffff}, 0x30) tgkill(r2, r3, 0x2c) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80044dfd, &(0x7f0000000080)) 17:45:34 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_elf32(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7fff, 0x3, 0x1, 0x100000000, 0x2, 0x3e, 0x3d1f, 0xaf, 0x38, 0x3b8, 0x800, 0x1, 0x20, 0x1, 0x9, 0x5, 0xaed}, [{0x70000000, 0x7f, 0x2, 0x10001, 0x0, 0x3b689fa6, 0x9990, 0x2bf5}, {0x5, 0x401, 0x8, 0x2, 0x100, 0x80000001, 0x24, 0x8001}], "8ded40be98a389e1ef7748e06decde1a00d0d59c7779fe577cf63733cbd502e233aaded488b9a6bd0cfcbac8e7e886d885e50853fea8d5762b76e4803b44e8c99c77d1325c7df93bef50e1286568999d60d216cd23fb07e921bc3a164007b1a75092180379cc7f13ad2e2e9ada69cd2d1189ec662a13cb1c73f1b0002de347a7653e", [[], [], [], [], [], []]}, 0x6fa) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000240)=0x1, 0xed) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x3be) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @initdev}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000013, &(0x7f0000000100), 0x1042b) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) connect(r0, &(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0x80) 17:45:34 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x0, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:34 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x465, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff020000000d0000000000000088a8736974300000000000000000000000006c6170623000000000000000000000007369743000000000000000000000000074756e6c300000000000000000000000aaaaaaaaaa1fff00ffffffff0180c200000f00000000000000001809000068090000b0090000616d6f6e670000000000000000000000000000000000000000000000000000008008000000000000040000000300000003000000080000003903000000000000800000000008000001000000000000009e030000010400005f0000003f000000008000000400000006000000400000008100000000080000020000005a0700000000000004000000ff0f0000090000000500000009000000ff0f0000add800000100000001000000010000008100000018bb00000500000001000000ff07000003000000fdffffff00080000ff00000004000000000001000700000005000000070000000c0a0000060000000600000001000080ff7f00000500000001000080ff7f0000ac000000070000008e900000080000004a0000000800000006000000ff010000c016000002000000ffffffff05000000ff0700000100000000080000f3000000030000000000008088000000e502000081000000018000000600000005000000008000000500000000000000a48b000000100000b971000044010000b44d000000000000ff0f00001f0000000400000001800000ca00000000100000000000000000ffff0000000004000000080000000200000006000000dc0b000002000000ff0f000001000000ff0f000004000000020000000004000002000000008000008000000009000000000000008600000007000000050000008000000006000000ffffff7f010000000600000000800000720000008100000005000000fbffffff020000000600000004000000000000000100000001000000080000000500000002000000060000008f0000000200000002000000ba7400000100010001000000a80000000300000003000000030000001d11ffff710f00007f000000010001003f00000004000000eef400003f0000000100000000000100000000000400000005000000ca000000070000000600000003000000ffff00000200000003000000070000000600000006000000f8e70000050000000000000001000000060000000002000001000000c80e0000ff03000072000000ffff000000000000010001003f927470050000000400000005000000010001000100000007000000d94d7b64ffff000006000000cd7f547903000000000000000200000000000000ff070000ffffffff0700000002000000e2f0000000140000020000003000000056790000ee0000000100000001000000660300005892314d090000000900000009000000400000000100000000000000ff030000d0"]}, 0x4dd) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:34 executing program 4: sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="8101"], 0x1}}, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x77f7017ed78f8495, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000140)={0xfffffeb1}, 0x38c) 17:45:34 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) sendto$unix(r0, &(0x7f00000000c0)="03ad002cd00384e72e6a452390d41048484a08e80c9e33a30430830bc4c3f10a04b8c794611a956834e6738433c03c459f25f15afe30e05011c07a4420416c121ebe6aa4a4e2ce32fe74716f1981d2fb1f8f3d45226eeb5984ae0ed69b19badb342cc561471c", 0x66, 0x20008850, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="d800000018008100e00f80ecdb4cb904021d65ef0b007c06e87c55a1bc000900b8000699030000000500154001008178a80016000c000100e558f03003ac000000d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e9703", 0xd8}], 0x1}, 0x0) 17:45:34 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x0, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:34 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:34 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x520, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x598) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:34 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x6fff) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x1}, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x717) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x800, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f00000001c0)={0x28, 0x2, 0x0, {0x5, 0x8000, 0x1}}, 0x28) 17:45:34 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x0, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x40000, 0x4) fsetxattr$security_smack_transmute(r1, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1}) [ 170.441050] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 170.457392] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. 17:45:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) sigaltstack(&(0x7f0000425000/0x1000)=nil, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000080)) sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000000)) 17:45:35 executing program 4: clone(0x7fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = gettid() pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000), 0x43578cf5) ptrace(0x4206, r0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)) 17:45:35 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) sendmmsg$sock(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=[@txtime={{0x18, 0x1, 0x25}}], 0x18}}], 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000000)={0x3b, @remote, 0x4e21, 0x3, 'lblcr\x00', 0x8, 0x83c, 0x31}, 0x2c) [ 170.663012] audit: type=1800 audit(1567014335.039:56): pid=8423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.3" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16639 res=0 17:45:35 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x520, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x598) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) r3 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x0, 0x0, 0x0, r3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x336, 0x0, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x8f5, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="ee06208fe4a5e29b1c7fc6ea16566190137d200df72e7a9710e86e42078cb13f15b19c8b1e71d56357984d082dbf7b93d7849d47821e9d5578c30015381348e1bb0c29f7ea1cffa5ae1cae361d8dd5275b53d22f72989a6f149ad5ca3614dac4fceabe83bda1b895a3eb4885148ad26f12e41f512321b889adfd9647ad1dad499e36b36475e6ec77899b9e10ae47d70f90bef3f6d7f3bab7dffcd4b728ca26afbc45f8e295453bdb85558534c88482fa6915a7895054690c3467bcc366594fbf3263e4c9bd3a5e92f05a5e821b9a4740fe15c8b51eb9fd8b38ad5e452e6e18cc8b5b41268dd05e7fcba7cdacf811eba8a2bbba9f9652", 0xf6, 0x100000001}], 0x1000000, &(0x7f0000000300)={[{@two_active_logs='active_logs=2'}, {@nouser_xattr='nouser_xattr'}], [{@subj_role={'subj_role', 0x3d, 'lo'}}, {@dont_measure='dont_measure'}, {@dont_hash='dont_hash'}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@seclabel='seclabel'}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x63, 0x64, 0x31, 0x61, 0x63, 0x65, 0x31], 0x2d, [0x66, 0x34, 0x33, 0x62], 0x2d, [0x75, 0x37, 0x30, 0x63], 0x2d, [0x31, 0x35, 0x30, 0x38], 0x2d, [0x39, 0x31, 0x8ee373ac67542105, 0x36, 0x36, 0x31, 0x35, 0x32]}}}, {@fsmagic={'fsmagic', 0x3d, 0x8000}}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 17:45:35 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:35 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 170.810429] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20001 17:45:35 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xfffffffffffffff7, 0x352a26469d58e35c}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e22, 0x100000000, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, 0x1, 0x1ff}, &(0x7f00000001c0)=0x90) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000280)={0x4, &(0x7f0000000200)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000002c0)={r2, 0x2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4008ae89, &(0x7f0000000080)={0x7b, 0x0, [0x4000009f, 0x40]}) 17:45:35 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x520, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x598) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:35 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 170.949358] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) 17:45:35 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:35 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 171.002017] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 171.029899] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 171.102125] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 171.169803] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 171.200408] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 171.233266] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 171.259336] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock 17:45:35 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) ptrace$peekuser(0x3, r0, 0x5) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@can, &(0x7f0000000000)=0x80) recvfrom$inet(r1, &(0x7f0000000200)=""/227, 0xe3, 0x0, &(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x10\x00\x00v\x98\x91\"\\\xb3\x81\x99\x00', 0x21}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) 17:45:35 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x57e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff020000000d0000000000000088a8736974300000000000000000000000006c6170623000000000000000000000007369743000000000000000000000000074756e6c300000000000000000000000aaaaaaaaaa1fff00ffffffff0180c200000f00000000000000001809000068090000b0090000616d6f6e670000000000000000000000000000000000000000000000000000008008000000000000040000000300000003000000080000003903000000000000800000000008000001000000000000009e030000010400005f0000003f000000008000000400000006000000400000008100000000080000020000005a0700000000000004000000ff0f0000090000000500000009000000ff0f0000add800000100000001000000010000008100000018bb00000500000001000000ff07000003000000fdffffff00080000ff00000004000000000001000700000005000000070000000c0a0000060000000600000001000080ff7f00000500000001000080ff7f0000ac000000070000008e900000080000004a0000000800000006000000ff010000c016000002000000ffffffff05000000ff0700000100000000080000f3000000030000000000008088000000e502000081000000018000000600000005000000008000000500000000000000a48b000000100000b971000044010000b44d000000000000ff0f00001f0000000400000001800000ca00000000100000000000000000ffff0000000004000000080000000200000006000000dc0b000002000000ff0f000001000000ff0f000004000000020000000004000002000000008000008000000009000000000000008600000007000000050000008000000006000000ffffff7f010000000600000000800000720000008100000005000000fbffffff020000000600000004000000000000000100000001000000080000000500000002000000060000008f0000000200000002000000ba7400000100010001000000a80000000300000003000000030000001d11ffff710f00007f000000010001003f00000004000000eef400003f0000000100000000000100000000000400000005000000ca000000070000000600000003000000ffff00000200000003000000070000000600000006000000f8e70000050000000000000001000000060000000002000001000000c80e0000ff03000072000000ffff000000000000010001003f927470050000000400000005000000010001000100000007000000d94d7b64ffff000006000000cd7f547903000000000000000200000000000000ff070000ffffffff0700000002000000e2f0000000140000020000003000000056790000ee0000000100000001000000660300005892314d090000000900000009000000400000000100000000000000ff030000d00000006afbb2190400000000000000070000001f0000000300000003000000ff070000040000000200000006000000ff010000ff0300000800000000040000ffff0000ff030000459319f1010000000400000000080000000100000101000004000000040000004c000000a00000000300000000000000ff7f00009036000003000000000400000004000002000000000000001c0a00000004000004000000ffffffff040000000000000081000000000000810400000007000000000000060000000000000000ac14141a0600000064000000ac141410c30500000300000002000000e1ffffff0202000030fa000002000000ffffffffff010000050000000000000000000000000000000002000096000000060000000200"]}, 0x5f6) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:35 executing program 5: request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)='coredump_filter\x00', 0xfffffffffffffff9) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6fbf4b78ec3030303030303030303044003034303030724126ca3c130ff820abb39f302c757365", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x3f, 0x0, 0x10001, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000002c0)={0x3, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000680)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f00000006c0)={0x2a, 0x4, 0x0, {0x1, 0xffffffff00000000, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc95900b6cd00"/35], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, 0x0) 17:45:35 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 171.767841] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 171.837868] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock 17:45:36 executing program 3: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000140)={0xac, 0x35303553, 0xc5, 0x7, 0x1, @discrete={0x2, 0x4}}) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x2100) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000180)={'veth1_to_hsr\x00', {0x2, 0x4e21, @local}}) perf_event_open(&(0x7f0000000080)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}}, 0x0, 0x0, r0, 0xb) 17:45:36 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:36 executing program 5: request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000100)='coredump_filter\x00', 0xfffffffffffffff9) r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6fbf4b78ec3030303030303030303044003034303030724126ca3c130ff820abb39f302c757365", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000000c0)={0x3f, 0x0, 0x10001, 0x2}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000002c0)={0x3, r2}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000680)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') write$FUSE_NOTIFY_STORE(r1, &(0x7f00000006c0)={0x2a, 0x4, 0x0, {0x1, 0xffffffff00000000, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc95900b6cd00"/35], 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, 0x0) 17:45:36 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x57e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x5f6) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:36 executing program 4: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000340)=0x0) ptrace$peekuser(0x3, r0, 0x5) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@can, &(0x7f0000000000)=0x80) recvfrom$inet(r1, &(0x7f0000000200)=""/227, 0xe3, 0x0, &(0x7f0000000300)={0x2, 0x4e24, @remote}, 0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'nr0\x01\x10\x00\x00v\x98\x91\"\\\xb3\x81\x99\x00', 0x21}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x20) 17:45:36 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x2}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) listen(r1, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x46c00041}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x138, r4, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xb0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x20, @dev={0xfe, 0x80, [], 0x2b}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x400}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x1}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x3, @mcast1, 0x8}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x101, @loopback, 0xffff}}}}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr="00000000000000000000ffff00"}, 0x1c) 17:45:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, 0x0, &(0x7f00000000c0)) 17:45:36 executing program 4: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0), 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mount(&(0x7f00000001c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x3016480, 0x0) 17:45:36 executing program 3: r0 = accept4$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, &(0x7f0000000300)=0x10, 0x800) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000003c0)={{0x2, 0x4e23, @loopback}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x40, {0x2, 0x4e21, @multicast2}, 'gre0\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800a1695ea8e3e87b10715f") pipe(0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x3d) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x365, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='lo\x00\x00\x00\x00\xdf\xff\xff\xff\x00', 0x10) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000180)=0x7fff) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000140)={'HL\x00'}, &(0x7f0000000280)=0x1e) epoll_create1(0x80000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r3, 0x0, 0xff1b, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) socket$netlink(0x10, 0x3, 0x3) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x0) getpeername$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000380)="9d", 0x1, 0xfffffffffffffffe, 0x0, 0x0) close(r3) 17:45:36 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x57e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x5f6) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:36 executing program 4: socketpair$unix(0x1, 0x80000000000003, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = dup3(r0, r3, 0x80000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000003c0)={0x0, 0x18, "69423ae8ee616b8950a230461ac5e0bb855f568258273b70"}, &(0x7f0000000400)=0x20) sendmsg$inet_sctp(r4, &(0x7f0000000540)={&(0x7f0000000300)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)="14e4b3be91a67efd5e3966d8bc8c", 0xe}], 0x1, &(0x7f0000000440)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x1}}, @init={0x18, 0x84, 0x0, {0x1, 0x9, 0x100000001}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x800d, 0x1f, 0x4, r5}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv4={0x18, 0x84, 0x7, @remote}], 0xe0, 0x80}, 0x40000) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001d80)={'tunl0\x00', 0x0}) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, r6}, 0x32) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) r8 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f00000001c0)='.dead\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='tunl0\x00', r8) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={[], 0x1, 0x7, 0x100000000, 0x8000, 0x3fcc, r7}) 17:45:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, 0x0, &(0x7f00000000c0)) [ 172.239410] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 17:45:36 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:36 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x103982, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) fcntl$setlease(r1, 0x400, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000040)=0x217) chmod(&(0x7f0000000100)='./file0\x00', 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x22000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xa0, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xaedd}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe3c}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x60000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000801) dup2(r0, r1) 17:45:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, 0x0, &(0x7f00000000c0)) 17:45:36 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5ad, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x625) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:36 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x104000000, @local, 0x10000003}, 0x1c) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}, 0xc100) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000480)="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", 0x2cbf}], 0x1) r1 = socket(0x2, 0xa, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000140)={{0x2, 0x4e21, @loopback}, {0x1, @random="e6ea26c729d7"}, 0x4, {0x2, 0x4e20, @multicast1}, 'bond0\x00'}) 17:45:36 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000100)={0x9, 0x15, 0x14, 0x6, 0x7, 0x5, 0x2, 0x10d, 0x1}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x41000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x103) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001400)={0x0, 0x3}, &(0x7f0000001440)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001480)={r3, 0x7, 0x4, [0x9, 0x8, 0x46, 0x7fff]}, &(0x7f00000014c0)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e20, @local}], 0x1e) preadv(r1, &(0x7f0000001380)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/16, 0x10}, {&(0x7f0000001180)=""/171, 0xab}, {&(0x7f0000001240)=""/10, 0xa}, {&(0x7f0000001280)=""/230, 0xe6}], 0x5, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x20000, 0x80) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1}) 17:45:36 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), 0x0) 17:45:37 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:37 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5ad, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x625) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:37 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), 0x0) 17:45:37 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x103982, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x6) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8) fcntl$setlease(r1, 0x400, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000040)=0x217) chmod(&(0x7f0000000100)='./file0\x00', 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x22000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xa0, r2, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x28, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xaedd}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xe3c}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x60000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x4000801) dup2(r0, r1) 17:45:37 executing program 3: unshare(0x200) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = socket(0x5, 0xbe2cc8b9dd9273d6, 0x3) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x20}}, [0x3, 0x9469, 0x400, 0x80, 0x100, 0x5, 0x9, 0x7, 0x6, 0x80000001, 0x8, 0x20, 0x5, 0x800, 0x6]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={r1, 0xfffffffffffffffd}, 0x8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f0000000000)="fad7416b623e2b0dfe38e2866f3df43711adb27be9b698c24212e86c68902816b4e34acaad3421de3a30e9", 0x2b, 0x1, &(0x7f0000000040)={0x2, 0x4e24, @empty}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0xffffffffffffffff, r0, 0x0, 0x1, &(0x7f0000000200)='\x00'}, 0x30) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) kcmp(r3, r4, 0x2, r2, r0) 17:45:37 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:37 executing program 5: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x2) ioctl$int_in(r0, 0x80000040045010, &(0x7f0000000040)) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) write$FUSE_DIRENT(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="500000000000000002000000000000000600000000000000050000000000000000000000ff030000040000000000000000040000000000000a000000070000002f6465762f6473702300000000000000ed0877c80ec634f65283527afedd3b41c3421e994de64e92895bd75c071159cf118aa065bb678d"], 0x50) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r1, 0xb0, "bb2adc", "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"}}, 0x110) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x4, 0xffffffffffffff4a) 17:45:37 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), 0x0) 17:45:37 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5ad, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff020000000d0000000000000088a8736974300000000000000000000000006c6170623000000000000000000000007369743000000000000000000000000074756e6c300000000000000000000000aaaaaaaaaa1fff00ffffffff0180c200000f00000000000000001809000068090000b0090000616d6f6e670000000000000000000000000000000000000000000000000000008008000000000000040000000300000003000000080000003903000000000000800000000008000001000000000000009e030000010400005f0000003f000000008000000400000006000000400000008100000000080000020000005a0700000000000004000000ff0f0000090000000500000009000000ff0f0000add800000100000001000000010000008100000018bb00000500000001000000ff07000003000000fdffffff00080000ff00000004000000000001000700000005000000070000000c0a0000060000000600000001000080ff7f00000500000001000080ff7f0000ac000000070000008e900000080000004a0000000800000006000000ff010000c016000002000000ffffffff05000000ff0700000100000000080000f3000000030000000000008088000000e502000081000000018000000600000005000000008000000500000000000000a48b000000100000b971000044010000b44d000000000000ff0f00001f0000000400000001800000ca00000000100000000000000000ffff0000000004000000080000000200000006000000dc0b000002000000ff0f000001000000ff0f000004000000020000000004000002000000008000008000000009000000000000008600000007000000050000008000000006000000ffffff7f010000000600000000800000720000008100000005000000fbffffff020000000600000004000000000000000100000001000000080000000500000002000000060000008f0000000200000002000000ba7400000100010001000000a80000000300000003000000030000001d11ffff710f00007f000000010001003f00000004000000eef400003f0000000100000000000100000000000400000005000000ca000000070000000600000003000000ffff00000200000003000000070000000600000006000000f8e70000050000000000000001000000060000000002000001000000c80e0000ff03000072000000ffff000000000000010001003f927470050000000400000005000000010001000100000007000000d94d7b64ffff000006000000cd7f547903000000000000000200000000000000ff070000ffffffff0700000002000000e2f0000000140000020000003000000056790000ee0000000100000001000000660300005892314d090000000900000009000000400000000100000000000000ff030000d00000006afbb2190400000000000000070000001f0000000300000003000000ff070000040000000200000006000000ff010000ff0300000800000000040000ffff0000ff030000459319f1010000000400000000080000000100000101000004000000040000004c000000a00000000300000000000000ff7f00009036000003000000000400000004000002000000000000001c0a00000004000004000000ffffffff040000000000000081000000000000810400000007000000000000060000000000000000ac14141a0600000064000000ac141410c30500000300000002000000e1ffffff0202000030fa000002000000ffffffffff01000005000000000000000000000000000000000200009600000006000000020000000400000006000000000100000900000000000000050000000700000008000000000400005f0100000800000040"]}, 0x625) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:37 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400002, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x400, 0x0}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000080)={0x4, r1}) 17:45:37 executing program 5: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x10d, 0x2, &(0x7f0000000040)={0x0, '\xff\xff\xff\xff\xa0\x01\x00'}, 0xb1) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x0, @multicast2, 0x4e22, 0x1, 'none\x00', 0x1, 0xfffffffffffffff8, 0x6e}, 0x2c) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000140)=ANY=[@ANYBLOB="62726f7574650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB='\x00'/144], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000206e87c8ec2989d8000000000000000000"], 0xb8) 17:45:37 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2401, 0x0) read(r0, &(0x7f0000000200)=""/4096, 0x1000) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x20000) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000080)) [ 173.212788] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002 [ 173.251671] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20002 17:45:37 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5c4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x63c) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:37 executing program 1 (fault-call:3 fault-nth:0): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:37 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f, 0xe}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="9500000000000201180000004b0800000000000000000000850000000200000013a60001100000009500000000000000180000000000000000000000461fffff5f070000dc5cd2d99500000000000000d47e9319442d8d61431f1fafcc05e370963f860c176b9e2e70879675f61520b416c3db71aab83cf7f72279a1f9e47881d9a440544a"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x206, 0x10, &(0x7f0000000000), 0x10}, 0x70) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 17:45:37 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:37 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f0000000040)=[0x564, 0x9]) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000280)={{0x4, @addr=0x6}, 0x8, 0xfe44}) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x9, 0x6}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x3, 0x7fbe, 0x6, 0x3, 0x10001}, &(0x7f0000000700)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e24, 0x3, @mcast1, 0x2}}, 0x782, 0x6}, &(0x7f0000000740)=0x2a) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={r3, 0x2}, 0x8) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000200)={{0x6, 0x4, 0xfcee, 0x3, 0x9, 0x6}, 0x7fff}) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f00000000c0)={0x5, 0xfffffffffffffc00, 0x40}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x68, r4, 0xb00, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x10001, @media='udp\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20004040}, 0x15) sendmsg$inet6(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0xa, 0x4e23, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="140000000000000029000000080000400000e7ff00008000d800e11416eb3b29190c907cf304000000f2b07b67194c22a86bccd1a4ed43033e8c145fd2f3aebae4cb0af85b3f63f0b40f4e801f09019c971f7de74200000098d3457d52887c72efac6619c72193de7aa2beb2fe12fa93153b75f690f610850a1146a7c2bc3c26aaaf87e6c7883a70c29ee4cd833a03046a94db9f15fc2f53347464ee975658c0c8dab6989f03df7a6831f4fede8e106ab5bb258065d814b79d10f84970e6fcf36343bf09f42f2c445deecc8249905d0907d83d63a8145d16d3494843c82f786fbd1eb33fdc3c447012d34f35d8eb37e373af007ddbbca03594"], 0x18}, 0x0) [ 173.509392] FAULT_INJECTION: forcing a failure. [ 173.509392] name failslab, interval 1, probability 0, space 0, times 1 [ 173.553571] CPU: 1 PID: 8631 Comm: syz-executor.1 Not tainted 4.19.68 #42 [ 173.560576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 173.569941] Call Trace: [ 173.572544] dump_stack+0x172/0x1f0 [ 173.576181] should_fail.cold+0xa/0x1b [ 173.580093] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 173.585252] ? lock_downgrade+0x810/0x810 [ 173.589454] __should_failslab+0x121/0x190 [ 173.593711] should_failslab+0x9/0x14 [ 173.597518] kmem_cache_alloc+0x2ae/0x700 [ 173.601673] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 173.607220] ? _copy_from_user+0xdd/0x150 [ 173.611384] ashmem_ioctl+0x3cc/0x1440 [ 173.615277] ? kasan_check_read+0x11/0x20 [ 173.619608] ? ashmem_release+0x190/0x190 [ 173.623759] ? mark_held_locks+0x100/0x100 [ 173.628012] ? __fget+0x340/0x540 [ 173.631475] ? __might_sleep+0x95/0x190 [ 173.635455] ? ashmem_release+0x190/0x190 [ 173.639603] do_vfs_ioctl+0xd5f/0x1380 [ 173.639617] ? selinux_file_ioctl+0x46f/0x5e0 [ 173.639628] ? selinux_file_ioctl+0x125/0x5e0 [ 173.639642] ? ioctl_preallocate+0x210/0x210 [ 173.639654] ? selinux_file_mprotect+0x620/0x620 [ 173.639673] ? iterate_fd+0x360/0x360 [ 173.639689] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 173.639704] ? fput+0x128/0x1a0 [ 173.639721] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 173.639737] ? security_file_ioctl+0x8d/0xc0 [ 173.648122] ksys_ioctl+0xab/0xd0 [ 173.648139] __x64_sys_ioctl+0x73/0xb0 [ 173.648156] do_syscall_64+0xfd/0x620 [ 173.648173] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 173.648187] RIP: 0033:0x459879 17:45:38 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:38 executing program 3: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:38 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5c4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x63c) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:38 executing program 5: io_setup(0x3, &(0x7f0000000000)=0x0) io_pgetevents(r0, 0x2, 0x0, 0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200), 0x8}) 17:45:38 executing program 1 (fault-call:3 fault-nth:1): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 173.657161] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 173.657170] RSP: 002b:00007fe708987c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.657184] RAX: ffffffffffffffda RBX: 00007fe708987c90 RCX: 0000000000459879 [ 173.657191] RDX: 0000000020000100 RSI: 0000000040087708 RDI: 0000000000000003 [ 173.657197] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 173.657203] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe7089886d4 [ 173.657208] R13: 00000000004c0d28 R14: 00000000004d3e68 R15: 0000000000000004 17:45:38 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000080)={0x8001000, 0x1, 0x2}) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r2, 0x800443d3, &(0x7f0000000000)={{0x8000, 0x40, 0x8000, 0x400, 0x5, 0xcb87}, 0x0, 0x7, 0x3}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000400)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) 17:45:38 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:38 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5c4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x63c) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:38 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:38 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:38 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:38 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x648) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:38 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, &(0x7f0000000040)=0x10001, 0x4) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000000a40)=[{&(0x7f0000000280)={0x27, 0x0, 0x2, 0x4, 0xfffffffffffffffe, 0x10001, "109a24d07d348497c2f6f2be4e9382ee12ddfc535d18bfa53f55f76f1a1c4755ea3615fd49059be270554e9a2832c438d920bc441de7d7a91dbc9c3c12f5fd", 0x21}, 0x60, &(0x7f0000000700)=[{&(0x7f0000000300)="1bcf888ea37c913d5e1ff296a700f277ade70cca24a29f7c44ed755a67bf75287f8df00b5c1ff2e5c8ee0d80629652e0ebd0ee5b620952990fd7a43d3cb16a35b2cc2e07589e5562551c1c62b00b2c149c577be06e438ef95b2000004fe377ee83680ac77a40023f50b919a3c05b57e0a5ed07f3c815f33bf6a3f0b3f764761be57fc334", 0x84}, {&(0x7f00000003c0)="c8cdd337f0b56ca4e0b497497e5f72e41c1446916512f564804c2741db4c0799d00237323c870caf48cae1e5909fa7afae97a127526da9915eeb1aa7a2beaef842fefba66decd2898a853884ad4e9351d03077e719a865c8cdf84a9a9c490b49a512014c80aab257ac7b559f343c87e3046ee95b0d707d6af14f97e3d18ad623f58bbd6a2f82c263d0ed08161bd45a0e56f664de6e8f35d0d7363ac65505e98adf3423ab2e9e41d66776da0b2d", 0xad}, {&(0x7f0000000480)="f80dc30f0151766fcf8de18e609221fa26a0747a8a48c73e191c", 0x1a}, {&(0x7f00000004c0)="3600ca49d34d2fe7039acd1ed71cf35eedb786419e88a109c4194e121855257f0f5bd80dca5ac53ebee4", 0x2a}, {&(0x7f0000000500)="f8f1d2858da737c6efb313bceaf724991fd17d1915a643d81918a3ee598266e69df06c57420a2aab6adc38e4085753e91abd095cb1b411945bd5dc84063268d738f3a8f2397ca5ac1d507371b92b08269bb291ca503e89b21f60bf696fa2ea08fe856615a0b1942cf8fe93f0ba5dfae219e0bd78abd8f608452539c9f3ca293d521da8daf5e3e0f927cc21deebefb2b754ab49209b7148", 0x97}, {&(0x7f00000005c0)="eec745b9558e3c9b990ae7380baa537d9d13cf8bc84651570daaef209fdd7d2846110e9724029f0dcf658e17d73d2babe7ab6f330c0ba0d78b60007897a92758d1bee94c59e9a4e69da6c73e2868c6e4d7e8f5127a05e4e717008c34ca2e14e208c83941cda00860829e0141a0fcd7db27d511c4e1d0865354dcd827b70e6a2cf0c5261fa9f0c7272a1b6f78fc60f47bc8af1a6d1fbe617d5eafe53c654bab6b2b1c5bf7dabcf4e2374a5ef105caadfe9538dce7d855de2cbcbee57472499cd147d7e8d51187e9cffb2277180c5de910152c0e4f5781517ce5d9f9bdc5dabd5d1089553ba92123f42cc5127bda2e3b81ac", 0xf1}, {&(0x7f00000006c0)="940b23e3bd4f89a37b81207939cb6f4adacc5ef66af718dd70436c76dec150cf3f8e13e9ea2c5bb76882916d2502db9c8313e1eea019f49532a129fe", 0x3c}], 0x7, &(0x7f0000000780)={0x58, 0x10e, 0x6, "9386c098391b65156082a4ef71616284f504551456da9321b93962ffc0bbf8b51e348d4634740cb8cd49b5cb39ec018a6c68eed943804a9ea1b8a8ab361579b8fa4f640bd82c9e45"}, 0x58, 0x20000000}, {&(0x7f0000000800)={0x27, 0x1, 0x1, 0x2, 0x7, 0x2, "39453bb1bf6b163627daedecb52f446b6e0f30e273f193226cbb5f90ecbd792edc7ed047b1b249661d3a62fcb08d31ce0c6e315966e911c9bbf025758dfe6e", 0x24}, 0x60, &(0x7f0000000a00)=[{&(0x7f0000000880)="f64219e0a825c4de2d50dd7a241036041806b277e013cdffcbd5f6cb2f4f99d293ebf2f77870757ff0c0ba36a2908fa42ce04d643bd83d1379fe8bdef0e46181255de05fd57f9cf39e664cf1eb9e78c662c7c6c393f865974aae3f3a298cae8cb9170754c718d6503891fcd3ccbb0e47021e1f4d764875fe98caa231c0c8870be447439780149b0cd9e4dc222a49e61620558fe1c3a357b57b9ba3918f377b0ff3839bd252ecf29aea47e6ee6ea8ef845ab35f045d2ae0", 0xb7}, {&(0x7f0000000940)="25680e21112e67c37576f73e2922c8c0f74a0155eecff57d6986390e18906411f3d5c268933bb7c1cf3e0fac05239b8e8a701d2ba48fec75b45177fd365884825989c51ce5a03e3c19dccd329872d06dba64486f149be2139d10bb6519a61678aece7feebe359950e2994f36f2f9bb8abb6b3e78ec6a1a6bd3c808ff59457a1238d342ff79a0b958ee9dbbbc2abaf953f849a4cba2bf91afb3", 0x99}], 0x2, 0x0, 0x0, 0x40}], 0x2, 0x10) syz_emit_ethernet(0x140, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) 17:45:38 executing program 3: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:38 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x2, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:38 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:38 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x648) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:38 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="850000001a009476000077000000000000009500000004000000"], &(0x7f0000000240)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x1, 0x348, &(0x7f0000000480)=""/195, 0x0, 0x0, [0x42]}, 0x48) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 17:45:39 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x4b47, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:39 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f0000000080)=0xfffffffffffffdb2) 17:45:39 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x4b49, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:39 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:39 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x648) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:39 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000040)={{0x4, 0x4}, {0x9a6, 0x5}, 0x0, 0x1dd8a799ae0e2eb6, 0x3}) dup3(r0, r1, 0x0) 17:45:39 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:39 executing program 3: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:39 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x541b, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:39 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:39 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5d6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x64e) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:39 executing program 5: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:39 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x5421, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:39 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:40 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x5450, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:40 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:40 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5d6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff020000000d0000000000000088a8736974300000000000000000000000006c6170623000000000000000000000007369743000000000000000000000000074756e6c300000000000000000000000aaaaaaaaaa1fff00ffffffff0180c200000f00000000000000001809000068090000b0090000616d6f6e670000000000000000000000000000000000000000000000000000008008000000000000040000000300000003000000080000003903000000000000800000000008000001000000000000009e030000010400005f0000003f000000008000000400000006000000400000008100000000080000020000005a0700000000000004000000ff0f0000090000000500000009000000ff0f0000add800000100000001000000010000008100000018bb00000500000001000000ff07000003000000fdffffff00080000ff00000004000000000001000700000005000000070000000c0a0000060000000600000001000080ff7f00000500000001000080ff7f0000ac000000070000008e900000080000004a0000000800000006000000ff010000c016000002000000ffffffff05000000ff0700000100000000080000f3000000030000000000008088000000e502000081000000018000000600000005000000008000000500000000000000a48b000000100000b971000044010000b44d000000000000ff0f00001f0000000400000001800000ca00000000100000000000000000ffff0000000004000000080000000200000006000000dc0b000002000000ff0f000001000000ff0f000004000000020000000004000002000000008000008000000009000000000000008600000007000000050000008000000006000000ffffff7f010000000600000000800000720000008100000005000000fbffffff020000000600000004000000000000000100000001000000080000000500000002000000060000008f0000000200000002000000ba7400000100010001000000a80000000300000003000000030000001d11ffff710f00007f000000010001003f00000004000000eef400003f0000000100000000000100000000000400000005000000ca000000070000000600000003000000ffff00000200000003000000070000000600000006000000f8e70000050000000000000001000000060000000002000001000000c80e0000ff03000072000000ffff000000000000010001003f927470050000000400000005000000010001000100000007000000d94d7b64ffff000006000000cd7f547903000000000000000200000000000000ff070000ffffffff0700000002000000e2f0000000140000020000003000000056790000ee0000000100000001000000660300005892314d090000000900000009000000400000000100000000000000ff030000d00000006afbb2190400000000000000070000001f0000000300000003000000ff070000040000000200000006000000ff010000ff0300000800000000040000ffff0000ff030000459319f1010000000400000000080000000100000101000004000000040000004c000000a00000000300000000000000ff7f00009036000003000000000400000004000002000000000000001c0a00000004000004000000ffffffff040000000000000081000000000000810400000007000000000000060000000000000000ac14141a0600000064000000ac141410c30500000300000002000000e1ffffff0202000030fa000002000000ffffffffff01000005000000000000000000000000000000000200009600000006000000020000000400000006000000000100000900000000000000050000000700000008000000000400005f01000008000000400000000200000007000000010000000600000008000000070000000800000005000000ff0700000800"]}, 0x64e) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:40 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:40 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x5451, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:40 executing program 3: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:40 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:40 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5d6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x64e) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:40 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:40 executing program 5: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:40 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x5452, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:40 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5d9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x651) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:40 executing program 3: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:40 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x5460, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:40 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:40 executing program 3: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:40 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x7704, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:41 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5d9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x651) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:41 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:41 executing program 3: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:41 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x7706, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:41 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r4, 0x8, &(0x7f00000002c0)) 17:45:41 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:41 executing program 3: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:41 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x7709, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:41 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5d9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x651) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:41 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:41 executing program 3: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:41 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x770a, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:41 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:41 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5da, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x652) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:41 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40049409, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:41 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:42 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r4, 0x8, &(0x7f00000002c0)) 17:45:42 executing program 3: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:42 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5da, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x652) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:42 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40086602, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:42 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:42 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:42 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087602, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:42 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:42 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5da, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x652) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:42 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087703, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:42 executing program 3: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:42 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) r0 = syz_open_dev$evdev(0x0, 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r4, 0x8, &(0x7f00000002c0)) 17:45:43 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087705, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:43 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) write$input_event(0xffffffffffffffff, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:43 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) r0 = syz_open_dev$evdev(0x0, 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:43 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket(0x840000000002, 0x3, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:43 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) r0 = syz_open_dev$evdev(0x0, 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:43 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:43 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket(0x840000000002, 0x3, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:43 executing program 3: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:43 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:43 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket(0x840000000002, 0x3, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:43 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x4020940d, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:43 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r4, 0x8, &(0x7f00000002c0)) 17:45:43 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:43 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:43 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:43 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) write$input_event(0xffffffffffffffff, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:44 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x80086601, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:44 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:44 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:44 executing program 3: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket(0x840000000002, 0x3, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:44 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x80087601, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:44 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x81007702, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:44 executing program 3: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket(0x840000000002, 0x3, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:44 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)) 17:45:44 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:44 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:44 executing program 3: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket(0x840000000002, 0x3, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:44 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0xc0045878, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:44 executing program 0: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) write$input_event(0xffffffffffffffff, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:44 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0xc0045878, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:44 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:45 executing program 3: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:45 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:45 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:45 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0xc0189436, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:45 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:45 executing program 3: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:45 executing program 4: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:45 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0xc020660b, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:45 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:45 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)) 17:45:45 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\x00\x00') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:46 executing program 3: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:46 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000140)) 17:45:46 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:46 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:46 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:46 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff020000000d0000000000000088a8736974300000000000000000000000006c6170623000000000000000000000007369743000000000000000000000000074756e6c300000000000000000000000aaaaaaaaaa1fff00ffffffff0180c200000f00000000000000001809000068090000b0090000616d6f6e670000000000000000000000000000000000000000000000000000008008000000000000040000000300000003000000080000003903000000000000800000000008000001000000000000009e030000010400005f0000003f000000008000000400000006000000400000008100000000080000020000005a0700000000000004000000ff0f0000090000000500000009000000ff0f0000add800000100000001000000010000008100000018bb00000500000001000000ff07000003000000fdffffff00080000ff00000004000000000001000700000005000000070000000c0a0000060000000600000001000080ff7f00000500000001000080ff7f0000ac000000070000008e900000080000004a0000000800000006000000ff010000c016000002000000ffffffff05000000ff0700000100000000080000f3000000030000000000008088000000e502000081000000018000000600000005000000008000000500000000000000a48b000000100000b971000044010000b44d000000000000ff0f00001f0000000400000001800000ca00000000100000000000000000ffff0000000004000000080000000200000006000000dc0b000002000000ff0f000001000000ff0f000004000000020000000004000002000000008000008000000009000000000000008600000007000000050000008000000006000000ffffff7f010000000600000000800000720000008100000005000000fbffffff020000000600000004000000000000000100000001000000080000000500000002000000060000008f0000000200000002000000ba7400000100010001000000a80000000300000003000000030000001d11ffff710f00007f000000010001003f00000004000000eef400003f0000000100000000000100000000000400000005000000ca000000070000000600000003000000ffff00000200000003000000070000000600000006000000f8e70000050000000000000001000000060000000002000001000000c80e0000ff03000072000000ffff000000000000010001003f927470050000000400000005000000010001000100000007000000d94d7b64ffff000006000000cd7f547903000000000000000200000000000000ff070000ffffffff0700000002000000e2f0000000140000020000003000000056790000ee0000000100000001000000660300005892314d090000000900000009000000400000000100000000000000ff030000d00000006afbb2190400000000000000070000001f0000000300000003000000ff070000040000000200000006000000ff010000ff0300000800000000040000ffff0000ff030000459319f1010000000400000000080000000100000101000004000000040000004c000000a00000000300000000000000ff7f00009036000003000000000400000004000002000000000000001c0a00000004000004000000ffffffff040000000000000081000000000000810400000007000000000000060000000000000000ac14141a0600000064000000ac141410c30500000300000002000000e1ffffff0202000030fa000002000000ffffffffff01000005000000000000000000000000000000000200009600000006000000020000000400000006000000000100000900000000000000050000000700000008000000000400005f01000008000000400000000200000007000000010000000600000008000000070000000800000005000000ff07000008000000010001"]}, 0x653) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:46 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x111000, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @rand_addr=0xfffffffffffffff7}}, 0x8, 0x7ff, 0x200, 0xfffffffffffffffd, 0x95}, &(0x7f00000003c0)=0x98) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000480)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000540)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000580)={r3, 0x80000, r1}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000400)={r2}, &(0x7f0000000440)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) r5 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000180)={0x7, 0x8, r4, 0x0, r5, 0x0, 0x0, 0x4257}) socket$key(0xf, 0x3, 0x2) splice(r0, &(0x7f00000004c0), r1, &(0x7f0000000500)=0x13, 0x6, 0x9) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r6 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@initdev, @in6=@loopback}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) 17:45:46 executing program 3: seccomp(0x0, 0x0, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:46 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)) 17:45:46 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 17:45:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:47 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:47 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x44000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000080)='selinuxproc\x00') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) 17:45:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) [ 182.984756] audit: type=1326 audit(1567014347.359:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9077 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:45:47 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, 0x0, 0x0) 17:45:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) sched_getaffinity(0x0, 0x8, &(0x7f00000002c0)) 17:45:47 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:47 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x3, 0x80) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000140)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:47 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:48 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x8000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x7) r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) recvfrom$inet(r2, &(0x7f0000000140)=""/226, 0xe2, 0x10000, 0x0, 0x0) 17:45:48 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff020000000d0000000000000088a8736974300000000000000000000000006c6170623000000000000000000000007369743000000000000000000000000074756e6c300000000000000000000000aaaaaaaaaa1fff00ffffffff0180c200000f00000000000000001809000068090000b0090000616d6f6e670000000000000000000000000000000000000000000000000000008008000000000000040000000300000003000000080000003903000000000000800000000008000001000000000000009e030000010400005f0000003f000000008000000400000006000000400000008100000000080000020000005a0700000000000004000000ff0f0000090000000500000009000000ff0f0000add800000100000001000000010000008100000018bb00000500000001000000ff07000003000000fdffffff00080000ff00000004000000000001000700000005000000070000000c0a0000060000000600000001000080ff7f00000500000001000080ff7f0000ac000000070000008e900000080000004a0000000800000006000000ff010000c016000002000000ffffffff05000000ff0700000100000000080000f3000000030000000000008088000000e502000081000000018000000600000005000000008000000500000000000000a48b000000100000b971000044010000b44d000000000000ff0f00001f0000000400000001800000ca00000000100000000000000000ffff0000000004000000080000000200000006000000dc0b000002000000ff0f000001000000ff0f000004000000020000000004000002000000008000008000000009000000000000008600000007000000050000008000000006000000ffffff7f010000000600000000800000720000008100000005000000fbffffff020000000600000004000000000000000100000001000000080000000500000002000000060000008f0000000200000002000000ba7400000100010001000000a80000000300000003000000030000001d11ffff710f00007f000000010001003f00000004000000eef400003f0000000100000000000100000000000400000005000000ca000000070000000600000003000000ffff00000200000003000000070000000600000006000000f8e70000050000000000000001000000060000000002000001000000c80e0000ff03000072000000ffff000000000000010001003f927470050000000400000005000000010001000100000007000000d94d7b64ffff000006000000cd7f547903000000000000000200000000000000ff070000ffffffff0700000002000000e2f0000000140000020000003000000056790000ee0000000100000001000000660300005892314d090000000900000009000000400000000100000000000000ff030000d00000006afbb2190400000000000000070000001f0000000300000003000000ff070000040000000200000006000000ff010000ff0300000800000000040000ffff0000ff030000459319f1010000000400000000080000000100000101000004000000040000004c000000a00000000300000000000000ff7f00009036000003000000000400000004000002000000000000001c0a00000004000004000000ffffffff040000000000000081000000000000810400000007000000000000060000000000000000ac14141a0600000064000000ac141410c30500000300000002000000e1ffffff0202000030fa000002000000ffffffffff01000005000000000000000000000000000000000200009600000006000000020000000400000006000000000100000900000000000000050000000700000008000000000400005f01000008000000400000000200000007000000010000000600000008000000070000000800000005000000ff07000008000000010001"]}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, 0x0, 0x0) 17:45:48 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:48 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:48 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x408200, 0x2) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000001c0)={@empty, @empty, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@gettfilter={0x44, 0x2e, 0x4, 0x70bd2d, 0x25dfdbfd, {0x0, r2, {0xfff3, 0x2}, {0xffff, 0xd}, {0xffff, 0xe}}, [{0x8, 0xb, 0x421f}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x92}, {0x8, 0xb, 0x80000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x44004}, 0x14) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r3 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:48 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff020000000d0000000000000088a8736974300000000000000000000000006c6170623000000000000000000000007369743000000000000000000000000074756e6c300000000000000000000000aaaaaaaaaa1fff00ffffffff0180c200000f00000000000000001809000068090000b0090000616d6f6e670000000000000000000000000000000000000000000000000000008008000000000000040000000300000003000000080000003903000000000000800000000008000001000000000000009e030000010400005f0000003f000000008000000400000006000000400000008100000000080000020000005a0700000000000004000000ff0f0000090000000500000009000000ff0f0000add800000100000001000000010000008100000018bb00000500000001000000ff07000003000000fdffffff00080000ff00000004000000000001000700000005000000070000000c0a0000060000000600000001000080ff7f00000500000001000080ff7f0000ac000000070000008e900000080000004a0000000800000006000000ff010000c016000002000000ffffffff05000000ff0700000100000000080000f3000000030000000000008088000000e502000081000000018000000600000005000000008000000500000000000000a48b000000100000b971000044010000b44d000000000000ff0f00001f0000000400000001800000ca00000000100000000000000000ffff0000000004000000080000000200000006000000dc0b000002000000ff0f000001000000ff0f000004000000020000000004000002000000008000008000000009000000000000008600000007000000050000008000000006000000ffffff7f010000000600000000800000720000008100000005000000fbffffff020000000600000004000000000000000100000001000000080000000500000002000000060000008f0000000200000002000000ba7400000100010001000000a80000000300000003000000030000001d11ffff710f00007f000000010001003f00000004000000eef400003f0000000100000000000100000000000400000005000000ca000000070000000600000003000000ffff00000200000003000000070000000600000006000000f8e70000050000000000000001000000060000000002000001000000c80e0000ff03000072000000ffff000000000000010001003f927470050000000400000005000000010001000100000007000000d94d7b64ffff000006000000cd7f547903000000000000000200000000000000ff070000ffffffff0700000002000000e2f0000000140000020000003000000056790000ee0000000100000001000000660300005892314d090000000900000009000000400000000100000000000000ff030000d00000006afbb2190400000000000000070000001f0000000300000003000000ff070000040000000200000006000000ff010000ff0300000800000000040000ffff0000ff030000459319f1010000000400000000080000000100000101000004000000040000004c000000a00000000300000000000000ff7f00009036000003000000000400000004000002000000000000001c0a00000004000004000000ffffffff040000000000000081000000000000810400000007000000000000060000000000000000ac14141a0600000064000000ac141410c30500000300000002000000e1ffffff0202000030fa000002000000ffffffffff01000005000000000000000000000000000000000200009600000006000000020000000400000006000000000100000900000000000000050000000700000008000000000400005f01000008000000400000000200000007000000010000000600000008000000070000000800000005000000ff07000008000000010001"]}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, 0x0, 0x0) [ 183.987175] audit: type=1326 audit(1567014348.369:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9120 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:45:48 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x8010, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) timer_create(0x7, &(0x7f0000000240)={0x0, 0x22, 0x0, @thr={&(0x7f0000000080)="375e64febc2736ab581b72052b", &(0x7f0000000140)="38ce291d7796dc270ab6579c33b7715e0740352e9911c07529f481d1bb6e0dac633a81eedf826fd86717b4ab5de04ff047b6061f8f863dca1fd5c174eab8721d53ed0bd041efca9be263a04d88618b46a3e3f2363c4774db95bc6c344c9e933adba1f6112ec674af6ab3adf0ea926972a36d8ef76c10c659cf83be28a9f3eb6bc228fc4468f44ac0746b7e84088b58a6ecc93a590ced43be8863617d7126a94a09d5ff633b2b7402e540b2fd373c71eba3448961f7cd582bd97406d4ac5266ffc650a101d82f219337d99678c6ea4d9eabbcfee2b8818b001cf777a47f0a593f25b6a2"}}, &(0x7f0000000280)=0x0) timer_getoverrun(r2) 17:45:48 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) sched_getaffinity(0x0, 0x8, &(0x7f00000002c0)) 17:45:48 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8) io_setup(0x1, &(0x7f0000000180)=0x0) io_getevents(r1, 0xfffffffffffffff9, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000380)=""/221) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r3 = socket(0x1, 0x80000, 0x90a) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r6 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x7, 0x600200) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000280)={0x2, 0xfff}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000300)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000701000/0x2000)=nil}) r7 = semget(0x3, 0x2, 0x80) semget$private(0x0, 0x4, 0x1) semctl$SETVAL(r7, 0x2, 0x10, &(0x7f00000005c0)=0x3) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000140)={r4, r5/1000+10000}, 0x10) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:48 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000), 0x0) 17:45:48 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:48 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000), 0x0) 17:45:49 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') timer_create(0x1, &(0x7f0000000080)={0x0, 0x2a, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000140)=0x0) timer_gettime(r1, &(0x7f0000000180)) r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:49 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:49 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:49 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xffffffffffffff01, 0x0) sendto$rxrpc(r1, &(0x7f0000000140)="4db690cc46baf00e43342891e82c1a5ad3b5a600d7e15c1f24796b78fe716b64a850cd7d1d86902c574ae5201c22b35153b8443cb3e94aa2ed9fd62e5db55261f5c2252ce8942da23597ba49fb19ad6cdfa91c31e3621d514a9c2a698d6b6eb71609ca22f7b19759e03d0b581eb26d5497620e0ff5c57bc4f81c9c7d8f63816a168e857efc5b1fbaff4e155d09d6c510881677d8c52b39ff8adcbec79144b2e598ac3f4f0b621df7a7532d29b852e566b894a6f463bcf0cdf882f49b296b88752d9901296562e76877665dc8e4f06f72aa74adf47dd76e5a33bdff13", 0xdc, 0x1, &(0x7f0000000240)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x24) r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:49 executing program 2: setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x4, 0x5db, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"]}, 0x653) r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000000), 0x0) [ 184.950408] audit: type=1326 audit(1567014349.329:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9171 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:45:49 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) sched_getaffinity(0x0, 0x8, &(0x7f00000002c0)) 17:45:49 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x1010, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) write$UHID_INPUT(r1, &(0x7f0000000140)={0x8, "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", 0x1000}, 0x1006) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:49 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) ftruncate(r1, 0x8200) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x800002, 0x11, r2, 0x0) getresuid(&(0x7f00000004c0), &(0x7f0000003280), 0x0) ftruncate(r0, 0x0) 17:45:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:49 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:49 executing program 2: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x1fb, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) dup2(r0, r1) 17:45:49 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x10, 0x12, r0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000140)={0x5, 0x1, 0xffffffffffffff4b, 0x2, 0x96}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:50 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:50 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:50 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) socket$tipc(0x1e, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r4, 0x8, &(0x7f00000002c0)) 17:45:50 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 17:45:50 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 185.814603] audit: type=1326 audit(1567014350.189:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9218 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:45:50 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x11000)=nil, 0x11000, 0x0, 0x12, r0, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x1, {0xbc49, 0x1, 0xfffffffffffffffa, 0xfffffffffffffefb}}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000140)=0x4) msync(&(0x7f0000704000/0x3000)=nil, 0x3000, 0x5) 17:45:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r4, 0x8, &(0x7f00000002c0)) 17:45:50 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r4, 0x8, &(0x7f00000002c0)) 17:45:50 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 17:45:50 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:51 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:51 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xf54) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:51 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 17:45:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r4, 0x8, &(0x7f00000002c0)) 17:45:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:51 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) [ 186.686646] audit: type=1326 audit(1567014351.059:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9258 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:45:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r4, 0x8, &(0x7f00000002c0)) 17:45:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:51 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) faccessat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x4, 0x100) 17:45:51 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 17:45:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:51 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r4, 0x8, &(0x7f00000002c0)) 17:45:51 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x26c0}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r3 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:51 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 17:45:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:51 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:51 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r4, 0x8, &(0x7f00000002c0)) 17:45:51 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x800, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r1, &(0x7f0000000140)="d3b537e9e495fc669d10f4b2e4ad33d29a1493033d0b4f4e918b1d489f743fff1f08cc9c1c7f9ce7bd34d95cdbb8302e65b0db2f66397dbfadfb18c881cb52253680b0422c7dc2b927d3220b9f4c899204009030432647227db5f1eb198bf932823344a6232ea1f696f0e4be775a1026b880185445f6211eb08555f7ebc59caed3fc443a83757dc3c8a636abb574b329944010a45c718a288afb6268f4a7192e1f421f43e8a0d9fc2d8ba4e065ecd40a066ebd32de9f63a70bba6d6141a4afde75ed5d7d5c4d15ed747625ad008d92187326d71ef6dd2e764065dbfc2e57dd61a3390f83a61163aee9318146b203cc1081951410092caa"}, 0x10) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:51 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) [ 187.571651] audit: type=1326 audit(1567014351.949:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9296 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:45:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 17:45:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:52 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48) 17:45:52 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x2000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x5}, 0x8) r3 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:52 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r4, 0x8, &(0x7f00000002c0)) 17:45:52 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 188.486939] audit: type=1326 audit(1567014352.869:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9337 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:45:52 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x1}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:53 executing program 1: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xa) socket$vsock_dgram(0x28, 0x2, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r0 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:53 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:53 executing program 1: mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0x9) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000140)) r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:53 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:53 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r4, 0x8, &(0x7f00000002c0)) [ 189.323384] audit: type=1326 audit(1567014353.699:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9376 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:45:53 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:53 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = open(&(0x7f0000000600)='./file0\x00', 0x2, 0x24) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x804000}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xcc, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x10000000000000}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'lapb0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r3 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r3, 0x12, 0x2, &(0x7f00000004c0)=""/197, &(0x7f00000005c0)=0xc5) preadv(r3, &(0x7f0000000440)=[{&(0x7f0000000140)=""/75, 0x4b}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f0000000240)=""/176, 0xb0}, {&(0x7f0000000300)=""/117, 0x75}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000000400)=""/27, 0x1b}], 0x7, 0x0) 17:45:54 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:54 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0, 0x0}, &(0x7f0000000500)=0xc) fchown(r0, r1, r2) r3 = socket(0x1, 0x80000, 0x90a) r4 = request_key(&(0x7f0000000280)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\xff\xff\xff', 0xfffffffffffffffd) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)="aa75b55cb4b48711dc3fb99ef66daa33c4637a6718a68bc128a5086b37af0d4212850b25331473bffec547c7a77b33e2f735704de6765a168ed8a5f971c16f6116bdb64fdf1b72096c911e2660b42abee773d057e978447104c6073da283111b15bf2071ec7f3b66838a19ada70cde982e34c885ead348fce3448a8dc71f2f9384dc08ba0feec16cd34ec1107074b2f607c7a765a145e01790c159bf4aa2c5de17ab967f51e5f8db0b9734735a1ec12471ea26791017a2c530647b7a71d53432f22b4e20b5", 0xc5, r4) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) flistxattr(r3, &(0x7f0000000340)=""/191, 0xbf) 17:45:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:54 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:54 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:54 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x9b39b5680e6a923a, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:54 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:54 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r3, 0x8, &(0x7f00000002c0)) 17:45:54 executing program 1: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xffffffff, 0x10000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000140)={0x7, 0x0, {0x3, 0x3, 0x80, 0x3, 0x7}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x9, 0x6, 0x4, 'queue0\x00', 0x3f}) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2000, 0x0) r1 = socket(0x9, 0xd230a9270dc6385e, 0x100471) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/access\x00', 0x2, 0x0) [ 190.209094] audit: type=1326 audit(1567014354.589:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9418 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:45:54 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x0, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:54 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000140)={[{0x97, 0x101, 0x5fccebf1, 0x1, 0x8, 0xc0f5, 0x1, 0x47, 0x6, 0x8, 0x7f, 0x3, 0x4}, {0x227, 0x8, 0xba1b, 0x3, 0x0, 0x4, 0xd2c, 0x1, 0x40, 0x4, 0x7, 0x9, 0x1}, {0x7f, 0x9, 0x9, 0x8, 0xfffffffffffffffa, 0x182ffe0b, 0x1000, 0xffffffff80000001, 0x1f, 0x80, 0x0, 0x3, 0x5}], 0x8d3b}) 17:45:54 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:54 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x1, 0x2) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x2}, 0x10) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r2 = socket(0x1, 0xbb1f492e66cb2c4f, 0x7) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:55 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x0, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x0, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:55 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_AGP_ENABLE(r1, 0x40086432, &(0x7f0000000140)=0x200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:55 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r3, 0x8, &(0x7f00000002c0)) 17:45:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf540000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x0, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) [ 191.152004] audit: type=1326 audit(1567014355.529:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9466 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:45:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x0, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:55 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000140)={0x60, 0x1, 0x3, 0x5130, 0x2, [{0x5, 0x2, 0x3, 0x0, 0x0, 0x101}, {0x3, 0x5, 0x6, 0x0, 0x0, 0x4}]}) fsetxattr$security_smack_transmute(r0, &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000200)='TRUE', 0x4, 0xa835235bf0e1605c) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf540000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:56 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:56 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xd7801327c0e5f384, &(0x7f0000000180)=0x1, 0x4) ioctl$TCSETX(r1, 0x5433, &(0x7f00000002c0)={0x40, 0xc7, [0x1, 0x7, 0x1000, 0x6, 0x9], 0x800}) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000140)) r2 = socket(0x1, 0x80000, 0x90a) accept$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f00000003c0)=0x4) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r3}, 0x10, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000100000000000000", @ANYRES64=r4, @ANYRES64=r5/1000+10000, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="030100000001000000005e18b15ba68203d1000000000000c79fbf373c15dc47ca934d053d9404df00aed4b76146020b301f7754762d09"], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0xab826f983af3ac81) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000300)='.cgroupposix_acl_accessiposix_acl_access$)em0*,\x00', 0x30) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x0, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x0, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:56 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf540000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e20, 0x9, @empty}}, 0xee, 0x9}, &(0x7f0000000100)=0x90) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r3, 0x8, &(0x7f00000002c0)) 17:45:56 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ashmem\x00', 0x2003, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x115800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000240)=0x15d) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x60040, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8) accept4$netrom(r2, &(0x7f0000000140)={{0x3, @null}, [@netrom, @netrom, @bcast, @bcast, @netrom, @null, @netrom, @rose]}, &(0x7f00000001c0)=0x48, 0x800) r3 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:56 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad430100000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 192.006752] audit: type=1326 audit(1567014356.389:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9513 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:45:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x0, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x0, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:56 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad430100000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:56 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) r1 = dup(r0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000140)=""/85) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000200)={0x9, 0x108, 0xfa00, {r2, 0x71, "78e47b", "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"}}, 0x110) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r3 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:57 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x0, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:57 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad430100000000009500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x0, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:57 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x100, 0x810, r0, 0x0) syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x10000, 0x10000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x84140, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0xbbbc469f017a91be}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0xfffffffffffffffe, 0x3}, 0x10) 17:45:57 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) [ 192.859539] audit: type=1326 audit(1567014357.239:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9563 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:45:57 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:57 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x400, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x0, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:57 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:57 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) move_pages(r1, 0x6, &(0x7f0000000140)=[&(0x7f0000701000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000702000/0x4000)=nil, &(0x7f0000703000/0x2000)=nil], &(0x7f0000000180)=[0x1, 0xe7fb], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:58 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:58 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:58 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x6cf8dd1baa4a0ee6, 0x1010, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) fdatasync(r0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f0000000080)=0x1e6) 17:45:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:45:58 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x15, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) [ 193.732231] audit: type=1326 audit(1567014358.109:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9618 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:45:58 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0xc, 0x110, r0, 0x1b) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f00000000c0)=0x4) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400, 0x0) write$P9_RXATTRCREATE(r2, &(0x7f0000000180)={0xfffffffffffffd68, 0x21, 0x1}, 0xffffff69) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080)) 17:45:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:58 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x15, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:58 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x101801, 0x80) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0xffffffffffffffc0, 0x3, 0x2662628f, 0xfffffffffffffffa, 0x0}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240)={r2, 0x7f}, &(0x7f0000000280)=0x8) r3 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000140)={{0x1, 0x2, 0x0, 0xd64f6dba4a74db60, 0x5}, 0x50a, 0x3}) 17:45:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:58 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r3 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x0, 0x200000) ioctl$CAPI_GET_ERRCODE(r3, 0x80024321, &(0x7f0000000280)) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x600000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004) 17:45:58 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:58 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x15, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:58 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:45:59 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x0, 0x80000, 0x90a) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname$netlink(r2, &(0x7f0000000080), &(0x7f0000000140)=0xc) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) [ 194.634605] audit: type=1326 audit(1567014359.009:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9670 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:45:59 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x15, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:59 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x15, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:59 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000140)=0x3) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:45:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:59 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:59 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x15, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000000500000000000000950000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:59 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0xb566c6003dfc1e36, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000340)={@local, 0x0}, &(0x7f0000000380)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f00000003c0)={@empty, r2}, 0x14) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000180)=r3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xffff) r4 = socket(0x5, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0xd0, "8f06e50e46762b01f11f99b8b7aeaac3157e0ac6d67edc8113d231984db9ac663097166e91557d8522a9f256562ee27f75549fbf78fab2604b916e137fee6404bf2fc280ef8a51a590b281583c46dfea4d21b9c672cbdc50ba3f41330828e69a30cb4e13353dd6e7c915553c979f19e159a37738e6106edf84fd093b07c0a9061cf166e991a407044130cfe646a4f56f74a980a000fd2f37b3a2eac0f1ff29b29aa175f99d56f350c992433d1b48b399c11da0a5d485a5125cb0933d988d102e8e39a8bec9f1038d14fec393fc063e5e"}, &(0x7f00000002c0)=0xd8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000300)={r5, 0xfffffffffffffffb, 0x2, [0x9, 0x9]}, 0xc) 17:45:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:45:59 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:45:59 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x15, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad430100000000009500000000000000050000000000000095000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:45:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) [ 195.510371] audit: type=1326 audit(1567014359.889:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9721 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:45:59 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:00 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x101002, 0x0) r1 = shmat(0x0, &(0x7f0000701000/0x2000)=nil, 0x1000) shmdt(r1) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') socket(0x1, 0x80000, 0x90a) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x7f, 0x2, 0x959, 0x4, 0x2d000000000000, 0x854, 0x2}) 17:46:00 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x15, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad430100000000009500000000000000050000000000000095000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:46:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:00 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:00 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x15, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad430100000000009500000000000000050000000000000095000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:46:00 executing program 1: socket$rds(0x15, 0x5, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]) r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:46:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:00 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:46:00 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x4000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f00000001c0)=0x4) [ 196.368998] audit: type=1326 audit(1567014360.749:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9764 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:46:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:00 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:46:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:01 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:01 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x8, 0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x4) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r2 = socket(0x1, 0x0, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:01 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:46:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x1ffffffe) 17:46:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:46:01 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:46:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) [ 197.243599] audit: type=1326 audit(1567014361.619:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9804 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:46:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x1ffffffe) 17:46:01 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x200, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0x1, @loopback, 0x2}, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0x22}}, 0x10001, [0xe97, 0x400, 0x3, 0x9, 0x1, 0x0, 0x800, 0x3]}, 0x5c) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:01 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:46:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x1ffffffe) 17:46:02 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) socket(0x840000000002, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:02 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) 17:46:02 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x2000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000280)=0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/mls\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x5, 0x5, 0x7, 0x2, 0x0, 0x6d4, 0x20000, 0xd, 0x4, 0x0, 0xfffffffffffffffe, 0xfff, 0x1, 0x0, 0x2, 0xfffffffffffffa63, 0x5, 0x20, 0x200, 0x7fff, 0x1, 0x9, 0x8, 0x1, 0x8001, 0x0, 0x80000000, 0x2, 0x7, 0x4fb, 0x3b, 0x9ca4, 0x390b, 0x5be, 0x8, 0x4, 0x0, 0xc7, 0x4, @perf_bp={&(0x7f00000001c0), 0x7}, 0x2002c, 0x7f, 0x85, 0x1, 0x4dde, 0x10000, 0xfffffffffffffd3a}, r1, 0x7, r2, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{}]}) r3 = socket(0x4, 0x0, 0x200200) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) ioctl$TIOCLINUX4(r4, 0x541c, &(0x7f0000000140)) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$sock_inet6_udp_SIOCINQ(r4, 0x541b, &(0x7f0000000180)) 17:46:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x0) 17:46:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) [ 198.101298] audit: type=1326 audit(1567014362.479:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9844 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:46:02 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) 17:46:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x1ffffffe) 17:46:02 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000080)=0x7, 0x4) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:02 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) 17:46:02 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x1ffffffe) 17:46:02 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r2, 0xc0e85667, &(0x7f0000000140)={0x80000000, 0x1, "dacc5a5804bb81c21f5a32c347428b7839e57be68b6fb73350f029609666c597", 0x6, 0x1f, 0x101, 0x5, 0x3, 0x100000000, 0x7b9, 0x4, [0x476c, 0x1, 0x8, 0x1]}) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:03 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x0, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:03 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000170600000fff07004506000002000000070600000ee60000bf050000000000001f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x70) 17:46:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, 0x0, 0x0, 0x1ffffffe) 17:46:03 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x800, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x6) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r3 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(0xffffffffffffffff, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r1, 0x8, &(0x7f00000002c0)) 17:46:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x0) 17:46:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(0xffffffffffffffff, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r1, 0x8, &(0x7f00000002c0)) 17:46:03 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x0) [ 199.018084] audit: type=1326 audit(1567014363.399:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9885 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:46:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, r1, 0x39277bc6553ac7ef, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}}, 0x0) 17:46:03 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000180)=0xc, 0x4) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f0000000140)=0x4) 17:46:03 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(0xffffffffffffffff, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r1, 0x8, &(0x7f00000002c0)) 17:46:03 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001840), &(0x7f0000001880)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 199.479613] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:46:04 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x0, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:04 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:04 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) [ 199.847053] audit: type=1326 audit(1567014364.229:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9925 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:46:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x0) 17:46:04 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ashmem\x00', 0x402002, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000040)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x1, 0x4) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000340)='dev/a\x00\x00mem ') r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x3d8) [ 200.019067] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:46:04 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001840), &(0x7f0000001880)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 17:46:04 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x0, 0x3, 0x9) flistxattr(r0, &(0x7f0000000140)=""/159, 0x9f) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000080)) 17:46:04 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x0) 17:46:04 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) [ 200.359134] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:46:04 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x5, 0x6, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:05 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x0, 0x3, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:05 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) r3 = getgid() write$P9_RGETATTR(r1, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x0, {0x8, 0x2}, 0x185, r2, r3, 0x3, 0x4, 0x1, 0x3e000000, 0x4, 0x10000, 0xf89a, 0x7, 0x5, 0x0, 0x800, 0x0, 0xffffffff, 0x25, 0x1ff}}, 0xa0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r4 = socket(0x1, 0x80000, 0x90a) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 200.787978] audit: type=1326 audit(1567014365.169:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=9963 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:46:05 executing program 5: r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:46:05 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:05 executing program 3: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000001840), &(0x7f0000001880)=0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 17:46:05 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x5, 0x80000, 0x90b) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket$tipc(0x1e, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000840)={&(0x7f0000000080)={0xa, 0x4e24, 0x48, @rand_addr="04ba1bce243806c57f5147338ee5288b", 0x4}, 0x1c, &(0x7f0000000780)=[{&(0x7f00000001c0)="18369fe8487ba9c890d9d2da", 0xc}, {&(0x7f0000000200)="3cc4e4e5efec609e9ee175846d3d380ff982d0a071a0e638eae3bfe73c1447058ee0221cd0015095682ae4e995a7fb21ae3a356389e308fbdfa0a90f5f812299be9b4cf3519505289c9405b77aa06e25f44096bb581b2d5f9dc1a3c1531817d467e15f4fe225dd503331236de955eb4486563ccb", 0x74}, {&(0x7f0000000280)="011b08f86465a8759259f1cf89698042421c384baf1108c96e59cf9e2f8c146c28eafe3287d782df85e4de640048b83bd14592df4477a0a5bcad1a457f4c92752a9c2bd4d2d266d70066d61012f16bae6dc04ef4d2ba26df91c052a2315ca64553f81daa29bb8ccc87dfbdc353fcb6f79a5a8eacb103ebf29d74288aa79806b728d015a530dd1f9242192e402cfbb05a12ed0f01da68126697cde3", 0x9b}, {&(0x7f0000000340)="4214a40d36abe0435fac38ec2970127abb7b5fb8b1cbd17233bf3bd690467db155a6276a961e2fd66d4eeedf7f26e58a57606920498aabaa2fad1e8efdd99a27a8dcd008ac687729c0de45a38ae93a2f793e82b0d75795efff59cff55b661bf6ac29603dc800ff34cbaa020a0324df1cd7b360b4abd312a9c315a0e0914118c9f9b90aa21f46b151aebdfa5eaaf31e15c1523874b857c305f84160a1d81041b1955d3d09fcf777a79e5b63fd32580290ed1ccd6a155f46f378b84b629b1e7d756ef0641ead6aadab8342ba8fd113b86d5e", 0xd1}, {&(0x7f0000000440)="0f0edc01edf39eeaa48916cc599b133900648983a04983d6cea09b7d09f8dcc90fc3dd1210b716f8abf64832326a5b799c8049a824ce419a5fc81b", 0x3b}, {&(0x7f0000000480)="6fe78da28271656e49de311c8e5dd8797f1ad37fef0a79f93e8c1dc3d563dae03a09f0b5549c0cd05b06161e0e2e050128faf91c65d80ba4e9", 0x39}, {&(0x7f00000004c0)="c88688477bb27e31d6b562d0d7c7732a5bda15b1286570be93aa3605e7b01878371d4742928a21b296a62fed593c3f66aec224d393015eba3393cc5cd33c2d8593adce21559ea8d7c052bfd3b13bf5664c3a4220eff9177aabdb1dcda8420128f3678ee5916e2c6ae1cd93e2e2ba3afd31832bee37d56279c5ef680a123d312487fdb8b00c9c6a5d7bb575f29c892e01a0cdda86de9c6e97e55fe173d77c4fa4d1cf082be1a61844db29295cf69e1b4eed2ef33395089ee19643ea111eec08bee7b4e0a02aaa6d6f3a6f88b68f933c9125c2bccf328c92b65d0f3dec4e06a1841945", 0xe2}, {&(0x7f00000005c0)="0ec68583dafd166d6616c55cdc1a02b150af2193742e4fe98a46421abf8918ee38fbd485773fa371cc44cfb40b9b2c54b15e5e7435629abc013885a51755756ada304231c76971db77f6952a8cc36fac29a8518803f51dccd86225f106228ef3dd8b09656341eaebd016c7ad3c8a9f2a01062001803004773c242f95c678c4d1c650ad69ab35edc204a81d1ea090ef23596f2b9ead7795ede6df191909378ca3e2a97423880409eba47e4aee80b6c2532ce21cae2a726f51477c4c16611f12fa97f4319cdea14115b08d9055672d4534de9e8f", 0xd3}, {&(0x7f00000006c0)="8d5a29f61ededb4ac09daa67e5d50efc3673b90a853456a445bfd8151a1bbeb2424661a7f5ff83b65a0a419b6eb84b02dcd6f290b85173e168acd3725008232381ed3c06b24365d5f7cbc0138c34a32b454794808f754d2ae5918bb8447daa46803dd1955f462f440b14e253e1d0d9a4ab78ed1dc7e37d91d58f3e5a204caac0a7fef93bcc", 0x85}], 0x9}, 0x4000000) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 201.232308] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:46:05 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fanotify_init(0x16, 0x2) pipe2(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 17:46:05 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:05 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) [ 201.539547] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:46:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x0) 17:46:06 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x0, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:06 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) getpeername$unix(r1, &(0x7f0000000140), &(0x7f0000000080)=0x6e) [ 201.727685] audit: type=1326 audit(1567014366.099:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10006 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:46:06 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x8200, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x44991712b398cd66}, 0x84) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x200, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000380)=0x1ff, 0x4) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xa) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x4002, 0x0) syz_open_pts(r3, 0x280) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) remap_file_pages(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x2, 0x2f, 0x1) r4 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x307}, "4cbeb461487f5c7f", "942628a10ac9819600232cd43e180e73", "82ec07b1", "90d090b14fcc7462"}, 0x28) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r5 = socket(0xf, 0x800, 0x2000090f) getsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:06 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:46:06 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000140)={0xfffffffffffffffa, 0x1}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) [ 202.336957] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:46:06 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x8000f, 0x3) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) 17:46:06 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x0, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) [ 202.583073] QAT: Invalid ioctl [ 202.641384] audit: type=1326 audit(1567014367.019:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10038 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:46:07 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fanotify_init(0x16, 0x2) pipe2(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 17:46:07 executing program 4: 17:46:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:07 executing program 5: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:46:07 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = open(&(0x7f0000000080)='./file0\x00', 0x4000, 0x80) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000140)=""/71) r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:07 executing program 4: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fanotify_init(0x16, 0x2) pipe2(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 202.841652] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:46:07 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6101, 0x0) r1 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x80000001, 0x200) fstat(r0, &(0x7f0000000240)) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000140)=0x7, &(0x7f0000000180)=0x2) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)) r2 = socket(0x1, 0x80000, 0x90a) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffff6b) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="2b000000b4e4ad8cf26abea43a99ce4030a33c469ba35053746e4fcfda27d6337757a9d1a8ab9553af937027e5d8057cbf4d5478df7d1812ccad38cdd086f9959580fd6f94c159bcb0ef781496b99416b4fd59e09d85923c1e05d7a267a9bc"], &(0x7f0000000300)=0x33) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000340)={0x80, 0x8009, 0xe7, 0xf29, r3}, 0x10) 17:46:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) [ 203.024081] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:46:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:07 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ashmem\x00', 0x40002, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x47e9, 0x2200) write$binfmt_elf32(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="7f454c460400ff010700000000000000020006003f0000002503000038000000da000000ff010000000020000100010004000000000000000000000003000000ff0f00000000000064e60000240f00f20d078268a0a2dd002f66000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/858], 0x35a) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='/dev/ashmem\x00') getsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=0x4) r2 = socket$inet(0x2b, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x80, @rand_addr="58226820876d4b76329d8aa4f6aac941", 0x6}, 0x1c) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f0000000640)) r3 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000001c0)=0x8, 0x4) 17:46:07 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x0, 0x6) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) [ 203.498624] audit: type=1326 audit(1567014367.879:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10087 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:46:08 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fanotify_init(0x16, 0x2) pipe2(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 17:46:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:46:08 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:08 executing program 4: 17:46:08 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x9, 0x80000, 0x90d) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) [ 203.767844] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:46:08 executing program 4: 17:46:08 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r2 = dup2(r0, r0) fsetxattr(r1, &(0x7f0000000080)=@random={'osx.', '\x00\x00\x00\x00\x00\x00\xff\xff\xff'}, &(0x7f0000000180)='\x00', 0x1, 0x1) write$P9_RCLUNK(r2, &(0x7f0000000140)={0xfdfbe876966ff86a, 0x79, 0x2}, 0xffffffffffffffc9) 17:46:08 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:08 executing program 4: 17:46:08 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:08 executing program 2: 17:46:08 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$sock_ifreq(r0, 0x891f, &(0x7f0000000140)={'ip6erspan0\x00', @ifru_ivalue=0x6}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x80, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) munmap(&(0x7f0000701000/0x2000)=nil, 0x2000) r3 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:08 executing program 4: 17:46:08 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:46:08 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x0) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:08 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:08 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_x25_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@null=' \x00', 0x7, 'veth0_to_bond\x00'}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x1, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x7fff) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 204.504518] audit: type=1326 audit(1567014368.879:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10136 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:46:08 executing program 4: 17:46:08 executing program 3: r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:09 executing program 2: 17:46:09 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x9, 0x400000000000}, {0x5510, 0x7ff}]}, 0x14, 0x1) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:09 executing program 4: 17:46:09 executing program 2: 17:46:09 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1000000000a) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x345, 0x4000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0) sendto$netrom(r1, &(0x7f0000000200)="0e8eba2732b797571aa87bd2ae5c0c5213150557e962e5c2cf62f3b23693506d97c39421a112202281f3139b21fcecbdf712d43f999c203655ae00ac6f1a4e6d24ed319044f9101c585d07ea10b2a17d29402333c44617e14c40476f9a707d444990e365b72cda14adbcb1b2fc45fce978fde40d461f7567bd94fbeee00a14bf029c07193160d5c8a7b61a7f6f06ade16267603134cdd8377a012ac6b6332da67a4cb78fd0fdc9", 0xa7, 0x4, &(0x7f00000002c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)={0x2000}) 17:46:09 executing program 3: r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:46:09 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x0) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:09 executing program 4: 17:46:09 executing program 2: 17:46:09 executing program 3: r0 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:09 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000700000/0x3000)=nil, 0x3000, 0x104, 0x1010, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000140)='threaded\x00', 0x9) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r2 = socket(0x0, 0xe, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f00000000c0)=0xffffffffffffff5a) 17:46:09 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:46:09 executing program 2: 17:46:09 executing program 4: [ 205.364315] audit: type=1326 audit(1567014369.739:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10194 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:46:09 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) nanosleep(&(0x7f0000000080), 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:09 executing program 4: 17:46:09 executing program 2: 17:46:10 executing program 0: seccomp(0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket(0x840000000002, 0x3, 0x0) write$input_event(r0, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r1, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:10 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x4e22, @broadcast}}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000001c0)=0x7, 0x8) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000140)) 17:46:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:10 executing program 4: 17:46:10 executing program 2: 17:46:10 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:46:10 executing program 4: 17:46:10 executing program 2: 17:46:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:10 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x4080) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 206.235387] audit: type=1326 audit(1567014370.609:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10231 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:46:10 executing program 4: 17:46:10 executing program 2: 17:46:11 executing program 0: seccomp(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) write$input_event(0xffffffffffffffff, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:11 executing program 2: 17:46:11 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x2, 0x80005, 0x915) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:11 executing program 4: 17:46:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:46:11 executing program 2: 17:46:11 executing program 4: [ 207.092487] binder: 10259:10264 ioctl c0306201 0 returned -14 [ 207.132093] audit: type=1326 audit(1567014371.509:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10269 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:46:11 executing program 1: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xa) mmap(&(0x7f0000700000/0x1000)=nil, 0x1000, 0x0, 0x6b7934577cf251a, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000080)) socket$tipc(0x1e, 0x2, 0x0) r0 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:11 executing program 4: 17:46:11 executing program 2: [ 207.339960] binder: 10281:10285 ioctl c0306201 0 returned -14 17:46:12 executing program 0: seccomp(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) write$input_event(0xffffffffffffffff, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:12 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000440)='/dev/mixer\x00', 0x10000, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000400)={0x2, 0x4e24, @broadcast}, 0x10) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video36\x00', 0x2, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x101400, 0x91) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000380)=0xc) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r3 = socket(0x1, 0x80000, 0x90a) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x101002, 0x0) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000280)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/218, 0xda}) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:12 executing program 2: 17:46:12 executing program 4: 17:46:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:46:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) [ 207.973687] binder: 10298:10300 ioctl c0306201 0 returned -14 [ 207.992176] QAT: Invalid ioctl 17:46:12 executing program 4: [ 208.017992] QAT: Invalid ioctl 17:46:12 executing program 2: [ 208.040013] audit: type=1326 audit(1567014372.419:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10304 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:46:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:12 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x200, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x40000, 0x0) r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:12 executing program 2: 17:46:12 executing program 4: 17:46:13 executing program 0: seccomp(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) write$input_event(0xffffffffffffffff, &(0x7f0000000080)={{}, 0x1f, 0x2, 0x4}, 0x18) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:13 executing program 2: 17:46:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:13 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x9, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}, @in6={0xa, 0x4e23, 0x1, @rand_addr="d72750a3226b8c71c6ad30ad38f6399e", 0xfffffffffffffff7}], 0x38) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x1) 17:46:13 executing program 4: 17:46:13 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:46:13 executing program 2: 17:46:13 executing program 4: 17:46:13 executing program 2: 17:46:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:13 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x3, 0x8000e, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 209.029160] audit: type=1326 audit(1567014373.409:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10343 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:46:13 executing program 4: 17:46:14 executing program 0: seccomp(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) write$input_event(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:14 executing program 2: 17:46:14 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x8, 0x4080) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0, 0x0, [], [], [], 0xfff, 0xff}) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r2 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:14 executing program 4: 17:46:14 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:46:14 executing program 4: 17:46:14 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000000000a) mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:14 executing program 2: 17:46:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) [ 209.912052] audit: type=1326 audit(1567014374.289:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10372 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:46:14 executing program 2: 17:46:14 executing program 4: 17:46:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:15 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x80000001) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:15 executing program 2: 17:46:15 executing program 4: 17:46:15 executing program 0: seccomp(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) write$input_event(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:46:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:15 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000080), 0x4) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x3) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000240), &(0x7f0000000200)=0xfffffffffffffef7) 17:46:15 executing program 4: [ 210.800761] audit: type=1326 audit(1567014375.179:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10405 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:46:15 executing program 2: 17:46:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:15 executing program 4: 17:46:15 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400, 0x0) tee(r2, r0, 0xfa, 0x3587cff346b3a5d2) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:15 executing program 2: 17:46:15 executing program 4: 17:46:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:15 executing program 0: seccomp(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) write$input_event(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:15 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f0000000180)=0xd7fa1a80308abfef) 17:46:15 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:46:15 executing program 2: 17:46:15 executing program 4: 17:46:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1163"], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:16 executing program 4: [ 211.646477] binder: 10446:10447 unknown command 25361 [ 211.665767] binder: 10446:10447 ioctl c0306201 200002c0 returned -22 17:46:16 executing program 2: [ 211.692716] audit: type=1326 audit(1567014376.049:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10450 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:46:16 executing program 1: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) getpeername$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000001c0)='\\}procvboxnet1\x00') ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\a\x00\x00\x00') r2 = socket(0x8, 0x2cfe9c88021d3ad4, 0x909) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1163"], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:16 executing program 4: 17:46:16 executing program 4: [ 211.837082] binder: 10463:10464 unknown command 25361 [ 211.856355] binder: 10463:10464 ioctl c0306201 200002c0 returned -22 17:46:16 executing program 0: seccomp(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) write$input_event(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:16 executing program 2: 17:46:16 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x97\x00\x00\x00\x00\x00\x13]\xf3)&\xd5') r1 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000240)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x800, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r3 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1163"], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:46:16 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001800)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000001880)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(0x0, 0x43, 0x0) fanotify_init(0x0, 0x2) pipe2(&(0x7f00000001c0), 0x0) ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 17:46:16 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000001800)='/dev/audio\x00', 0x40000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(0x0, 0x0, 0x0) fanotify_init(0x16, 0x2) pipe2(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r0, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 212.525081] binder: 10482:10484 unknown command 25361 [ 212.538780] binder: 10482:10484 ioctl c0306201 200002c0 returned -22 [ 212.545996] audit: type=1326 audit(1567014376.919:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10487 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 17:46:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) [ 212.618908] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 212.630444] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:46:17 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x2d96, @loopback, 0x100000000}}, 0x100000000, 0x6, 0xff, 0x20, 0x1}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r2, 0x4}, &(0x7f0000000280)=0x8) r3 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x0, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) [ 212.763535] binder: 10497:10498 unknown command 4743953 [ 212.801124] binder: 10497:10498 ioctl c0306201 200002c0 returned -22 17:46:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) [ 213.058262] binder: 10502:10505 unknown command 4743953 [ 213.083287] binder: 10502:10505 ioctl c0306201 200002c0 returned -22 17:46:17 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xd) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x101000, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f00000001c0)={0x100, 0x9, 0x1, 0x7, 0x15, 0x7, 0xca, 0xffffffff, 0x5, 0x72}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0xb80) r3 = socket(0x1, 0x80000, 0x90a) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000002680)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000002780)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000027c0)={'team0\x00', r4}) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080), 0x2) ioctl$CAPI_INSTALLED(r2, 0x80024322) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000180)=0x4) [ 213.224346] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:46:17 executing program 0: seccomp(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket(0x840000000002, 0x3, 0x6) write$input_event(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmmsg(r0, &(0x7f0000006d00), 0xffffffffffffff92, 0x1ffffffe) 17:46:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x0, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:46:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x3, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="116348"], 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0}], 0x1, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:17 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001800)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000001880)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(0x0, 0x43, 0x0) fanotify_init(0x0, 0x2) pipe2(&(0x7f00000001c0), 0x0) ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) [ 213.304075] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 213.377902] binder: 10524:10527 unknown command 4743953 [ 213.404509] binder: 10524:10527 ioctl c0306201 200002c0 returned -22 [ 213.422397] audit: type=1326 audit(1567014377.799:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=10532 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45c6ba code=0x0 [ 213.427617] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:46:17 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) r1 = socket(0x10, 0x3, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xbf) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) lsetxattr$security_capability(&(0x7f0000000200)='./file0\x00', &(0x7f0000000000)='security.capability\x00', &(0x7f0000000400)=@v3={0x3000000, [], r2}, 0x18, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000480)=@known='security.capability\x00\xc9\xbd0\x12\x98>\x02\x15Y`\x19j*\x84X_\x19\xc1\xc8&\x17)\x82\xa8\xde\x1c\xccL\xdci\x87\xff\xc9q\\\xef\"\xce\xe4\xc6s\xd48\x8d^V\x04\xa0\xb88\xaf\xb3[\xd3R\xe4\xc9\xeed\x9aw\x12\b0\x9c\xa46\xbf\x91\x9f\xd9ck\xfa%_\xf4\xb3\x1f@\xf8\x8e\xcc\x9c-\x81!q\xc4\x12bO\f\x14/\xc5Oe\xf4\x929\xf2v\x86\xc1}H\x9e\x92]\xa1\x9b\xf3\x1e0\xecu\xcd\x92#yWf\x1c\xe8\xa1V\x84\x18\xe6\xd3\xd4(\x17O\x89\xa1\x1c\xc8!\xfb\xf6A\"\xa3okA\x1c', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1000100, 0x10, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r3 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 17:46:17 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x0, 0x73) fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) 17:46:17 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001800)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000001880)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(0x0, 0x43, 0x0) fanotify_init(0x0, 0x2) pipe2(&(0x7f00000001c0), 0x0) ioctl$CAPI_NCCI_OPENCOUNT(0xffffffffffffffff, 0x80044326, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f0000000080)="39a110", 0xffffffffffffffc1, 0x40, 0x0, 0xfffffffffffffe5b) 17:46:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:17 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0xa, 0x1867da9531f88c58, 0x6) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) [ 213.686799] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 17:46:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="11634840"], 0x0, 0x0, 0x0}) ppoll(0x0, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 17:46:18 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xa) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\xff\xff\xff') r1 = socket(0x1, 0x80000, 0x90a) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f00000000c0)=0x4) fcntl$setpipe(r1, 0x407, 0x6) 17:46:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x73) fcntl$dupfd(0xffffffffffffffff, 0x0, r0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x2e, "8cdcf3c46775079e280762d3b02ee88f21371cb2d4829801ab8f5b41cdd6d0e1fdde9cd8031ef200261f2015259e"}, &(0x7f00000000c0)=0x36) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x36, 0x10080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r0, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @dev, 0x6}, 0x80) sendmmsg$inet_sctp(r0, &(0x7f00000003c0), 0x3a301e0909ff6cd, 0x80fe) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)=0x0) sched_getaffinity(r2, 0x8, &(0x7f00000002c0)) [ 214.042694] ================================================================== [ 214.050244] BUG: KASAN: use-after-free in tls_write_space+0x2b2/0x310 [ 214.057040] Read of size 1 at addr ffff8880a5f1d920 by task syz-executor.4/10525 [ 214.064568] [ 214.066208] CPU: 1 PID: 10525 Comm: syz-executor.4 Not tainted 4.19.68 #42 [ 214.073217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.082571] Call Trace: [ 214.085168] dump_stack+0x172/0x1f0 [ 214.088811] ? tls_write_space+0x2b2/0x310 [ 214.093059] print_address_description.cold+0x7c/0x20d [ 214.098350] ? tls_write_space+0x2b2/0x310 [ 214.102625] kasan_report.cold+0x8c/0x2ba [ 214.106913] __asan_report_load1_noabort+0x14/0x20 [ 214.111850] tls_write_space+0x2b2/0x310 [ 214.115915] ? tls_push_pending_closed_record+0x150/0x150 [ 214.121552] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 214.126670] tcp_check_space+0x430/0x720 [ 214.130739] tcp_rcv_established+0x9e9/0x1f10 [ 214.135242] ? tcp_data_queue+0x4220/0x4220 [ 214.139577] tcp_v6_do_rcv+0x4b0/0x13c0 [ 214.143565] __release_sock+0x129/0x390 [ 214.147642] release_sock+0x59/0x1c0 [ 214.151369] tls_sk_proto_close+0x691/0xa20 [ 214.155698] ? tcp_check_oom+0x560/0x560 [ 214.159769] ? tls_write_space+0x310/0x310 [ 214.164016] ? ip_mc_drop_socket+0x20c/0x270 [ 214.168437] ? __sock_release+0x89/0x2a0 [ 214.172513] inet_release+0xff/0x1e0 [ 214.176237] inet6_release+0x53/0x80 [ 214.179962] __sock_release+0xce/0x2a0 [ 214.183859] ? __sock_release+0x2a0/0x2a0 [ 214.188012] sock_close+0x1b/0x30 [ 214.191469] __fput+0x2dd/0x8b0 [ 214.194759] ____fput+0x16/0x20 [ 214.198128] task_work_run+0x145/0x1c0 [ 214.202026] exit_to_usermode_loop+0x273/0x2c0 [ 214.206616] do_syscall_64+0x53d/0x620 [ 214.210694] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.215883] RIP: 0033:0x413561 [ 214.219088] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 214.238169] RSP: 002b:00007ffe6862f8d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 214.246059] RAX: 0000000000000000 RBX: 0000000000000009 RCX: 0000000000413561 [ 214.253331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 214.260608] RBP: 0000000000000001 R08: ffffffff8126b7dc R09: 0000000035506b78 [ 214.267879] R10: 00007ffe6862f9b0 R11: 0000000000000293 R12: 000000000075c9a0 [ 214.275150] R13: 000000000075c9a0 R14: 00000000007612c8 R15: ffffffffffffffff [ 214.282475] ? irq_fpu_usable+0xc/0xb0 [ 214.286365] [ 214.288083] Allocated by task 10537: [ 214.291811] save_stack+0x45/0xd0 [ 214.295264] kasan_kmalloc+0xce/0xf0 [ 214.298990] kmem_cache_alloc_trace+0x152/0x760 [ 214.303665] create_ctx+0x46/0x1f0 [ 214.307209] tls_init+0x158/0x7a0 [ 214.310673] tcp_set_ulp+0x216/0x5f0 [ 214.314394] do_tcp_setsockopt.isra.0+0x321/0x2390 [ 214.319333] tcp_setsockopt+0xbe/0xe0 [ 214.323137] sock_common_setsockopt+0x94/0xd0 [ 214.327638] __sys_setsockopt+0x17a/0x280 [ 214.331786] __x64_sys_setsockopt+0xbe/0x150 [ 214.336222] do_syscall_64+0xfd/0x620 [ 214.340027] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.345295] [ 214.346919] Freed by task 10525: [ 214.350289] save_stack+0x45/0xd0 [ 214.353746] __kasan_slab_free+0x102/0x150 [ 214.357984] kasan_slab_free+0xe/0x10 [ 214.361793] kfree+0xcf/0x220 [ 214.364906] tls_ctx_free.part.0+0x32/0x40 [ 214.369153] tls_sk_proto_close+0x684/0xa20 [ 214.373483] inet_release+0xff/0x1e0 [ 214.377205] inet6_release+0x53/0x80 [ 214.377225] __sock_release+0xce/0x2a0 [ 214.377236] sock_close+0x1b/0x30 [ 214.377250] __fput+0x2dd/0x8b0 [ 214.377259] ____fput+0x16/0x20 [ 214.377270] task_work_run+0x145/0x1c0 [ 214.377286] exit_to_usermode_loop+0x273/0x2c0 [ 214.403421] do_syscall_64+0x53d/0x620 [ 214.407317] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.412589] [ 214.414222] The buggy address belongs to the object at ffff8880a5f1d840 [ 214.414222] which belongs to the cache kmalloc-512 of size 512 [ 214.426933] The buggy address is located 224 bytes inside of [ 214.426933] 512-byte region [ffff8880a5f1d840, ffff8880a5f1da40) [ 214.438794] The buggy address belongs to the page: [ 214.443764] page:ffffea000297c740 count:1 mapcount:0 mapping:ffff88812c3f0940 index:0x0 [ 214.451895] flags: 0x1fffc0000000100(slab) [ 214.456140] raw: 01fffc0000000100 ffffea0002493348 ffffea00026fec08 ffff88812c3f0940 [ 214.464386] raw: 0000000000000000 ffff8880a5f1d0c0 0000000100000006 0000000000000000 [ 214.472392] page dumped because: kasan: bad access detected [ 214.478091] [ 214.479716] Memory state around the buggy address: [ 214.484630] ffff8880a5f1d800: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 214.491974] ffff8880a5f1d880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 214.499322] >ffff8880a5f1d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 214.506677] ^ [ 214.511094] ffff8880a5f1d980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 214.518471] ffff8880a5f1da00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 214.525828] ================================================================== [ 214.533186] Disabling lock debugging due to kernel taint [ 214.546730] Kernel panic - not syncing: panic_on_warn set ... [ 214.546730] [ 214.554123] CPU: 0 PID: 10525 Comm: syz-executor.4 Tainted: G B 4.19.68 #42 [ 214.562519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 214.565314] kobject: 'loop5' (0000000073278980): kobject_uevent_env [ 214.571870] Call Trace: [ 214.571891] dump_stack+0x172/0x1f0 [ 214.571911] ? tls_write_space+0x2b2/0x310 [ 214.578378] kobject: 'loop5' (0000000073278980): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 214.580894] panic+0x263/0x507 [ 214.601375] ? __warn_printk+0xf3/0xf3 [ 214.605263] ? tls_write_space+0x2b2/0x310 [ 214.609500] ? preempt_schedule+0x4b/0x60 [ 214.613633] ? ___preempt_schedule+0x16/0x18 [ 214.618028] ? trace_hardirqs_on+0x5e/0x220 [ 214.622356] ? tls_write_space+0x2b2/0x310 [ 214.626578] kasan_end_report+0x47/0x4f [ 214.630542] kasan_report.cold+0xa9/0x2ba [ 214.634686] __asan_report_load1_noabort+0x14/0x20 [ 214.639602] tls_write_space+0x2b2/0x310 [ 214.643650] ? tls_push_pending_closed_record+0x150/0x150 [ 214.649184] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 214.654273] tcp_check_space+0x430/0x720 [ 214.658317] tcp_rcv_established+0x9e9/0x1f10 [ 214.662798] ? tcp_data_queue+0x4220/0x4220 [ 214.667114] tcp_v6_do_rcv+0x4b0/0x13c0 [ 214.671076] __release_sock+0x129/0x390 [ 214.675043] release_sock+0x59/0x1c0 [ 214.678835] tls_sk_proto_close+0x691/0xa20 [ 214.683144] ? tcp_check_oom+0x560/0x560 [ 214.687188] ? tls_write_space+0x310/0x310 [ 214.691414] ? ip_mc_drop_socket+0x20c/0x270 [ 214.695818] ? __sock_release+0x89/0x2a0 [ 214.699868] inet_release+0xff/0x1e0 [ 214.703574] inet6_release+0x53/0x80 [ 214.707287] __sock_release+0xce/0x2a0 [ 214.711675] ? __sock_release+0x2a0/0x2a0 [ 214.715824] sock_close+0x1b/0x30 [ 214.719280] __fput+0x2dd/0x8b0 [ 214.722544] ____fput+0x16/0x20 [ 214.725808] task_work_run+0x145/0x1c0 [ 214.729680] exit_to_usermode_loop+0x273/0x2c0 [ 214.734265] do_syscall_64+0x53d/0x620 [ 214.738158] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 214.743329] RIP: 0033:0x413561 [ 214.746512] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 214.765395] RSP: 002b:00007ffe6862f8d0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 214.773099] RAX: 0000000000000000 RBX: 0000000000000009 RCX: 0000000000413561 [ 214.780350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 214.787600] RBP: 0000000000000001 R08: ffffffff8126b7dc R09: 0000000035506b78 [ 214.794869] R10: 00007ffe6862f9b0 R11: 0000000000000293 R12: 000000000075c9a0 [ 214.802118] R13: 000000000075c9a0 R14: 00000000007612c8 R15: ffffffffffffffff [ 214.809393] ? irq_fpu_usable+0xc/0xb0 [ 214.814652] Kernel Offset: disabled [ 214.818277] Rebooting in 86400 seconds..