[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 90.055979][ T28] audit: type=1800 audit(1578819670.003:25): pid=9464 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 90.087184][ T28] audit: type=1800 audit(1578819670.013:26): pid=9464 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 90.087209][ T28] audit: type=1800 audit(1578819670.013:27): pid=9464 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.226' (ECDSA) to the list of known hosts. 2020/01/12 09:01:20 fuzzer started 2020/01/12 09:01:22 dialing manager at 10.128.0.26:46303 2020/01/12 09:01:23 syscalls: 2847 2020/01/12 09:01:23 code coverage: enabled 2020/01/12 09:01:23 comparison tracing: enabled 2020/01/12 09:01:23 extra coverage: enabled 2020/01/12 09:01:23 setuid sandbox: enabled 2020/01/12 09:01:23 namespace sandbox: enabled 2020/01/12 09:01:23 Android sandbox: /sys/fs/selinux/policy does not exist 2020/01/12 09:01:23 fault injection: enabled 2020/01/12 09:01:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/01/12 09:01:23 net packet injection: enabled 2020/01/12 09:01:23 net device setup: enabled 2020/01/12 09:01:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/01/12 09:01:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 09:04:49 executing program 0: 09:04:49 executing program 1: syzkaller login: [ 309.812721][ T9631] IPVS: ftp: loaded support on port[0] = 21 09:04:49 executing program 2: [ 309.997401][ T9631] chnl_net:caif_netlink_parms(): no params data found [ 310.021735][ T9634] IPVS: ftp: loaded support on port[0] = 21 [ 310.087868][ T9631] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.094962][ T9631] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.119235][ T9631] device bridge_slave_0 entered promiscuous mode [ 310.155600][ T9631] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.179665][ T9631] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.197487][ T9631] device bridge_slave_1 entered promiscuous mode [ 310.244961][ T9631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.275607][ T9631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.277991][ T9636] IPVS: ftp: loaded support on port[0] = 21 [ 310.342998][ T9631] team0: Port device team_slave_0 added [ 310.360706][ T9631] team0: Port device team_slave_1 added [ 310.372445][ T9634] chnl_net:caif_netlink_parms(): no params data found 09:04:50 executing program 3: [ 310.460614][ T9631] device hsr_slave_0 entered promiscuous mode [ 310.517873][ T9631] device hsr_slave_1 entered promiscuous mode [ 310.611905][ T9639] IPVS: ftp: loaded support on port[0] = 21 [ 310.617623][ T9634] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.624958][ T9634] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.647700][ T9634] device bridge_slave_0 entered promiscuous mode 09:04:50 executing program 4: [ 310.689221][ T9634] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.696307][ T9634] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.718076][ T9634] device bridge_slave_1 entered promiscuous mode [ 310.790596][ T9634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.840564][ T9636] chnl_net:caif_netlink_parms(): no params data found [ 310.851794][ T9634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.918836][ T9634] team0: Port device team_slave_0 added [ 310.938227][ T9634] team0: Port device team_slave_1 added 09:04:51 executing program 5: [ 311.044330][ T9631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 311.190177][ T9634] device hsr_slave_0 entered promiscuous mode [ 311.217218][ T9634] device hsr_slave_1 entered promiscuous mode [ 311.297074][ T9634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.304816][ T9634] Cannot create hsr debugfs directory [ 311.322223][ T9631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 311.368524][ T9636] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.375643][ T9636] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.384754][ T9636] device bridge_slave_0 entered promiscuous mode [ 311.403452][ T9644] IPVS: ftp: loaded support on port[0] = 21 [ 311.410211][ T9636] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.413219][ T9642] IPVS: ftp: loaded support on port[0] = 21 [ 311.417397][ T9636] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.437123][ T9636] device bridge_slave_1 entered promiscuous mode [ 311.450534][ T9631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 311.521014][ T9631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 311.608216][ T9636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.630425][ T9636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.697122][ T9636] team0: Port device team_slave_0 added [ 311.732578][ T9636] team0: Port device team_slave_1 added [ 311.762089][ T9639] chnl_net:caif_netlink_parms(): no params data found [ 311.821968][ T9636] device hsr_slave_0 entered promiscuous mode [ 311.877566][ T9636] device hsr_slave_1 entered promiscuous mode [ 311.937148][ T9636] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.944752][ T9636] Cannot create hsr debugfs directory [ 312.031776][ T9634] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 312.113479][ T9634] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 312.172572][ T9634] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 312.229531][ T9639] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.236654][ T9639] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.244798][ T9639] device bridge_slave_0 entered promiscuous mode [ 312.256031][ T9639] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.263248][ T9639] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.271474][ T9639] device bridge_slave_1 entered promiscuous mode [ 312.278839][ T9642] chnl_net:caif_netlink_parms(): no params data found [ 312.334527][ T9634] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 312.436494][ T9639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.474145][ T9642] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.481422][ T9642] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.489847][ T9642] device bridge_slave_0 entered promiscuous mode [ 312.503905][ T9639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.528319][ T9642] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.535517][ T9642] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.553093][ T9642] device bridge_slave_1 entered promiscuous mode [ 312.575309][ T9642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.595196][ T9644] chnl_net:caif_netlink_parms(): no params data found [ 312.605042][ T9636] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 312.639330][ T9636] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 312.720038][ T9642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.733713][ T9631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.759391][ T9636] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 312.806826][ T9636] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 312.871774][ T9639] team0: Port device team_slave_0 added [ 312.895791][ T9642] team0: Port device team_slave_0 added [ 312.903937][ T9642] team0: Port device team_slave_1 added [ 312.929802][ T9639] team0: Port device team_slave_1 added [ 312.945926][ T9644] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.953574][ T9644] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.961932][ T9644] device bridge_slave_0 entered promiscuous mode [ 312.994118][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 313.003694][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 313.013619][ T9631] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.021194][ T9644] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.028485][ T9644] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.036347][ T9644] device bridge_slave_1 entered promiscuous mode [ 313.099732][ T9642] device hsr_slave_0 entered promiscuous mode [ 313.157489][ T9642] device hsr_slave_1 entered promiscuous mode [ 313.197094][ T9642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.204673][ T9642] Cannot create hsr debugfs directory [ 313.282230][ T9639] device hsr_slave_0 entered promiscuous mode [ 313.337699][ T9639] device hsr_slave_1 entered promiscuous mode [ 313.407093][ T9639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.414747][ T9639] Cannot create hsr debugfs directory [ 313.431009][ T9644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.475243][ T9644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.514993][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 313.527529][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 313.535879][ T2807] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.543135][ T2807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.565934][ T9644] team0: Port device team_slave_0 added [ 313.574802][ T9644] team0: Port device team_slave_1 added [ 313.587242][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 313.597514][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 313.606055][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 313.614945][ T2809] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.622079][ T2809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.681946][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 313.740202][ T9644] device hsr_slave_0 entered promiscuous mode [ 313.777959][ T9644] device hsr_slave_1 entered promiscuous mode [ 313.817549][ T9644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.825139][ T9644] Cannot create hsr debugfs directory [ 313.889836][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 313.924142][ T9634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.937599][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 313.946271][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 313.955854][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 313.964821][ T9642] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 314.025906][ T9642] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 314.105488][ T9642] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 314.160685][ T9642] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 314.233372][ T9634] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.245703][ T9636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.265908][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.274085][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.282313][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 314.291507][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 314.316250][ T9636] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.346428][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.354986][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.366857][ T2809] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.373963][ T2809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.381886][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 314.392572][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.401036][ T2809] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.408133][ T2809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.416483][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 314.424283][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 314.431943][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 314.440778][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 314.449234][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.457817][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 314.466263][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 314.475247][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 314.490780][ T9639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 314.550097][ T9639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 314.632024][ T9639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 314.683729][ T9639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.756468][ T9648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 314.766457][ T9648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 314.775099][ T9648] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.782193][ T9648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.793895][ T9648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 314.802570][ T9648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 314.811102][ T9648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 314.819583][ T9648] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.826648][ T9648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.834448][ T9648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 314.848557][ T9648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 314.882303][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 314.891127][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 314.899756][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 314.909188][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 314.918176][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 314.926456][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 314.935047][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 314.948041][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 314.956321][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 314.964841][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 314.973666][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 314.982470][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 314.990518][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 315.029658][ T9644] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 315.092410][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.102263][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.111129][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.119720][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.144005][ T9644] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 315.222319][ T9644] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 315.282756][ T9634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 315.297616][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.305056][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 315.312707][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.321793][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.339335][ T9644] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 315.372317][ T9636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 315.390407][ T9631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.447069][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.454517][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 315.489075][ T9634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.499897][ T9636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.513764][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 315.521581][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 315.529074][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.540403][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.614315][ T9639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.623149][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 315.633928][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 315.643496][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 315.651708][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 315.673182][ T9642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.682371][ T9631] device veth0_vlan entered promiscuous mode [ 315.690715][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.700248][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.740610][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 315.752235][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 315.760421][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 315.769573][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 315.793983][ T9642] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.809809][ T9639] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.828146][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 315.839691][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 315.847585][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 315.856104][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.864823][ T2809] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.872049][ T2809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.881039][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 315.893513][ T9644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.917293][ T9631] device veth1_vlan entered promiscuous mode [ 315.932797][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 315.940960][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 315.950503][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 315.959079][ T2807] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.966164][ T2807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.974257][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 315.983894][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 315.992397][ T2807] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.999492][ T2807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.007792][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 316.020973][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.029490][ T2807] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.036560][ T2807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.044692][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 316.052932][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 316.064515][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 316.073129][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 316.081303][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 316.089859][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 316.106680][ T9636] device veth0_vlan entered promiscuous mode [ 316.120145][ T9634] device veth0_vlan entered promiscuous mode [ 316.148144][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 316.156153][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 316.165430][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 316.174137][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 316.182706][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 316.191984][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 316.200614][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 316.209343][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 316.219025][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 316.227932][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 316.236201][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 316.244887][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 316.254259][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 316.261989][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 316.271711][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 316.279746][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 316.307375][ T9634] device veth1_vlan entered promiscuous mode [ 316.333343][ T9636] device veth1_vlan entered promiscuous mode [ 316.358473][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 316.366533][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 316.378657][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 316.386834][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 316.395902][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.404411][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 316.414187][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 316.422943][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 316.432030][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 316.444004][ T9644] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.467175][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 316.475307][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 316.490100][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 316.524557][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready 09:04:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000000)=0x6) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r4, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) accept(r4, &(0x7f00000003c0)=@x25, &(0x7f0000000540)=0x80) ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000840)=0x0) getpgid(r5) getpgid(r5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r6 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r6, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) accept(r6, &(0x7f00000003c0)=@x25, &(0x7f0000000080)=0x80) ioctl$sock_SIOCGPGRP(r6, 0x8904, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000840)=0x0) getpgid(r7) ptrace$poke(0x5, r7, &(0x7f0000000040), 0x3ff) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 316.587707][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 316.608025][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 316.640249][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 316.641051][ T9656] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 316.662923][ T2753] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.671623][ T2753] bridge0: port 1(bridge_slave_0) entered forwarding state 09:04:56 executing program 1: close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='bdev!)-%+wlan0posix_acl_access}\x00'}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r2, &(0x7f0000000080), 0x0, 0x100000000) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{{0x2}, {0x2, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7d, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000380)={r5, 0x6a, 0x9e, 0x81, 0xaaf2, 0x4968}, &(0x7f0000000400)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000080)={r5, 0xb0}, 0x8) [ 316.682957][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 316.716756][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 316.740080][ T2753] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.747233][ T2753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.754613][ C1] hrtimer: interrupt took 45433 ns [ 316.775019][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 316.803934][ T9642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.834524][ T9642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 316.864206][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 316.885638][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 316.894362][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 316.902888][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 316.967584][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 316.986065][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 317.001312][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 09:04:57 executing program 2: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfba1133f8fc07f7b, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00') r0 = open(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000140)=r0, 0x4) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xfffffffffffffea1, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @xfrm={{0x9, 0x1, 'xfrm\x00'}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) [ 317.054947][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 317.065215][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 317.080720][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 317.090529][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 317.100291][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.108182][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.135202][ T9639] 8021q: adding VLAN 0 to HW filter on device batadv0 09:04:57 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x600100, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x4) syz_open_dev$dmmidi(&(0x7f0000000900)='/dev/dmmidi#\x00', 0x2, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r1, 0x400, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) connect$netrom(r2, &(0x7f00000000c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) close(0xffffffffffffffff) prctl$PR_GET_TSC(0x19, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000140)) r4 = syz_open_dev$loop(0x0, 0x0, 0x100082) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r5, 0xc0845658, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@initdev, @in6=@remote}}, {{@in6=@ipv4={[], [], @empty}}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) dup2(r6, r4) [ 317.185003][ T9671] IPVS: ftp: loaded support on port[0] = 21 [ 317.192553][ T9644] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 317.238426][ T9644] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 317.261450][ T9642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.275760][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.288485][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.312296][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 317.343771][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 317.377097][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready 09:04:57 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ptrace$poke(0x4, r0, &(0x7f00000001c0), 0x8) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000002c0)={0x3}, 0x1) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0xfeffffff, r4}) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x3c, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0x6a, @mcast2, 0x5}]}, &(0x7f0000000440)=0x10) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000040)=0x33e) [ 317.386826][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 317.496050][ T9644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.525782][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.541082][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.607667][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 317.615830][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 09:04:57 executing program 1: close(0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='bdev!)-%+wlan0posix_acl_access}\x00'}, 0x30) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r2, &(0x7f0000000080), 0x0, 0x100000000) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{{0x2}, {0x2, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7d, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000380)={r5, 0x6a, 0x9e, 0x81, 0xaaf2, 0x4968}, &(0x7f0000000400)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000080)={r5, 0xb0}, 0x8) [ 317.659429][ T9639] device veth0_vlan entered promiscuous mode [ 317.723827][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 317.759656][ T2809] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 317.854267][ T9639] device veth1_vlan entered promiscuous mode [ 317.898819][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 317.925208][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 317.955698][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.123006][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 318.130645][ T9672] IPVS: ftp: loaded support on port[0] = 21 [ 318.131343][ T9680] syz-executor.0 (9680) used greatest stack depth: 22168 bytes left [ 318.150193][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 318.164925][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 318.202865][ T9642] device veth0_vlan entered promiscuous mode [ 318.290966][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.304015][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 09:04:58 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) mount$fuseblk(&(0x7f0000000100)='/dev/loop0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) fchdir(r0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) write$capi20(0xffffffffffffffff, 0x0, 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xa03e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x0, 0x0, r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x2}]) [ 318.343629][ T9642] device veth1_vlan entered promiscuous mode 09:04:58 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000180)='y\x00', 0x2, 0x1) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r4 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ptrace$poke(0x4, r0, &(0x7f00000001c0), 0x8) write$P9_RREMOVE(r4, &(0x7f0000000280), 0x1033b) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r5, 0x84, 0x15, &(0x7f00000002c0)={0x3}, 0x1) fdatasync(r4) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000200)={0xfeffffff, r4}) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x3c, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e20, 0x6a, @mcast2, 0x5}]}, &(0x7f0000000440)=0x10) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000040)=0x33e) [ 318.407728][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.420275][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 318.438038][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 318.469125][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 318.517412][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 318.540280][ T9644] device veth0_vlan entered promiscuous mode [ 318.644865][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 318.644881][ T28] audit: type=1804 audit(1578819898.593:31): pid=9712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir302218747/syzkaller.o6vtJo/1/file0/file0" dev="loop3" ino=23 res=1 [ 318.660539][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 318.706840][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 318.725371][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready 09:04:58 executing program 3: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{}, {0x20000010304, @local}, 0x0, {0x2, 0x0, @local}}) pivot_root(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) setpriority(0x0, r2, 0xffff) mkdirat(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() rt_sigqueueinfo(r4, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a0014000000140003006970766c616e31000000000000000000"], 0x3c}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet(0x10, 0x3, 0xc) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000280)=0x6, 0x4) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r6, 0x40e, &(0x7f0000000100)=0x2) r7 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x23, &(0x7f0000000280)=0x6, 0x4) ioctl$SG_SET_TIMEOUT(r7, 0x2201, &(0x7f0000000000)=0x400) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013001d70fd186e000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000a000d000000140003006970766c616e31000000000000000000"], 0x3c}}, 0x0) ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x5) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) [ 318.790634][ T9644] device veth1_vlan entered promiscuous mode [ 318.827222][ T254] tipc: TX() has been purged, node left! 09:04:58 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x800, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x4, &(0x7f00000001c0)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @generic={0x0, 0x1, 0x0, 0x2000, 0x5d1}], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0xbf, &(0x7f0000000480)=""/191, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f0000000300)={0x0, 0x6}, 0x10, r1, r2}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x10, &(0x7f0000000200)={&(0x7f0000000080)=""/200, 0xc8, r1}}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='fd\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f00000002c0)=@framed={{}, [@map={0x18, 0x7, 0x1, 0x0, r4}]}, &(0x7f00000003c0)='GPL\x00', 0x100000000004, 0xffd, &(0x7f000062b000)=""/4093, 0x82200, 0x2, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x78) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000840)=""/238, 0x31}], 0x1, &(0x7f0000000340)=""/58, 0x3a}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r7, 0xc0845658, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r7, 0xc0305615, &(0x7f00000005c0)={0x0, {0x80000000, 0x7}}) r8 = syz_open_dev$vcsa(&(0x7f0000000600)='/dev/vcsa#\x00', 0x7, 0x80800) write$P9_RXATTRCREATE(r8, &(0x7f0000000640)={0x7, 0x21, 0x2}, 0x7) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xa0004000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x68, 0x0, 0xb6322cbe825fca6f, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}]}, 0x68}, 0x1, 0x0, 0x0, 0xa4000}, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000040)={0x1, [0x0]}) 09:04:59 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev}, 0x6c) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0x3, 0x1000, 0x4, 0x3}) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffffb5, 0x0, 0x0, 0xffffffffffffff8a) [ 319.145316][ T9724] bridge0: port 3(ipvlan1) entered blocking state [ 319.186587][ T9724] bridge0: port 3(ipvlan1) entered disabled state 09:04:59 executing program 5: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540)='NLBL_UNLBL\x00') sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x58cdc863faa71e19}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, 0x3, 0x1, 0x200, 0x70bd29, 0x25dfdbfd, {0x1, 0x0, 0x1}, [@CTA_MARK={0x8, 0x8, 0x1f}, @CTA_MARK={0x8}, @CTA_TIMEOUT={0x8, 0x7, 0x66e3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040800}, 0xf68fdc8e0ee6e193) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={0x0}}, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, 0x0, 0x0) close(r0) 09:04:59 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000080)=0xff, 0x4) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x208100, 0x0) r3 = gettid() pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f0000000380)) r7 = dup(0xffffffffffffffff) setsockopt$packet_int(r7, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r8 = getpgrp(0x0) capget(&(0x7f0000000000)={0x0, r8}, 0x0) r9 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x5452, &(0x7f0000000040)) r10 = timerfd_create(0x7, 0x0) timerfd_settime(r7, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) timerfd_settime(r10, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) fcntl$getownex(r10, 0x10, &(0x7f0000000280)={0x0, 0x0}) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r12, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000c40)=ANY=[], 0x0, 0x1) r13 = socket(0xa, 0x3, 0x8) r14 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x40000000, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x5}}, 0x2cb) r16 = gettid() waitid(0x0, r16, &(0x7f0000000040), 0x2, &(0x7f0000000b00)) sendmsg$key(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r15, @ANYRESDEC=r16]], 0xfffffffffffffe56}}, 0x20004850) r17 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r18 = syz_open_dev$sndseq(&(0x7f0000001140), 0x0, 0x208840) r19 = dup2(r18, r17) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r19, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) r20 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r20) r21 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) writev(r21, &(0x7f0000001080)=[{&(0x7f0000000a00)="2bafff1c002e92e5a0ed2d9348725b6ee0c6ab85779fae1353236efea0db63a820ff5f26b87006a2a1dd1baa50128aa604458f9c546008bf53bf457d914e53215a6608e7b4925845e54a8d46289bd634d38f9950ab450e1933cff9df467af93cb33bea1ce4c9285f6e5d3f4dabde87e85fda65f95192b4a88b3ef0f506abe513fee9e553431b68fe8fb4fed784a2e87355089d7049ad56059f0da7f5a2eb24f0fb95a0ce3042aaf6c03e6a75fc1dcaf44a3100a9caa4d66234ad6a2b08ed6eaf7752b2e38da483bef4920890173d513456fc6140f69eb4b08684bc", 0xdb}, {&(0x7f0000000bc0)="968deb772e9551268b3f6681964e8eebf287c9182fb703d3632666dafdcfe0aeadf21a2757d48d0944e72bac6e6f2d9b22b2156c81812a238405fb7701a5bdaebb2debc7b46e51861e2b9256b7ea3f47d5df24d24830eeb0e225234d55945389289440a3d027da4fa76cf35f9ce17d56c48c6460e1af2a3e9ddff6f83f38d175f470bb915ce2c933a82d8b352c0883febd2507389866b7739bdf0f3acf7eee0f4d8942a470cc7adfdd339b59d90774db88ea8c6755b49a7e5979a47f0050053cfd51e84d8af9923666f9f2fdfe04095955adea1afd33685d26a280dbe94c92bd0872", 0x58}, {&(0x7f0000000cc0)="eb1651654075654737aa9ec34af07055bc1959ddc99cf19cf5cbe865cc4eb308f9a29b9898ee315ddcae68430a37a83fb0cdf589f0b62dc9744d35948a9f85e2fff474247cde966686a0943fd3b490e43f22e07e094877bf8c4d24f3ba7ea289d2ce7e159c3a8e8fcb53d4850569918e2ec56d095d4f37654a91783bec7f9b5681febb963a0e24e74c0b", 0x8a}, {&(0x7f0000000580)="fe2cbc858176356b67d8c8e61ea032f03c637ce1ddbc233ecc248b87ab2de3d4366717d4827847fb50fa34cde4e7a7de25665f51d7bd153dbd2ae4209079b552cfd140c42d829f31f3e1d66a56c7fce351944e0a46f2c43fc432c628ebdc70d1e0819d353fa04f9ac8ebdc457e039508e8d5", 0x72}, {&(0x7f0000000d80)="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", 0xfc}, {&(0x7f0000000900)="69e7cddbd0f5f460443c289d41803bee559871cccfcf3d17a478a3e80cbc0502bb5bfe954a586ccf296c7a3d28898a5e1631fbfcec7eebcf5d9505440860e4b6880df29335a49930591d8044589d0bdfcd191a6b24176d34839a8afe6d468c45fe0a0b4cbe7080", 0x67}, {&(0x7f00000004c0)="5935277c238dcac26e3b653846d2bf2e6ba7fdbfd8861b091b1ece7ed3c9f5f1f49919bc48f4d5dd40639da85ad229c90e9f8be7ae47", 0x36}, {&(0x7f0000000e80)="c0947b92945c3a8c6fda7e96232a0ecfa6d8d661961a75fad1ebe58fb4261bfffcad44991c1dbc6cc4612a199bd664fef311b75275ec50a5466708ef950998f3f25c725fcb01da2c0d23b1257a92493f566b5976e1f5f30b90c4c01421356b229edfc38b16c581b482937a11e6e0b0e31ed604c2d847ec1a4e03a0d113ac6ad52ef7b4f0ce915aca73ba4d8132855a8df17721c3c296254fccd27793d151db71bf2eb2a6d6abce66e5c5a6962356d8a8ba7f11ea1834ef2668198f7e087189af192b4dac984e2903d638f5220a10f8fa8ab219be63fcbff88d0beb14fb0f", 0xde}, {&(0x7f0000000f80)="d62f59de861be9419221117f7fbc41c1b4f57e9b9c4f309472902c3b6cc1276f85406eecea54a8c940ba945312a6d3080956eb06a3a1f1b3d64fef7bc9c9826bf7e0ad2b3573bfb1b0cf65003756b71ff3c8d24706802de95c880b6dec82d4ddd996ab87f9ec56aaf4ba6245f7eb9508fe503a5a84bc25c66324fbb540f0ab572bb44ef822483c684ea9671a84f78ad86ba90cc27d1f51516d68e36c87858a3526ba78d6910fb8cbbb9befd3cc8fa36041b6ec9a87a050c013b36895077dee1e813a7684ddeb8593ff16efdbb62396a9c3994a44b7f8fac9222a0eff0b24b378af73712f545c8c67e9557ed4", 0xec}, {&(0x7f0000001900)="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", 0x1000}], 0xa) ioctl$SG_GET_REQUEST_TABLE(r21, 0x227d, &(0x7f0000000780)) kcmp(r20, r16, 0x0, 0xffffffffffffffff, r21) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x4, 0x4, 0x0, 0x10002}, &(0x7f00000009c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x79c9e9235c799199) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r16, r19, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00', r22}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={r22}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000780)='cgroup.subtree_control\x00', r22}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r11, r12, 0x0, 0x1, &(0x7f0000000080)='\x00', r22}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r9, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r22}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r22}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={r22}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r23, r7, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00', r22}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r6, r5, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00', r22}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00', r22}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={r22}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r22}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r3, r4, 0x0, 0x9, &(0x7f0000000200)='/dev/kvm\x00', r22}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r1, r2, 0x0, 0x82, &(0x7f00000000c0)='m\x06\x00j\x00y.\x02ven\x01\x04\x00\xf1\xbb\xfc4\xd4-,\x91\xa1\xecz\x9f%\xc3\xe9\xd8\xf0h0\xd3\xa8\xaaYig\xc8\xba\x85\x8f\xb8\xb5x\xd0|&\x01\xdf\xef=\xb8Q\x1c\xfeD#\xa1k\t\x86\xc2\x89)\xd8N\xf5\x8b8\xb3\xb6kzk\xd4W\x8a.\xc9ssH\xa0g\x87\xc5h_\xa1\xa1W\xbc\x93\xf9V\xa7\x8a\xc2\xb1\xe6\x8c\x82I_\x04\x1e\x84\xc1\x9d\x8eWl%X\x9d\x10\xed\xd9fpjU\xc6\x88\x85\xc8\xf6\x00', r22}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffbf51bf}, 0xc) unshare(0x60040000) [ 319.388896][ T9724] bridge0: port 3(ipvlan1) entered blocking state [ 319.411106][ T9724] bridge0: port 3(ipvlan1) entered disabled state 09:04:59 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffa, 0x6d1a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5865604c5d587d95}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000000080)={0x6, 0x80000001, 0x0, 0xd0, &(0x7f0000000240)=""/208, 0xfe, &(0x7f0000000340)=""/254, 0x0, 0x0}) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x79, 0x1}, 0x7) sendto$inet(r2, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000640), 0x0) setresuid(0xee01, 0x0, 0x0) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xffffffffffffffff, 0x0, 0x9000000) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, 0x0, 0x24040000) [ 319.718210][ T9750] IPVS: ftp: loaded support on port[0] = 21 09:05:01 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001e005f0214fffffffffffff8070000000000000000000000080008000d000000", 0x24) open(0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00002abd7000fcdbdf25060000003000070073797374656d5f753a6f626a6563745f723a69707461626c341ea62cba5ea4de25981b2b3765735f696e697472635f657865635f743a7330000800050027f391c31400020000000000000000000000ffff0000000014000600687372"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c041) fchdir(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x3) socket$inet6(0xa, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 09:05:01 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$BLKPG(r0, 0x1269, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x4) r1 = getpgrp(0x0) setpriority(0x0, r1, 0xffff) r2 = socket$isdn(0x22, 0x3, 0x25) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x0) socket$inet6(0xa, 0x40000080806, 0x0) r3 = socket(0x40000000015, 0x805, 0x0) getsockopt(r3, 0x114, 0x2719, 0x0, &(0x7f00000000c0)) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x4140, 0x0) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000100)) 09:05:01 executing program 5: write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46020000000000000000c4b40003003e000039a594249c1fd83d0000000000000000000000000a000000280593bd5d74dafc2038"], 0x37) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) write(r2, &(0x7f0000000200)="839ce94190e097a34728f6f13439214fb4091a61ff20a1aeea8f267e7c1ac6a3e78ec5bbb4385b1f8d6ee08fab4fb367750a6b316c165b267f04fab765a5feec1172348203ae125d84670e7d2f75dfd5afda7f6ddb3e166d212db5a51dca0d963ffe361d2b4f2ffec810619840d278fe803acf2e665e86ec9e75e55001ffdca8ea85425a6ac49685b7d8d8a47a3c1099b347c7b45d20a36455b9a7fdc369c2ce032070f151d7b1884fb2c88f0d0858f9c9e73e8b0ced47f3dab9", 0xba) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) fcntl$getownex(r4, 0x10, &(0x7f00000002c0)={0x0, 0x0}) r6 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r6, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) accept(r6, &(0x7f00000003c0)=@x25, &(0x7f0000000540)=0x80) ioctl$sock_SIOCGPGRP(r6, 0x8904, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000840)=0x0) getpgid(r7) r8 = clone3(&(0x7f0000000640)={0x1000, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380), {0x14}, &(0x7f00000003c0)=""/217, 0xd9, &(0x7f0000000500)=""/193, &(0x7f0000000600)=[0xffffffffffffffff, r7], 0x2}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r9, 0xc0845658, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r8, 0x7, r9, &(0x7f00000006c0)={r2, r10, 0x100}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x18, r3, 0x1, 0x6, 0x6, @dev={[], 0x1d}}, 0x14) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 09:05:01 executing program 1: perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0x45}, 0x4) r1 = syz_open_dev$dri(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x35, &(0x7f0000000300)=0x3, 0x4) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x3f) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000180), &(0x7f00000002c0)=0x4) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80084504, &(0x7f0000000200)=""/166) fsetxattr$security_ima(r4, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000100)=@v2={0x0, 0x0, 0x0, 0x6, 0x10, "589db067ecf97482a38b154dc1af4825"}, 0x1a, 0x0) r5 = dup(r3) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r6 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) 09:05:01 executing program 0: gettid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0xda4fff08) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x660c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)=@caif=@dgm={0x25, 0x2, 0xa8}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000380)}], 0x1}, 0x4004080) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) ioctl$IMGETVERSION(r2, 0x80044942, &(0x7f0000000040)) socket$kcm(0x10, 0x8, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$kcm(0x2, 0x0, 0x84) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="006d256d00027920"], 0xda00) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000280)=@ipx={0x4, 0x4, 0x3, "7de0cc7716bf"}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[{0x10}, {0x10, 0x0, 0x4}], 0x20}, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) socket$kcm(0x2, 0x0, 0x0) 09:05:01 executing program 4: socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x5b, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = getpid() sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000003880)=' \x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f0000000740)}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x70, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000380), 0x7}, 0x0, 0x0, 0x3f6c1bb9, 0x0, 0x0, 0x9, 0x40}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'\x00', 0x802}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x260c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x11) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x1b, &(0x7f0000000040)=r2, 0x52d) socket$kcm(0x29, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10b501, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f00000000c0)={0x3ff, 0xd81, &(0x7f0000000200)="b78cefc3b744a71a98222a54481a43edda04605a9cb3a7df5ea62e9342025334339b674f16a97b7348393586e09351b2a094729b0156f483c50b9ca8d89c3cd0edc5b2a34ac1181682a80b7a0c4c8252661ca29d7ea8ead6b351cfed90b428e49c847ebe2916991daa68a3a940b7546b6709a033fd464b429a5e7114bae29b7d30cbcfb53cd1077f8759786ea70c18982220f13ae690b8d6b153044cdfe75dbba5d593c7dc7b39189c109f06a7a4a71e3ee784cd9d8e199d04fa3e1b210c54a18f933bba54e580d352c04b3360d4d020c90ce517b4c11ccf39472c9d884f5b190289f19f7b", &(0x7f0000000440)="f258803d6a59d336d6af83b531f33d9384c68c72ce07e72e9012db43a3c94380f63082727865f85721c57f9c165a1b44a4c058046af19e54975c0866da111f35e917b74409aeaea9b879ddbb359e3a04198f1d5f25b1", 0xe5, 0x56}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={&(0x7f0000000040)=@un=@abs, 0x80, 0x0}, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) [ 322.082950][ T28] audit: type=1804 audit(1578819902.033:32): pid=9767 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir069228019/syzkaller.QEx0ru/6/memory.events" dev="sda1" ino=16553 res=1 09:05:02 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001c80)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000600)=""/22, 0x16}, {&(0x7f0000000640)=""/172, 0xac}, {&(0x7f0000000700)=""/79, 0x4f}, {&(0x7f0000000780)=""/93, 0x5d}], 0x4, &(0x7f0000000c80)=""/4096, 0x1000}, 0x100) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001cc0)={'bond0\x00', r0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="700100002400ffffff003f000000000000009300", @ANYRES32=r2, @ANYBLOB="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"], 0x170}}, 0x0) r3 = socket(0x10, 0x800000000080002, 0x0) r4 = socket(0x10, 0x80002, 0x0) ioctl(r4, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe8696071") sendmmsg$alg(r3, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) 09:05:02 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x1c8bf4ef94364938) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0xffffffe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x1010, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) fremovexattr(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000240)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window={0x3, 0x0, 0x97}, @sack_perm], 0x4) sendmmsg(r2, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="0fca9aa2fd2e378e81e919c46e28bfbfade654c9801265f5ab899792b1692d44974fad9140d29af2e89cd9950705120f6ded398d942fe646172d3b0bd7b09be49bb2e1db2935ead125381070f577a078aac4a9fe1b8d191c0a0200000000000000855a3b28edce3278eb49fb01af725ecd1b0d161441"], 0x1}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(r3, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r5, 0xc0845658, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000180)=0x1, 0xfffffef6) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1000004954ff000000000800"], 0x1}}, 0x4000) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100), 0x618) close(r3) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup2(r6, r6) ioctl$FICLONE(r2, 0x40049409, r6) bind$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') 09:05:02 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7fff, 0x1) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x800}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xca, 0x7fff, 0xae, 0xed72, 0x40, 0x0, 0x8}, &(0x7f0000000240)=0x9c) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"/756], &(0x7f0000000100)='GPL\x00'}, 0x48) 09:05:02 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x400f00, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000300)={0x5, 0xffffffaf, 0x1}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r2, &(0x7f0000001300)=[{&(0x7f0000000200)="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", 0x7df}], 0x1) ioctl$TIOCEXCL(r2, 0x540c) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r4, 0x82f5509e0015595d}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x15228040}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='p\x00 \x00', @ANYRES16=r4, @ANYBLOB="00042dbd7000fbdbdf25040000001c0001000600010002000000060002002e00000008000500000000000800040008000000080006000600000008000500010001000800050004000000080005000800000008000400fdffffff080004000400000008000500808f0000"], 0x70}, 0x1, 0x0, 0x0, 0x8}, 0x20000000) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @local}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x91, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28008884}, 0x40) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) gettid() r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6174000000000000000000000000000000000000000000000000000000ff0f000000000500000010040000d8010000d8010000a8020000b800008ed77ec60fba1f51007803000078030081e40300007803000005000000", @ANYPTR, @ANYBLOB="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"], 0x3) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000400)={@my=0x1}) dup2(r5, r6) [ 322.479100][ T28] audit: type=1804 audit(1578819902.433:33): pid=9776 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir069228019/syzkaller.QEx0ru/6/memory.events" dev="sda1" ino=16553 res=1 09:05:02 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x25e, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) connect$l2tp(r3, &(0x7f0000000500)={0x2, 0x0, @remote, 0x3}, 0x10) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/vcs\x00', 0x200000, 0x0) renameat(r2, &(0x7f0000000440)='./file0\x00', r4, &(0x7f00000004c0)='./bus\x00') ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000380)={0x8, 'syz1\x00'}) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x10}}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e23, @broadcast}, 0x94, 0x0, 0x0, 0x0, 0x8000, &(0x7f00000002c0)='veth0_to_team\x00', 0x400, 0x81, 0x4}) socket$unix(0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000200)={0x2, [0x6, 0x9]}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x91001, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r7, 0x8917, &(0x7f0000000400)={'lo\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000280)={0x5, 0xeba, 0x5, 0x8000, 0x2, "3b2847634c601847486d17c9b53384bc70182d", 0x7, 0xfffff4a1}) write$UHID_INPUT(r5, &(0x7f0000000980), 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3ecb9cf9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="08000000020000007fa2f416b4dd3adcb540c7cb1a5c582f676b1910fb8b0b37"], 0x0) sendfile(r5, r5, &(0x7f00000000c0), 0x8080fffffffe) 09:05:02 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x6c) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="c8"], 0x1) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffc}, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) 09:05:02 executing program 5: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x14) r3 = socket$inet(0x2, 0x3, 0x83) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000140)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000280)=0x1, 0x2e9) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) fsmount(r4, 0x0, 0x4) [ 322.664822][ T9816] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 09:05:02 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffff6}, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, 0x0, 0x4000000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, 0x0) r1 = socket$inet(0x2, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x1, @multicast2}}}, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_tcp_int(r3, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000000c0)={0x0, 'veth0_to_hsr\x00', {}, 0x1}) 09:05:02 executing program 1: r0 = socket(0x11, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffcc1, &(0x7f0000000080)={0x0, 0xfffffdf7}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) sendmsg$nfc_llcp(r2, &(0x7f0000000180)={&(0x7f0000000200)={0x27, 0x1, 0x1, 0x4, 0x1, 0x8, "fa7185be673cdad423c4d3542d313dac20d6cfd9bb267103c1127bd34811c35b5d4e35f0ae54cd72bb67a2b5547d8d82533ff1eb4a285b913d3f3118edc334", 0x16}, 0x60, &(0x7f0000000640)=[{&(0x7f0000000000)="fcbf1cde88d6a6de72c749c8", 0xc}, {&(0x7f0000000280)="e2b917d2669da42ea226c9d74595838393fcc94d02c7a918fd8f6a32c1310e5fa496bf1d04f6896d4bd58f944f9896931fb4f8e4160904d2dbcfac252db0517cdb68a602c2c3d97c2ceeac1507aa002f370c1da6c86f604cfcbbf1bc2845faccb1f36cbc253e45dd00ecb70b04a6a6932d61d53350c3e3", 0x77}, {&(0x7f0000000300)="70ba24dc1758e342aaab5c1aa9a179a598e2df544e24f7da96ddde482fcbd6edeb7675c3e2b2aebe6e52efaf1832374c087080794ff722ece1e40278679e4977cd", 0x41}, {&(0x7f0000000380)="96c5096e641de8fcfeee6162c4c0a70a7d9e28190ea2b0836ad523e2c044aa9e62ce74ceb7d630951c4c6c4bc3149ab76ad6b5ff4f64cbddbbd0b2c0700429e2a6d89d193be85dd954fbe3025bacd2de3ef1d4c9333523a3e890b113bf9e13860f7e7f4722632483a2c456a677bb782f3eb0be499662d1b4cd6604fdad", 0x7d}, {&(0x7f0000000400)="5e5d013c61ddc7137791d97d21e422592d169db6ce8455522735411d66e42bba6e42651c10bcc9a37cae1d0333fa0f59f0be8c61432c27d672fe1cfacc633c74178cb1b00b9960fbf1", 0x49}, {&(0x7f0000000100)="c3b0fed780eac6ab664e404d5551adae57d29658b6e9bd6a2dd3be", 0x1b}, {&(0x7f0000000480)="a0360643160ec0c7df3a4882af67500789ae85e5140d9f0331448c6693633e6313229379fe929cb3593146aecdb1fbff3047a6393ca40f1655b75fc9e0b1876ad357418400148191e7b55ee99f52f628af4ae4991b44bc031f004bc65e3d637938ee9b4428edb6fb06cf56e80834a92db709735f6de4591239e58c8f9271d9d83f05e031597a", 0x86}, {&(0x7f0000000540)="fdd4a5b764758d0e7f0208f8b860579d817d1f1a986f58777783b01690016a5ac1583f669eba5603a0c6e9b662d10fcfb4893521f981c95c0af4ab79af3e023e2f6a128472bc7a3e8836f52b1db894544c7f4823b043bdd3ab8e1cfcd3083640a99421a365cdcdd4fd40f16050535c536dae281219ca81405ac45e7d9688edf6db10f5431e816d4191f32f8810db72bb4bf66dc0f44451f340ba8a8bbba1cc650677dd2976a726a583ddb75516ea7ff504dda3c8775374a5c829868e8bc806f1eb953e11107d5e58bfcdb648e3c6304f56084e", 0xd3}], 0x8, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000001d01000018000200bc1c6c1b9e3c6be0c69371dac0a7275dfda30000000000000013fd46fdbb004a8a00000000000000"], 0x2c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924a61, 0x0) [ 322.876549][ T9830] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 322.897281][ T9830] FAT-fs (loop4): Filesystem has been set read-only 09:05:02 executing program 2: add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x50d, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x17}, 0x1c) sendmmsg(r0, &(0x7f0000007e00), 0x400000000000058, 0x0) 09:05:02 executing program 3: getpid() r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x8000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@empty, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000001940)=0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) syz_mount_image$exfat(&(0x7f0000000200)='exfat\x00', &(0x7f0000000240)='./file0\x00', 0x330d80000, 0x9, &(0x7f0000001840)=[{&(0x7f0000000380)="04e5c48b965688122a8885f3519a3f9a1db46f248379a14cb6598c9699edf827f3c34d3d3290c85968c74222a28014ad14cec66d2c8b61c4df1db36c2fb5a81f2a270d445ed941ac69d6850740312987dc5935e3a458e93281475501f86c9b920c8788bfa61b01643944a7bcf4b79d4775d522edd853a5afc8decad74268c8", 0x7f, 0x3f}, {&(0x7f0000001400)="1bbff85944d5b0501a909b068c36aebafc7bf796bbb576a13eab6a0486a863a501483a55cb3fbfcc", 0x28, 0x43}, {&(0x7f0000001440)="d84583398a9aa632f7c39dbd44d6", 0xe, 0x3}, {&(0x7f0000001480)="f86558a22bd6832c3f4df8328cb407d75054c4f36410cb2c0b92b205bc0424", 0x1f, 0x40}, {&(0x7f00000014c0)="905adad47f5b09c4fd214e96f9636fdec43a2ce06ab5327df7675f302b13f0402207ff36ed79d8bbf7807b1569a1e713bf794eaa83cce11418678a08f9e42d3935d7be57d21467b83c2ab71746bb33528dee084d144df8b94facf614be8c840c1ce1469d679bdb95357bb4abc56f1c13cd63c11f6a0680ad2cd217d5d0486b78c40c794cf7f3acfcc758da99fb16b8252511b7370c23ce2ca26b80b87184cbbb21b56b273ee088c3c8f05df5713b0f70a47a174daedc9277a64efbf521829bc178e1368a69744a4e98b3a914c0bb8c8d9f9dd463ad1090975703afff72", 0xdd, 0x100}, {&(0x7f00000015c0)="6cc802a32f58363428c5745135b9296fcd6dfe7c7873aebce1329e4e1d7e3c55708732932b92cf1f45", 0x29, 0x4}, {&(0x7f0000001600)="b8ba87bd6a0f08b300c874d77ce2d661ab887116430e5bb21090ae58d5", 0x1d, 0xffffffffffffffff}, {&(0x7f0000001640)="9e7af232dd47f0ced1c4a9c01baf8eb582764a5ae37bff69453a54555f215c80f6d57b8778be347181ab15159737a5663aef02da76b2e9ebd92e3e1168ca26ef57b858ffa8a1ef2055086011c5e18c4f9bee78075910951e47c686787d0543c42466c2cbee56ca79c5174ac57825f73a72686f0a0fa022264199ca2441f2ebcf19451b7824842dd7ba9b3c8300fbbc89f27f201292c36dd697ec14613c557e67aba515d835013a6aac65d8adc0bc0f65adf5a0d9bce3923f35e46de2e3c1f048cc74dfe66fabaae67df957208634e68873497c153c5285944224482a17c4a34ebe906faf53", 0xe5, 0x9}, {&(0x7f0000001740)="a3e4b526a054284c147d5c4e2217f543825b54e49c45b52f25c4d306318b710fe82b5685a2a29e23771b6c40609aae875175896234de7f0f5704ca9562a8a9321a9a4e3deaac08f97fdf1d649c949b56379e37db54b4c8bed2f72efe547b1651d0e218d173249a6c170f2cf71a3a359a469c9fe321af56314384c8ad6403fad9056b0e90d9715e7c1a9a4cde37529c57e2596c95a20d43053f8a55cdebb0b6def1a5b30b3a20c6c9a4f79b03a70307b5480c740980e62c1ddaea9d07d1ada43a874d0db573cf74417ba182f3dc313194cf752737a38e7d64a2ad4088b171f4dd875dd93df7a906568cbda69f07ff951898676b71f1e894ca", 0xf8, 0xf22}], 0x894101, &(0x7f0000001a00)={[], [{@euid_gt={'euid>', r1}}, {@uid_eq={'uid', 0x3d, r3}}, {@hash='hash'}, {@pcr={'pcr', 0x3d, 0x17}}, {@euid_eq={'euid', 0x3d, r4}}]}) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x8, 0x6, 0x9e4, 0x7, 0x1, 0x8001, 0xed9f, 0x21, 0x6, 0x4, 0x5, 0xf9, 0xff, 0x1f, 0x401, 0x9], 0x6000, 0x20000}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) 09:05:02 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$sock_void(r0, 0x1, 0x6c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xad}, 0xfffffffffffffee4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x0, 0xe, 0x0, &(0x7f0000000180)="c45c57ce395de5b2810f7d637a22", 0x0, 0xf0}, 0x28) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x4800, 0x0) ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000640)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 322.932852][ T9830] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000020) 09:05:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x200000, 0x0) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f00000000c0)) close(r0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = getpid() r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x101000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r5, 0xc0845658, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x180, 0x2}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000240)={0xe000, 0xfff8, 0x6, 0x7, 0xfffeffff, 0x2, 0x8001, 0x5, r6}, 0x20) setns(r4, 0x20000000) sched_setscheduler(r3, 0x5, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000006a80)=[{{0x0, 0x0, 0x0}, 0x7728}, {{&(0x7f0000005540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x2e, &(0x7f00000012c0)=[{&(0x7f00000055c0)=""/240, 0xf0}], 0x1}}, {{&(0x7f0000005700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0, 0x0, &(0x7f0000005bc0)=""/93, 0x5d}, 0x7}, {{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f0000005c80)=""/185, 0xb9}, {0x0}], 0x2, &(0x7f0000005e00)=""/212, 0xd4}, 0x6}, {{&(0x7f0000005f00)=@alg, 0x80, &(0x7f0000006340)=[{&(0x7f0000005f80)=""/199, 0xc7}, {&(0x7f0000000280)=""/89, 0x59}, {0x0}], 0x3, 0x0, 0x337}, 0x1000}, {{&(0x7f00000063c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0xfffffffffffffd91, &(0x7f00000069c0)=[{&(0x7f0000006480)=""/204, 0xcc}, {&(0x7f0000006580)=""/216, 0xd8}, {0x0}, {0x0}, {&(0x7f0000006900)=""/159, 0x9f}], 0x5, &(0x7f0000006a40)=""/22, 0x16}, 0xff}], 0x6, 0x40000201, 0x0) ftruncate(r7, 0x100000000) sendfile(r0, r7, 0x0, 0x80001d00c0d0) 09:05:03 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x19, 0x32, r0, 0x4000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="f1ead9287edc63bc5fc49114d64b07e63f8120561f2aff"], &(0x7f0000111ff8)='./file0\x00', &(0x7f00005c0000)='bpf\x00', 0x0, &(0x7f0000318fdb)) 09:05:03 executing program 5: r0 = socket$unix(0x1, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f0000000000)='./file0\x00', 0x2000000fff600000, 0x0, 0x0, 0x220490, 0x0) 09:05:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240)='nl80211\x00') sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB='E\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="de9297fef874059400000000"], 0x20}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000009240)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1400000000000000290000000b00200000004000000000001400000000000000290000000b000000000000a00000000020000000000000002900000037000000000000000004000005020000000000001400000000000000290000004300"/104], 0x68}}, {{&(0x7f0000001540)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x2, 0x0) 09:05:03 executing program 1: open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x10001, 0x402082) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f00000000c0)) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=""/4096, 0x1000) 09:05:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000000306051068fe07602b00003f0e430a001400030045b300070300000319001a00120002000e00010006000300"/57, 0x39}], 0x1) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000b00)={0x10, 0x0, 0x8}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r3, &(0x7f0000001300)=[{&(0x7f0000000200)="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", 0x7df}], 0x1) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000000c0)={0x7fff, 0x4, 0x4, 0x4000, 0x6e1534e3, {0x0, 0x2710}, {0x2, 0x8, 0x7, 0x25, 0x7, 0x3, "5fe54548"}, 0x2, 0x0, @offset=0x8000, 0x7fff, 0x0, r3}) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000180)={0x14, 0xdd, &(0x7f0000000a00)="d2e4dadf4d7c27c6bab2d1faf1c6b15795e92bb96b878de98e390c4a5a6256403103d1aeeb4cadbdb3fa6b728433a87de02952c9e43b93e2f2653e684b70dcaff4173f803fbcf57941c2ab32560daa96d99a78e9f57ecb432789d4d6bf1103d5a2186b7010d757f783bb2679d810fa95038f3c1ca0c8e9c6abbc0100e4e8f4026424d8fe1ed33fd0eed59f1437eb829ececa3a40c85e2484ed84aad6b0d60420c5c4b36dcec56b71092864ac68ac9d08619c5c20dfdd01e363789cb50e723cbb8b0b062b4873ca044de1e1cbcd72e0fa2e7b5a29eefae6d4b381d0766c"}) ioctl$DRM_IOCTL_FREE_BUFS(r4, 0x4010641a, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[0x8]}) 09:05:04 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x80000, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0xef41, 0x6, 0x9, 0x4}, 'syz1\x00', 0x57}) syz_read_part_table(0x0, 0x1, &(0x7f0000001bc0)=[{&(0x7f0000000a00)="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", 0x1fb, 0x5}]) [ 324.508922][ T9895] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 324.557661][ T9891] minix_free_inode: bit 1 already cleared [ 324.560510][ T9901] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 09:05:04 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000240)={0x3, 0x0, [0x0, 0x0, 0x0]}) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}}, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="15930000000000000000010000000800178104000000"], 0x1c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, 0x0) execve(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)=[&(0x7f00000002c0)='nl80211\x00', &(0x7f0000000300)='veno\x00'], &(0x7f00000003c0)=[&(0x7f0000000380)='nl80211\x00']) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000200)='veno\x00', 0x5) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="9f0325bd7000ffdbdf25070000000800010001000000080005000300000008000300", @ANYRES32=0x0, @ANYBLOB="1400040076657468305f746f5f62726964676500080001000400000008000500051c000014000400626f6e645f736c6176655f31000000000800050002000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x400c800) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4000010000000013, 0x0, 0x0) [ 324.653198][ T9901] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. 09:05:04 executing program 4: close(0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="2d63707520ff92b2f197d86ad80547edb4cd282eaa6ef7ad6224d7b3ecb7b7a2436978ac3aad2814b44d3d3a4a9f842473a457206fcb95c665a50bd1a286b2445614306acda1963025e1dfa600a8713bc838b04a459a4600db8401f170d92ee34e1f04ea91df2bacb934a272caa68cb930f14608493b756c3d164ffa1f3c97a8728bf67e946ec1000000000000000035716ed0be9fb90437e907d4ee63c572a67fb888108744339e535a893509d12bb3d06a2e00"/189], 0x5) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f00000004c0)) splice(r1, 0x0, r0, &(0x7f0000000100)=0x200, 0x3, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:05:04 executing program 2: r0 = socket$inet6(0xa, 0x400000000005, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) pipe(0x0) sched_setscheduler(0x0, 0x5, &(0x7f00000001c0)) sched_rr_get_interval(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000040)) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000200)={0x9, [0x2, 0x3ff, 0x2, 0x800, 0x1000, 0xc000, 0x5, 0x0, 0x4, 0x8001, 0xfff, 0x53c, 0x401, 0x20, 0x7, 0x2, 0x26e, 0x2, 0x6, 0x0, 0x8, 0x11d5, 0x279c, 0x2, 0x8, 0xfff, 0x7ff, 0x3ff, 0x8, 0x7f, 0x80, 0x1ff, 0x3ff, 0x5, 0x2213, 0x40, 0x6a, 0x9, 0xfff8, 0x8, 0x9, 0x5, 0x1, 0x5, 0x1, 0x9, 0x8, 0x1], 0x7}) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) sendto$inet(r3, &(0x7f0000000400)="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", 0x1000, 0x20000801, &(0x7f0000000180)={0x2, 0x4e24, @broadcast}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0xe4, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x90, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8, @remote, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x7ff, @empty, 0x1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x34}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2b9b6168}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000041}, 0x4085c) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r5, 0x400c6615, &(0x7f0000000280)) r6 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r1, 0x5452, 0x0) ftruncate(r6, 0x200004) sendfile(r0, r6, 0x0, 0x80001d00c0d0) 09:05:04 executing program 0: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x4000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc5080000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000d95cd71b8e43bbb9755f51db7b560eae08b5d4ca0100000000000000ae1a708d8fc69e09eb4264cab1d2692cb47482d8d745e87bf277769f14979aa59bd58efe26d86e51cc99f610de377a1ef8de583137c332f822301035f2c2e6c599836fc4e6fd93c199653ecb8237cee305f720509e017c1bfa7d858fda26da76dc112de61e0c2471f915369c119da33c2fe7ad76288f6120e6fc5eb20c7ae65cd0a26679ffc7b170ca687bf1e8d885c4ddf01eabee93397c7693bdafc9664189c57a7c0a24a9f59fc9a376ff5822d1f8d1a8a3dc5b96b7fa229c392b641f04cfd9481dadafd53d2f77ff73e4be0331d1", @ANYRES16=r2, @ANYBLOB="100026bd7000fbdbdf25440000000400240008002600c0ffffff"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x60000) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/btrfs-control\x00', 0x400, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000001fc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001f80)={&(0x7f0000000cc0)={0x129c, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_IE_RIC={0x69c, 0xb2, "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"}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x6}, @NL80211_ATTR_TX_RATES={0x24c, 0x5a, [@NL80211_BAND_60GHZ={0x44, 0x2, [@NL80211_TXRATE_LEGACY={0x24, 0x1, "d4e1dc8b6fa10c27a6f40b7a38e94be551dc3b05ef925ebf7f8946f5e23c0a5e"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x1, 0x7, 0x4, 0x423, 0x93e0, 0x8001, 0x100]}}]}, @NL80211_BAND_6GHZ={0xd0, 0x3, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xe3d4, 0x6, 0x469, 0x3, 0xff, 0x9, 0x7ff, 0x2]}}, @NL80211_TXRATE_HT={0x50, 0x2, "ce59eca53ad33c0a2ae1b59e4a9bc16b1e5ab62f2245d432bf94657eb3eba8d9322cf696d6d0fa2b0370fa88f0bf31b71f5dbd147d6ea331f47d09220a1217b079b7f0402e793332c8efb61d"}, @NL80211_TXRATE_LEGACY={0x22, 0x1, "e6b60eb57256256fc4b2fb1ea869d89aa191e673af6b5a3f652416cc966b"}, @NL80211_TXRATE_HT={0x19, 0x2, "571c6cc75380c490b218b47b350e1766ac93990270"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4a, 0x0, 0x1000, 0x1, 0xfffe, 0x40, 0x72c3, 0x68]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x1, 0x6, 0x7, 0x8, 0x77, 0x7]}}]}, @NL80211_BAND_2GHZ={0x68, 0x0, [@NL80211_TXRATE_LEGACY={0xf, 0x1, "a88478199850410f492dad"}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x28, 0x2, "e2838283c5e0e33b64e65d3e710cc4efa294d7f10a8ac4c1b2012a4b43c71fe5602762b2"}, @NL80211_TXRATE_HT={0x6, 0x2, "e423"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x2, 0xae78, 0x8, 0x0, 0xcb7, 0x3]}}]}, @NL80211_BAND_6GHZ={0xcc, 0x3, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7f, 0x3f, 0x9, 0x1000, 0x1, 0x9, 0xfffd]}}, @NL80211_TXRATE_HT={0xa, 0x2, "1fefa079437a"}, @NL80211_TXRATE_HT={0x2b, 0x2, "517b5c7ba3663aca0a0aae77d9c6fc0302fbd1768287631c141766b73ffb78b1780ed0c2f000b1"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x4, 0x0, 0x3, 0x80, 0xdd3, 0x2]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, "2f532c002364b50917f38dade5362a8b355708e061161cb54a"}, @NL80211_TXRATE_LEGACY={0x19, 0x1, "58db2a67bd05e9a7d494779da0e765d7fd2090947e"}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf491, 0x4, 0x3, 0x1, 0x881, 0x4, 0xab, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0xfffffffe}, @NL80211_ATTR_FTM_RESPONDER={0xb8, 0x10e, [@NL80211_FTM_RESP_ATTR_LCI={0x78, 0x2, "f94a2c1b441cd7cbf378f049caa45e87c18187edf3e67e696c7d42ac3ebc78b10e094d69ad61261a3f2d47c193b51485f2b8967a82c1aa00b9b04388a5461bf839ba20323936b38e0b08569f94feee5a2362b70de02d667ba1a00bcd9381e60eba9c2a573f74e25544937af3dc95c79f9626dda5"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x21, 0x3, "91f48e364f3a3453616d219c26ff79785728098dfab47cbe7013906ec0"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x8, 0x2, "a1638876"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0x8d6, 0x7f, "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"}]}, 0x129c}, 0x1, 0x0, 0x0, 0x10e154af3af2606f}, 0x408c084) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="15930000000000000000010000000800178104000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000c00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x7c4, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x1ff}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x3}, @NL80211_ATTR_IE_RIC={0x797, 0xb2, "de4b1bc392ef685e68fc9e92d6228da4e9a8b8865dc005b9c55e574c0233bdbf1bd80fa0742e54583d03184b0402c0d39cef6f63f242efe7e2c38c3a5b67933b3c4f0ec8fa8bf7fcf387a876376d95aaebb1242cd886b31334ad0c7394d875b673552fc87c7acf8f2d61503d4e876f62f5e1746e61c8f060b2877f0c4eb174a289542437e37a952a80c041b984deafb7559835a61c519791a946b61f5f52661f9086c0384d83006f11b28fc6c9ab2aacbd70650d4158103262c181d6e29789653985465b85dd47770b93731cb2b80a516c4e6ec58b05713a6dfa52356770856813555f8db04e14e8bcd8670555b8014ffa7a0cbfc280ef7d1aeae049c29a5474a8bda1b0fc374986b3bfbc61120fbcb310a24df7e10927aae7d93c055e007fce79292c9a4b2070edceccc50a1f651129344daa66cc2886bd9d05758c841904878dd07280f8d961d7d608b0bd3c1bfec15c6ef7be760da3f0ecc384976c3b577ee8a8f3fd2094fc7e5a2b6f82702c719f01d338ac6a97564983b3e296adbe56d45b4cf56a6a82c77b2824911a5812588b13c06e6d4165f9bfed581a05451378fc745d58a9a70224dc9c63fc947fcdb0673c02117e46012529b1ec5a7f3d563aca768ec226f800ef2bac11be8be04509961e5333b4034180fbe760d784fea5280505f0a3f4459ce350d2099b097ca4dbf09e075dd1df323b5fe641d2a302137c6d7dc7253ea5647f6e85384bc126cbca8aca4025bf5217e19cbe6575df7f7f8d187c6084c55c3f612bd05969353c49b061d4eb819f43c7093c3831d6d669eee51bd2c40181f436c5bcf680961e1029ab26ddb9de09f0d0cb5bdb1cc5cd55ecf8dd0d77318aaddf6c0cec8b555bbafae04126a02e50be264ec2ddb27871b62dec8c781173addbbff0934d9cffe6986d92f3c3cab0e7ac596aaa3fb55eed82ec4e94db228969f93861ec4695ce5272dabd64ae998a312f5a165989a9d6906df58424bc6bcb8ef91690528a0129a807acb930abeafc24efe861a2b32c1d0d3c54e892eb438a172e986b00bb29195c63ae5c7e9d3b97c045dd2d8d978928fb5ce2c46b775f3fab55e0a24c1275089c4f2cbf39dee2d56696b596e230070e2d58b031030f109cab9c998fec30318127978ad1f966ea250fcacd79ce25238ed0a5c1b1c3b6347932ed57b0c5159f372b8e6a3edf95df84c301e3b3dfa6d6ca59b9649e53e47f6ada4039577e1a987dd8dd129f097f5a6f1394d58954e52991b45b3ac8596a533a7a712e131c8ea2bd97d7c75620da237740d5617c8d99c32984ff9cf520c4364ba8c10d3140b3ef729b0880adaa03d2e0ff769d284eafcb2d3b8eca58a60ca196aac62cd97084f82c47bdde9585f7f5173526506014066c97d6675e81157ca15567a6b76489c74546752095e0fc535ab0cb7c28585958d62e5f6fdbaad1dcf6e53ec26ab9caf0931ea8c80c4a006e89de86ac7a0953386cf445f289f636c7a109cd6786e143f3ee93ee736147505643c59fec1c95764d07b67fcdc08fd6ea0adf6bacad1e4cd8c12d0a7481b250ca1405596428b79607e8433a3e0ad8bba7bb1d2a2781523918f197f02583ee6894093ebcf221d616e48f77fd576a2a1c690320cb52f5005aad4e5ecdfd0b9b9d45ecf27e427a6b4b4e64792685bce329e5dba46b769b1e720e30e239aeaac3d2daa33f3b798c690d5d79bdc888015dba22345d8edee3a915da0526e7366e0b7f463bf255d014efb623fc6ae274a96a0d966ba2f2f417e4adb005522f44f95144e02c8901c11162a33e2532c8616e2abb1edcc3aa03de159fee2729a03a2d40596a66281599d9c34373c7238b9e4d30066b3918d79c3dcc94556215fcf2acb9a221c3c5f8b6c829956f11fbd0435cf43293e15af438571d51a06764192d293e2d1281ca2548d93bb5d501bd89ed38ec29b00ac05a390774ca0b10849266fe44b69e7d21b4dfbe638240261ff0a15687fe7931b4db56810e064865b70e87296391078f13ea99ccc4267d3b1f048fafcf52d1be1edfd6f24081eb85900790c39c79086a9ea54f2a7bc549d8899b9e4cfea751447d7f75d00b83a5db529ada280add159148f16368378f3f6bb98222fec875d281b66384e4317e59e09442aacbca44310eac785471a57d71d98a51cc3919167a2cd54a0ff2511592b1c13b490f192d8effdc3a472c2cc46a1c63b76b93d34dfa0111ee42734a483c9f0ee16a33d228fc836e3e27fd51d200ec397c5a73c23644762b6caf1b52f0dab6861c652358488c44acd61c90b07627cec7d3f5d8fb1b23f7bf8d8f02a42b49f4aa869637385bb28f916cd4435aad360055771c5d350b58a74b893bc1025671d4159352e8a7de413ed0a1f7ecf85b0efee584ce16ff4d9ce6fbbf98b8189de8ab46938541009a67d71783088d89486a2ec0ce12697f44342694c626a26493b7e1c9ae1f8cb493b1900170a14be7ef131cd8aa05054474e0365d9be763c2e4de9e39b78ebd9c0d62c5fff9deef307fe2d20719fe8df5af20d57a231373e4b3ad531338fc8f0cf3b9ba674fd77800af8f4f79493ca6ca3b62eb8dbb1df04206c99104992676131a88ec56e20331296d45a781838ad54169949e7663560caa01d8531c7d76acb8a263cd77ec7d11be90150c7fe88a8fde772550eeb0b4312f9f9e516f0201353166824c0c5966534617f26c7f48d3c73ea494cb662eaaa1d7af0f4cfc4824d60056cf1d9f"}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, 0x2}]}, 0x7c4}, 0x1, 0x0, 0x0, 0x24000000}, 0xc011) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0x0, 0x5}, 0x8) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000000)="8800724455342a", 0x7}], 0x1}, 0x40001a5) [ 324.861124][ T9908] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 324.897071][ T9908] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. 09:05:04 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x301000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000fef000/0x4000)=nil, 0x4000}) ioctl(r0, 0xffffffffffffffbd, &(0x7f00000000c0)) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(0xffffffffffffffff, 0x800443d3, &(0x7f0000000080)={{0x6, 0x6, 0x8, 0x44, 0x7, 0x3}, 0x3, 0x9, 0x4}) r2 = socket(0xf, 0x0, 0x40) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) close(r0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, 0x7, 0x6, 0x300, 0x70bd2a, 0x25dfdbfe, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}}, 0x4000004) 09:05:04 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[], 0xff0e) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000300)=0xffffffffffff3d90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) setxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) connect$inet6(r2, &(0x7f0000000140), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "373e590e5bf90331", "41a29bde34220d9f664904310de6f354", "cf2c9aad", "00006f46827b00"}, 0x28) splice(r0, 0x0, r1, 0x0, 0x100000000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={[], [], @broadcast}, 0x5}, 0x1c) 09:05:04 executing program 0: r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x400000, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8009}, 0xff6d) write(r1, &(0x7f0000000200)="200000001a00010000000066835f7f081c140000000000000000000004001300", 0x20) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f00000000c0)) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8) r3 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x2ea, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r2, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1}, 0x100) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000280)=ANY=[@ANYBLOB="7261770000000000000000000000000000001b00"/36], 0x0) rename(&(0x7f00000001c0)='./file0\x00', 0x0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0) syz_open_dev$media(0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r3, 0x5000, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 09:05:05 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="2600000013003ff1eb14c1f8030322ff000c00e313000000093903680000000006000300124b", 0xffffffffffffff6c) 09:05:05 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gretap={{0xe, 0x1, 'ip6gretap\x00'}, {0x14, 0x2, [@gre_common_policy=[@IFLA_GRE_IKEY={0x8, 0x4, 0x200}], @gre_common_policy=[@IFLA_GRE_ENCAP_DPORT={0x6}]]}}}]}, 0x48}}, 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x0) finit_module(r3, &(0x7f0000000100)='ip6gretap\x00', 0x1) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 09:05:05 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, @vti={{0x7, 0x1, 'vti\x00'}, {0xffffffffffffffa2}}}]}, 0x30}}, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) r3 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r3, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) accept(r3, &(0x7f00000003c0)=@x25, &(0x7f0000000540)=0x80) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000840)=0x0) getpgid(r4) ptrace$cont(0x7, r4, 0x5, 0x100000000) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, 0x0) write$P9_RLERRORu(r6, &(0x7f0000000100)={0xd, 0x7, 0x1, {{}, 0x8}}, 0xd) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x2, 0x3, 0x238, 0x108, 0x108, 0x0, 0x0, 0x0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x1a0, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {0x6020000}, [@common=@unspec=@connlabel={{0x28, 'connlabel\x00'}}, @common=@unspec=@limit={{0x48, 'limit\x00'}, {0x10000000, 0xfffffffd}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@ip={@local, @remote, 0x0, 0x0, 'vlan0\x00', 'nr0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000000)=0x6, 0x4) 09:05:05 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x40000) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={&(0x7f0000000040), 0x2}, 0x0, 0x1}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100000, 0x500001c) close(0xffffffffffffffff) 09:05:05 executing program 4: close(0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="2d63707520ff92b2f197d86ad80547edb4cd282eaa6ef7ad6224d7b3ecb7b7a2436978ac3aad2814b44d3d3a4a9f842473a457206fcb95c665a50bd1a286b2445614306acda1963025e1dfa600a8713bc838b04a459a4600db8401f170d92ee34e1f04ea91df2bacb934a272caa68cb930f14608493b756c3d164ffa1f3c97a8728bf67e946ec1000000000000000035716ed0be9fb90437e907d4ee63c572a67fb888108744339e535a893509d12bb3d06a2e00"/189], 0x5) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f00000004c0)) splice(r1, 0x0, r0, &(0x7f0000000100)=0x200, 0x3, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 325.409637][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 325.494390][ T28] audit: type=1804 audit(1578819905.443:34): pid=9949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir916865880/syzkaller.v5GYlK/11/memory.events" dev="sda1" ino=16543 res=1 [ 325.627590][ T28] audit: type=1804 audit(1578819905.523:35): pid=9958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir916865880/syzkaller.v5GYlK/11/memory.events" dev="sda1" ino=16543 res=1 09:05:05 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x3) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000000)) dup3(r1, r0, 0x0) 09:05:05 executing program 3: 09:05:06 executing program 4: close(0xffffffffffffffff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000340)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="2d63707520ff92b2f197d86ad80547edb4cd282eaa6ef7ad6224d7b3ecb7b7a2436978ac3aad2814b44d3d3a4a9f842473a457206fcb95c665a50bd1a286b2445614306acda1963025e1dfa600a8713bc838b04a459a4600db8401f170d92ee34e1f04ea91df2bacb934a272caa68cb930f14608493b756c3d164ffa1f3c97a8728bf67e946ec1000000000000000035716ed0be9fb90437e907d4ee63c572a67fb888108744339e535a893509d12bb3d06a2e00"/189], 0x5) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f00000004c0)) splice(r1, 0x0, r0, &(0x7f0000000100)=0x200, 0x3, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 09:05:06 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x40, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000008c0)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) 09:05:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x1, 0x0, 0x60}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000004c0)={0x1, {{0x2, 0x4e22, @multicast2}}, 0x0, 0x9, [{{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, {{0x2, 0x4e20, @local}}, {{0x2, 0x4e22, @rand_addr=0xfff}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x510) 09:05:06 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg(r0, &(0x7f0000008a80)=[{{&(0x7f0000000180)=@ll={0x11, 0x8847, r1, 0x1, 0x0, 0x6, @link_local}, 0x80, 0x0}}], 0x400025d, 0x0) 09:05:06 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0xff, 0x0, 0x0, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x47166bcfef8223e2, @perf_config_ext, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40a180, 0xa) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x194001, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) setsockopt$inet6_dccp_buf(r4, 0x21, 0xd, &(0x7f0000000700)="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", 0x2e6) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000100)=0x3) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_tcp_int(r5, 0x6, 0x0, 0x0, 0x0) fallocate(r5, 0x11, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r8, 0x4188aea7, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000000000000000000000000000000000000000012c9f487428afbfa9b54a14a80f94400d800000000"]) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r10, 0xc0845658, 0x0) bind$bt_rfcomm(r10, &(0x7f00000003c0)={0x1f, {0x2, 0x1f, 0x4, 0x0, 0xa3, 0x20}, 0xa9}, 0xa) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r9, 0xc0845658, 0x0) ioctl$FBIOGETCMAP(r9, 0x4604, &(0x7f0000000380)={0x8a9c, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000340)=[0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000000)={0x7, 0x3, 0x2, 0x1, 'syz1\x00', 0x2}) syz_open_dev$loop(&(0x7f0000000240)='/dev/loop#\x00', 0x0, 0x0) 09:05:06 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="a7f5cb6e68ff6499709a20a0e1e2958c8e99371ee50076d43e95115d948fa18d8de5ad1b65f4333f72e0508462eb56aac4b4cd8787f8592e78687b6a70ba376d21f0aa463ea7a5b480220b1ba4d7870600556b6b69b0a14d92249a5fb24382afb7958f4af6aabc8929d09512fce708b1bfe57465a5f39f21baa2cdfa323443c640a066351a536d1b173734d260d2bdbf0615af09f1308b676a869b43", 0x9c}], 0x1) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000280)={0x40, 0x8, &(0x7f0000000180)="775cbdbe18c93770f2619d752175a3515206117c0d624f01fc5bbdf377bb3c5b660daffd2c49098283fe32d4499075ec8049b8a3ccfedbcf869b964e09632f01fa925e0d001c848ef4aaadb7e6e9a68ba5fbd9bc3fc7693a67bd5972ae6b1933cae41ea85bbd7a3f63f2a5406d867c57e739a784a370c172e71a0add92ae7847bef1d7963d06f415675af6ce8506db042495131e1b795a647c6634f2b0361c55e7ac0230e55a37486f1112f3e832fd30fb6a570811131a1f918b66808a2d575e7cf39788d3458fb6e6abe2dc02d941b046bc0db3f297dcf384f9bd0763dbfc5a32e2ac71badde8686b9b64696e1381c729435d", {0x7f, 0x502, 0x704071a, 0x9, 0xbf, 0x22, 0x1, 0x1}}) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r2, &(0x7f0000001300)=[{&(0x7f0000000200)="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", 0x7df}], 0x1) dup2(r1, r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000b00)={0xa00000, 0x5, 0x4, r0, 0x0, &(0x7f0000000ac0)={0x0, 0x3, [], @p_u32=&(0x7f0000000a80)=0x5}}) getsockopt$inet6_tcp_int(r4, 0x6, 0x14, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000340)={0x2, 'veth0_to_team\x00', {0x6}, 0x1002}) r5 = openat(r4, &(0x7f0000000b40)='./file0\x00', 0xc0b01, 0x2dc) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r5, 0xc0845658, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r6, 0x28, 0x6, &(0x7f0000000380)={0x77359400}, 0x10) ioctl$KDGKBMODE(r5, 0x4b44, &(0x7f0000000000)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ioctl$VIDIOC_S_PRIORITY(r5, 0x40045644, 0x6) socket$inet(0x2, 0x5, 0x3) ptrace$getsig(0x4202, r7, 0xaf07, &(0x7f00000002c0)) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r8, &(0x7f0000001300)=[{&(0x7f0000000200)="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", 0x7df}], 0x1) ftruncate(r8, 0x8) [ 328.597093][ T254] tipc: TX() has been purged, node left! [ 328.717144][ T254] tipc: TX() has been purged, node left! [ 329.499105][T10047] IPVS: ftp: loaded support on port[0] = 21 [ 329.880618][T10047] chnl_net:caif_netlink_parms(): no params data found [ 330.314812][T10047] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.322394][T10047] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.330756][T10047] device bridge_slave_0 entered promiscuous mode [ 330.341403][T10047] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.348942][T10047] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.356658][T10047] device bridge_slave_1 entered promiscuous mode [ 330.378115][T10047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.389321][T10047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.413663][T10047] team0: Port device team_slave_0 added [ 330.421955][T10047] team0: Port device team_slave_1 added [ 330.489488][T10047] device hsr_slave_0 entered promiscuous mode [ 330.538437][T10047] device hsr_slave_1 entered promiscuous mode [ 330.577127][T10047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.584712][T10047] Cannot create hsr debugfs directory [ 330.635545][T10047] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.642767][T10047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.650687][T10047] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.657787][T10047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.709590][T10047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.726299][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 330.735502][ T2753] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.744784][ T2753] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.753402][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 330.768467][T10047] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.869243][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 330.882612][ T2753] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.889714][ T2753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.898571][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 330.906858][ T2753] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.913940][ T2753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.937803][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 330.946329][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.955178][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.964163][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.973047][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.982332][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.990751][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 331.003755][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 331.014012][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 331.028903][T10047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.040579][T10047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 331.050856][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 331.059919][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 331.084091][ T9650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 331.091609][ T9650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 331.109303][T10047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.177433][ T9650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 331.186057][ T9650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 331.206059][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 331.214516][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 331.223640][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 331.231760][ T2737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 331.248087][T10047] device veth0_vlan entered promiscuous mode [ 331.263970][T10047] device veth1_vlan entered promiscuous mode 09:05:11 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0xd03927eedc77769c, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0xc004743e, &(0x7f000082ef0a)=""/246) r1 = dup2(r0, r0) r2 = open(&(0x7f0000001340)='./file0\x00', 0x1, 0x120) setsockopt$inet_mreqn(r2, 0x0, 0x27, 0x0, 0x25b) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) shmget(0x3, 0x4000, 0xfda7bac262ce3569, &(0x7f000059c000/0x4000)=nil) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f00000000c0)={0xfffffffffffffffc, 0x10000, 0xafd7}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$admmidi(&(0x7f00000015c0)='/dev/admmidi#\x00', 0x8, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r4, 0x4040ae70, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001640)={0x0, 0x178, 0xfa00, {0x3, &(0x7f0000000240), 0x13f, 0x5}}, 0x20) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0xfa723) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) ioctl$DRM_IOCTL_GET_UNIQUE(r6, 0xc0106401, &(0x7f0000001280)={0x0, 0x0}) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x201000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x48, r7, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0xa1}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x48}, 0x1, 0x0, 0x0, 0x40804}, 0x800) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@secondary='builtin_and_secondary_trusted\x00') ptrace(0x10, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f00000001c0), 0x2000) 09:05:11 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000000c0)={0x2, 0x40, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000008c0)={&(0x7f0000000100)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) 09:05:11 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = dup3(r0, r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) getpeername$packet(r4, &(0x7f00000011c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001200)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1400030}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)=@deltclass={0x24, 0x29, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x10, 0x7ff9}, {0x8, 0xf}, {0xf, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) sendto$inet(r2, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 09:05:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000014000200080001000400000008001c00e0000001"], 0x44}}, 0x0) 09:05:11 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/protocols\x00') sendfile(r1, r2, 0x0, 0x84c) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000000)={0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmmsg$inet6(r1, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="7db8462d145a87106c62005be23787", 0xf}, {&(0x7f0000000340)="cae729d5784d6a377ab436c35b71947904a22feaae5cfbca073360c2843325610c5e39b573034937b8fe77e9db937ae85da610b728ec5b5ea22691e3138e5cccafa8ad712fcb3c4cb8fa2e96", 0x4c}, {&(0x7f00000004c0)="3cbd846ff998c50126daa6aea4bff47c1db2875c942e71370830896fadc20f876a905c930f4a9184705eeaa330214976a55dc24c31bbaa9681f276e87302a24bbb030e02f1ff067a4ed47774b3e24dc27ad42433893533877d0d5c8e25c5398a211332e6c4a713e6fe4c840b8ca42701753ff0f16612b0f6299121f9986ed4aeee55914eb01519415f0d32f0db5e18fc801be5dd9d51a63b7d5261f74170a8fcc91a9b978c", 0xa5}], 0x3}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000580)="d8", 0x1}], 0x1, &(0x7f0000001900)=[@hoplimit_2292={{0x14}}, @flowinfo={{0x14}}], 0x30}}], 0x40000000000022d, 0x400c014) [ 331.485129][T10069] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 331.515968][T10075] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. 09:05:11 executing program 2: keyctl$KEYCTL_PKEY_ENCRYPT(0xc, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='enc==sha3-512-ce\x00'/69], 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x18}}], 0x1, 0x4048000) r2 = syz_open_dev$mice(&(0x7f0000002680)='/dev/input/mice\x00', 0x0, 0x20000) perf_event_open(&(0x7f00000027c0)={0x1, 0x70, 0x8e, 0x6, 0x3, 0xf8, 0x0, 0x2, 0x1000, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext={0x4, 0x10000}, 0x400, 0x81, 0xfffffffc, 0x9, 0x401, 0x80000000, 0x7}, 0xffffffffffffffff, 0x8, r2, 0x1) sendmsg$nfc_llcp(r1, &(0x7f0000002640)={&(0x7f0000000080)={0x27, 0x0, 0x2, 0x0, 0x0, 0x5, "6a2c6f91fc156989f5541e5828017e8774ccb5c9b3942b357fcca8007f0e50dfab654f51bb2f7afd81808a23198110f8688fbc8b1fed73abb3e0c494a0c407", 0x16}, 0x60, &(0x7f0000002480)=[{&(0x7f0000000100)="c233768072c8e6faec531a22c72d9d93665b34cb517bace0c80093d7b22ebddd4eac23da8b7e4bab122e7403567b632771915b14006ef9e89e4fbe7ecc7fd4d78a7f719b3eb5743d73cd11c3d996f7f2435f1a05acf5436827ba3b3a56402b7c5349daeff6fe61eae86963b972f235096d008bc27a6e35254771faeaa87b2e3c1bdc948cefbf1c4a21df02ff9d6cb3d65455ed989d24a58ca43e4c45967134676329a373e207b0240d43d7d954c7f5f52ba5720efc13c06a9ad7625128", 0xbd}, {&(0x7f00000001c0)='n.', 0x2}, {&(0x7f0000000200)="a7a705028d71ff83244a5937f3ee69dc993758890bcff44a2c72b3d1ee4dff99e4ee787fc247aec35cb49c222307b79d615f19c41153d6647d61ef6dc58c89dfad10121d85d12ff3da1d3536d83bb60409c66ec88e9b160e671a64712914e2a1def4c1849cb2ad4079c35855bd5b5c18f96307cb7e9f5f488ab1fe8acf8025710021988448a669a68ce4c1c08e8a71161907cbef91155acf44775e02906a4ae7ceb9dae6d24d8c780fe2ffd6a4d21112d508fa93000480d1e9c5602af3483086ced81fa11223ab", 0xc7}, {&(0x7f0000000300)="7fc5d01f21e9cb563c3e02d3c4cede12f2ac0bd53e0114e96c99407a555d664746d135d319d484a104ed280108049006a87ce6238bdb2296bb78b74dc6129eb93bb9da9d0985733f466d86a808a79569e28991617655fbffeeebe96aa1950e9134c4ffa851c18c3a81b6aa4f010534f7fb567c5523f148b9f8ca294013da3b52dc3f51fbf6b54f3f0c27860fc78412324536b4", 0x93}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="1a99a5e57776a39df2c02f3e788ea8ac99bb73cc43e29b747173380065f22907911b7cbe281c48b94c856415061312c4490ddc6c74505a32e29f621699ae9d7c925e77a5fd65854b4ae5d995e8d769de6769710d68219cd9191ca8052c35f605a97fdfde31d4df265181569faf93dd348c4d3474fcab20c91797bb13d64f1b2109477a5165b558e2a600e3", 0x8b}, {&(0x7f0000001480)="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", 0x1000}], 0x7, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], 0x110, 0x4000000}, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/dlm_plock\x00', 0x800, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x81800004}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r4, 0x800, 0x70bd28, 0x25dfdbfc}, 0x2060387c0804035f}}, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0xa1c0}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x14, r4, 0x8, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x27ee9575faa18da4}, 0x4000000) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="80df63db", @ANYRES16=r4, @ANYBLOB="080026bd7000fddbdf250300000008000100000000000c00040001000100000000000c00020004000000000000000c000800a605000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x200020c8}, 0x2400a040) ioperm(0x3, 0x6e1, 0x4) 09:05:11 executing program 1: r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f00000000c0)={0x7, 'bridge_slave_0\x00', {0x2129b239}, 0xff1e}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xa, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) 09:05:11 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x32, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) prctl$PR_GET_DUMPABLE(0x3) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) recvmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f0000000040)=@caif=@rfm, 0x80, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/114, 0x72}, {&(0x7f00000002c0)=""/227, 0xe3}], 0x2}, 0x10042) 09:05:11 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4a62, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x10002, 0x0) r3 = fcntl$dupfd(r0, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fallocate(r0, 0x10, 0x0, 0x200) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r4, &(0x7f0000001300)=[{&(0x7f0000000200)="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", 0x7df}], 0x1) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x401201, 0x0) r6 = msgget$private(0x0, 0x0) msgrcv(r6, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r6, 0x0) msgctl$IPC_RMID(r6, 0x0) write$P9_RVERSION(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="1500000065ff090200008008003950323030302e20"], 0x15) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000001c0)=0x68) ioctl$FIBMAP(r4, 0x1, &(0x7f0000000080)=0x2) ioctl$SOUND_MIXER_READ_DEVMASK(0xffffffffffffffff, 0x80044dfe, &(0x7f0000000a00)) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00') 09:05:11 executing program 1: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x11f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f00000000c0)=0x29) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="020005000000000e001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) 09:05:11 executing program 3: creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2000002) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="00c6dccbf2786c247786131380f3a845b3f85d1689f7b7cb040c01f1743db40e4ac764b9cf4cf6e03efc79cc09a9ebce2385c3132f1e416933417950d257477c4a22f6ed61ca74c92905000000000000"], 0x50) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x8800002) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) read$dsp(r2, &(0x7f0000000140)=""/140, 0x8c) 09:05:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400012) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) r3 = fcntl$getown(r2, 0x9) perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x8) r4 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r4, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) accept(r4, &(0x7f00000003c0)=@x25, &(0x7f0000000540)=0x80) ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000840)=0x0) getpgid(r5) perf_event_open(&(0x7f0000000640)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x228, 0x0, 0x0, 0x0, 0x40000000000000}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000380)='syz0\x00', 0x200002, 0x0) openat$cgroup(r6, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) r7 = gettid() r8 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)=@ipx={0x4, 0x1, 0xce, "0b04ec665b4b", 0xff}, 0x80, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r9 = socket$kcm(0x11, 0x7, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10d, 0xb, &(0x7f0000000000)=r10, 0xb) openat$cgroup_ro(r10, 0x0, 0x0, 0x0) r11 = openat$cgroup(r10, &(0x7f0000000540)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r11, 0xa9bff5772b9e2466, 0x0, 0x4, 0x0}, 0xfffffe14) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffdf5) socket$kcm(0xa, 0x6, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) sendmsg(r8, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100)=r7, 0xfffffffffffffec6) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x23, 0x16, &(0x7f0000000200)="dab7655af780f6dd2dd38c7f2848ba7e2f182b349ca6fa76a8921aed6c98c7806280b0", &(0x7f0000000240)=""/22, 0x2, 0x0, 0x95, 0x8b, &(0x7f00000002c0)="c796e54990825cd5827330223fd2a4714c0a01cc294d4c0df4ab4961230462093d0fd5d6fc0d555ada36d3a5123b057f76378740b3a8a8161e46d6841581e001bec0f45baf423101cee8ef1dcdd65a8c45ccb11f51c3331dfcd74a785c2b905293e6410d00392c1ee4736de7dcd9048f2f449c7ce7f89937a67b9c250e0a668b8b7a0325eb3f3d804a4a334fec96f88500810ae818", &(0x7f00000003c0)="da9325d2b248c00bb44445e87018e97ba8df06a7e4838d008fea53681452f21c4cf7cbece2d4f038e93f67db3616ae6510efb236a21e7e94d40869b74e648adfa94bd398b982e56d242f36b5280bf9e1d5aaf805c3437de6f0ac3c64862bb0e706f0bc2019858a6f47f4b5e823b770501bc948f4a9bb49b750cd9a92154f099a063c55e083182a22ab9764"}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, 0x0, 0x4, 0x9c, &(0x7f0000000340)="1eaabdd8", &(0x7f0000001700)="6aa93d208d67bc734dce75854727883cac958a7d556aae64087a306e60490859b3c8f71d36727995b0a5a340affef72c334adaec120563d610157d7a110b67c4de3ab98224cc7f7e7f25d72a20d3cc8330681741d13103b43947a6bcdc68f212808144c1199784e49980dabad6df98bdb13bdb6aba4469b60ba2c16bd62fc4146277907cb9cf49bb09f8f26a08e172c89a8c9ebce43e576ab0b54716"}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') r14 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x80000000000001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0xc00000}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000}, r14, 0x1, 0xffffffffffffffff, 0xc1e3167481e2216a) r15 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r15, &(0x7f0000000600)={0x0, 0x8ad83062025c113, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e0000001e000500ed0080648c6394f27e31d20004000b404b48000001000080000000000300f88000f01700d0bd", 0x2e}], 0x1, 0x0, 0xffffffffffffff90}, 0x4) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r17 = socket$kcm(0x2, 0x4, 0x0) setsockopt$sock_attach_bpf(r17, 0x1, 0x3e, &(0x7f00000002c0)=r16, 0x28e) openat$cgroup_ro(r16, &(0x7f00000006c0)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(r13, 0x89e0, &(0x7f0000000500)={r9}) 09:05:11 executing program 2: open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xcda00) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000100)={0x0, 0x1f, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x2, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff0d}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}]}, 0x70}}, 0x0) close(r3) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) getpgrp(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r5, 0x0) getgroups(0x4, &(0x7f0000001400)=[0x0, 0xee01, 0xee00, 0xee00]) r6 = fcntl$getown(0xffffffffffffffff, 0x9) getpgrp(r6) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) 09:05:12 executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r4, r4) r6 = dup(0xffffffffffffffff) r7 = dup(0xffffffffffffffff) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r9, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) r12 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r12, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) r13 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000004c0)={@multicast1, @empty, 0x0}, &(0x7f0000000500)=0xc) setsockopt$inet6_mreq(r13, 0x29, 0x11fba1afd9e06482, &(0x7f0000009dc0)={@mcast1, r14}, 0x14) r15 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r15, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) r16 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r16, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) r17 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r17, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYPTR, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR=&(0x7f0000000ac0)=ANY=[@ANYRESOCT=r9, @ANYRES64=r10, @ANYRES32=0x0, @ANYBLOB="e3cc3dc781d5944a0dd88bb037c6154c77a4fc9a50b3c49f72afdc77d4172192f92f454aae6329fc00d95a507e8b741cd2df6f3e8d28b5272c4f72a313c90a854414bcbfc006269488803093127df7e3de17401f7e913ceecb5af7eb616a91f96f2e598593a015ced33ebafeec947b7936782bd06c59b4dca106130c175ff4e129606d1f31bde80e17d40a3782e232bde5f1d80c8e58c8fc33788d927815b595b63681", @ANYBLOB="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", @ANYRESDEC=r5], @ANYRES16=r4, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES64=r11, @ANYRESOCT=0x0, @ANYRES16=r12, @ANYRES16=r13, @ANYRES16=r15, @ANYRESOCT=r6], @ANYRESOCT=0x0, @ANYRES32=0x0, @ANYRES32=r7, @ANYRES64=r16, @ANYRESDEC=r17]], 0x4}}, 0x40000) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="7daaff18200b761c427ffffab06413c6d590355f0dc32bff64c811a65d00ef96654282b18d7ba86267c3b6ec68828f1c7ec904fcd7a9670ee4fa54e02f3925476367e8854a374937b1577842382d68f2194a23ebafdcad1e598fbb75d85a7e741703f86b546c4c4864851d6a4347367d8d33e51b51c28fe2f2c6472b918e56cf5375609ef5216df3af90ae327e7cadc8916513eba065a6aa3c55a6045bde30dc", @ANYRES16=r8, @ANYBLOB="000328bd7000fbdbdf250100000008000200de030000050005000100000008000300ff7f000008000200000001000800030001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4008046}, 0x48104) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x5000000004e20}, 0x1c) r18 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x9) setsockopt(r18, 0x2000000000010d, 0x4000800000000a, &(0x7f0000000000)='\a\x00\x00\x00', 0x4) connect$inet(r18, &(0x7f0000e5c000)={0x2, 0x10004e20, @loopback}, 0x10) sendto(r18, 0x0, 0x0, 0x0, 0x0, 0x0) 09:05:12 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x80a00, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="04000000", @ANYRES16=r0, @ANYBLOB="0107001f1000001a806c0d6d0012539b702075ed3a4a773bd06ea86e2123d2d22e0c4d0e12187cde7a98918f6a61bb6853aab215d47bd8a50a1e5d33521c10d9cc2c35289896810f905ea8"], 0x3}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x45208028}, 0xc, &(0x7f00000001c0)={&(0x7f0000000800)={0x70, r0, 0x1501, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0x20, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4088000}, 0x4044) clone(0x4000000000003fe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9006}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0x250, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA={0xb4, 0x5, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1500}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeaa}]}]}, @TIPC_NLA_MEDIA={0x144, 0x5, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x714}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6ac}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x315}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1f}]}, @TIPC_NLA_NET={0x4}]}, 0x250}, 0x1, 0x0, 0x0, 0x1}, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 09:05:12 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) fcntl$getown(0xffffffffffffffff, 0x9) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000000)) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) r4 = getpid() accept$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0xffffffffffffff7c) kcmp(r4, r2, 0x0, r0, 0xffffffffffffffff) [ 332.264058][T10116] md: invalid raid superblock magic on mtdblock0 [ 332.271983][T10116] md: mtdblock0 does not have a valid v0.0 superblock, not importing! [ 332.281563][T10116] md: md_import_device returned -22 [ 332.309932][T10103] ldm_validate_privheads(): Disk read failed. [ 332.378633][T10103] loop1: p2 < > [ 332.402615][T10103] loop1: partition table partially beyond EOD, truncated 09:05:12 executing program 2: open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xcda00) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r0, 0x40140921, &(0x7f0000000100)={0x0, 0x1f, 0x0, 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x2, 0x0, 0x9, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffff0d}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}]}, 0x70}}, 0x0) close(r3) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) getpgrp(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r5, 0x0) getgroups(0x4, &(0x7f0000001400)=[0x0, 0xee01, 0xee00, 0xee00]) r6 = fcntl$getown(0xffffffffffffffff, 0x9) getpgrp(r6) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) [ 332.465024][T10103] loop1: p2 size 2 extends beyond EOD, truncated [ 332.604949][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 332.628660][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 332.675512][T10139] md: invalid raid superblock magic on mtdblock0 [ 332.724229][T10139] md: mtdblock0 does not have a valid v0.0 superblock, not importing! [ 332.738245][T10139] md: md_import_device returned -22 09:05:12 executing program 0: r0 = request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000240)='kfyring&-\x00', 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="31dd4716685defc91faf1b23c88eda517a62f85a360a5d947e75bb898f3e44e1c6fdd147162406b0cf9cfce97e6d223d52b02bc57ef9ce3a68cb44d820614f5434374e722a8244916e6d2a8a7c568d3e101d6da45a23b07f4036cccc437625f7d6396d8c1208aa01cdbfd75389c41f014df1bb910a6581e2406ed1e0733d5c411972231947f0885ede1093b24e760e782d0b96a36a106dc17fb58c39fe4e691cccf756316e58ac379f8a394953412716246c5c7a00cd8323cf42a5e5be20d2b0ebdaa554baa2c6d189a7ac03e9d80c6d6fc7cbdee992e85880abb0a5a522d3ff341c60e1861fb4", 0xffffffffffffff3d}], 0x1, r0) keyctl$invalidate(0x15, r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10000}], 0x0, 0x0) 09:05:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0x14) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x2000) sendmsg$nl_netfilter(r3, &(0x7f0000000040)={0x0, 0xfffffffffffffe22, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x800}, 0x0) 09:05:12 executing program 2: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x2761, 0x0) socket$kcm(0x11, 0x0, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000200)=r0) socket$kcm(0x2b, 0xb, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000340)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020feffff7a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000000704000000000000b7040000100000206a0700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fc2868f0399d909a63796c113a80c19aab9d607000000b6cd483be3f0d3253730e711f5969f62c28b22756bedf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dd87235b44174f7c0343185089a0f119e31975e551558055dc2dc"], &(0x7f0000000280)='GPL\x00'}, 0x48) r4 = socket$kcm(0x11, 0x8000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000940)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000480)='cgroup.type\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x8, &(0x7f0000000600)=ANY=[@ANYBLOB="18250000", @ANYRES32=r5, @ANYBLOB="00003f2bc7a76600c0b158f598b8b28300000000000000000000000000000000df3a7c06302a2d7163370868fbeba278b0dfef68000000800000000015f3a6b1f1eae1be7aa54d50a10dd5de93873da4599229a9752763aeefe7606c72a9dee371bc1a35f1d3bf64e7e1bbc625eb05d7d419de5bdd", @ANYRES32=r2, @ANYBLOB="0000000000000000850000001000000018000000000000000000000008000000"], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, &(0x7f0000000480), 0x40f00, 0x8, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x3, 0x5, 0x7ff}, 0x10, 0xffffffffffffffff}, 0x78) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r6, 0x161) sendmsg$kcm(r7, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @multicast1}, 0x80, 0x0}, 0xfd00) write$cgroup_subtree(r7, &(0x7f0000000280)={[{0x0, 'memory'}]}, 0xfdef) 09:05:12 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x11, 0x2, {0x40, 0x0, 0x1}}, 0x14) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x9b) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') creat(&(0x7f0000000240)='./file0\x00', 0x4c) preadv(r2, &(0x7f0000000080), 0x0, 0x100000000) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7d, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000380)={r4, 0x6a, 0x9e, 0x81, 0xaaf2, 0x4968}, &(0x7f0000000400)=0x14) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000040)={r4, 0x6}, &(0x7f0000000080)=0x8) sendto$inet6(r0, 0x0, 0x2, 0x0, 0x0, 0x0) 09:05:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0xc0}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x34]}]}, 0x40}}, 0x0) 09:05:13 executing program 5: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r4 = getpgrp(0x0) capget(&(0x7f0000000000), 0x0) r5 = getpgid(0x0) r6 = memfd_create(&(0x7f0000000980)='lotrusted\x1a\x00\xee\xee\x91\xdc\x04>R\xba0Qe\x80\xe3}U\x01\xd0\xa9\xc9\xf1\xc9\x8d&\x90\xf6\x1a\x86\xd8\x02\xda6E\x17\xa9d\xcfcK\xfe\xf4\x99\xb7o\xff\at\xb6C\xef\x068\xcf\xd3\xb6\xbe\x98\x02\xa0\x90\xc8[\v\x93A\x7f\xc6\xa7\xcaEB\xb9\xaeS\x99\x86RI;\x0e\xf0\xcf\x9b\xff\x01\x00\x00\x00\x00\x00\x00\xc9\x85\xe2\xc9\x8bM\x1f\xcd%\x98\x16H\x9f\xbc\xb8\xd4\v', 0x5) r7 = dup2(0xffffffffffffffff, r6) ppoll(&(0x7f0000000200)=[{r7}], 0x1, &(0x7f0000000280), 0x0, 0x0) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r9, 0x5452, &(0x7f0000000040)) fcntl$getownex(r9, 0x10, &(0x7f0000000580)={0x0, 0x0}) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r12, &(0x7f0000000140)=ANY=[], 0xfef0) fsetxattr$system_posix_acl(r11, &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000a00)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="b8e365400357609aeb2c35eb6346b93ee6a8ccac064b28045fb5ccc42eb61c604bd9bc6f06af000800000000000054af9fbdf181f025e9a65d7a17310597d62a318833df89a57e5b53778aa3e66844fc416fc7e2cee11b08996b374e80f611201000be976c77795ceead35bdcf1b23c88334501831ff741891ff83bd8103282caf9b66fa23cc7ad8ce987b956942c2650306152e474b", @ANYBLOB='\x00', @ANYRES32=0x0, @ANYRESHEX=r1], 0x6, 0x0) r13 = socket(0xa, 0x3, 0x8) r14 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(r13, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r14, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) sendmsg$key(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r16 = gettid() waitid(0x83b895581628fca4, r16, &(0x7f0000000040), 0x2, &(0x7f0000000480)) sendmsg$key(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYPTR64=&(0x7f0000000640)=ANY=[@ANYRES64, @ANYRESHEX=r15, @ANYRESDEC=r16]], 0xfffffffffffffe56}}, 0x20004850) r17 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r18 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) r19 = dup2(r18, r17) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r19, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r20 = syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) writev(r20, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff8240000005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3", 0x12}], 0x2) ioctl$SG_GET_REQUEST_TABLE(r20, 0x227d, &(0x7f0000000780)) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r10, r11, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r8, 0x0, 0x4, &(0x7f0000000180)='em1\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r5, r7, 0x0, 0x2, &(0x7f00000000c0)='syz1\x00', r22}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r21, r3, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r1, r0, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240), 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0xc) open(0x0, 0xe279a88a3b20cda9, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xa1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r23 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setpipe(r23, 0x407, 0xfffffffffffffffe) bind$inet(r23, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r23, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r23, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r24 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) r25 = socket$inet_tcp(0x2, 0x1, 0x0) r26 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r26, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r27 = dup3(r26, r25, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r27, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28}, 0x28}}, 0x0) write$FUSE_IOCTL(r27, &(0x7f0000000240)={0x20, 0x0, 0xffffffffffffffff, {0x6a7, 0x4, 0x0, 0xfff}}, 0xffffffffffffffb2) r28 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) r29 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) getsockopt$MISDN_TIME_STAMP(r29, 0x0, 0x1, &(0x7f00000002c0), 0x0) pwritev(r28, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r24, 0x4c00, r28) sendfile(r23, r24, 0x0, 0x102000004) 09:05:13 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = socket$packet(0x11, 0x0, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc), 0x26d) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x8, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000040)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="02000c90d67bf135", @ANYRES32, @ANYRESOCT, @ANYBLOB, @ANYRES64, @ANYRESHEX=r1], 0x6, 0x0) r4 = socket(0xa, 0x3, 0x8) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) sendmsg$key(r4, 0x0, 0x0) gettid() memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) r5 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r5) r6 = syz_open_dev$sg(0x0, 0x0, 0x40) writev(r6, &(0x7f0000000d00), 0x85de494ef80de7) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) r8 = getpgid(r7) kcmp(r8, 0x0, 0x0, 0xffffffffffffffff, r6) ptrace$setopts(0x4206, r5, 0x0, 0x0) syz_open_dev$dmmidi(&(0x7f0000000940)='/dev/dmmidi#\x00', 0x8001, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r3, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000980)='/dev/vcsu\x00', 0x10000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r9, r10, 0x0, 0xfffffffffffffd8e, 0x0}, 0x30) dup(r0) socket$netlink(0x10, 0x3, 0x0) r11 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r12 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$9p(r11, &(0x7f0000001400)="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", 0x667) r13 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) sendfile(r11, r13, 0x0, 0x10000) sendfile(r11, r12, 0x0, 0x10000) [ 333.480632][ T28] audit: type=1804 audit(1578819913.433:36): pid=10167 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir916865880/syzkaller.v5GYlK/19/file0" dev="sda1" ino=16623 res=1 [ 333.570461][ T28] audit: type=1804 audit(1578819913.433:37): pid=10167 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir916865880/syzkaller.v5GYlK/19/file0" dev="sda1" ino=16623 res=1 09:05:13 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bde000/0x4000)=nil, 0x3, 0x2, 0x4, &(0x7f0000ffb000/0x4000)=nil, 0x401}) pipe(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) [ 333.762359][T10166] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 09:05:13 executing program 2: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000000)={&(0x7f0000bde000/0x4000)=nil, 0x3, 0x2, 0x4, &(0x7f0000ffb000/0x4000)=nil, 0x401}) pipe(0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) 09:05:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/237) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000010000d0400"/20, @ANYRES32=r5, @ANYBLOB="7d77138245eaa3dc"], 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r2, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @remote}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @remote}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0xc000}, 0x4044844) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) [ 333.952117][T10188] netlink: 'syz-executor.0': attribute type 5 has an invalid length. 09:05:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)={[{@fat=@check_strict='check=strict'}, {@iocharset={'iocharset', 0x3d, 'cp857'}}]}) prctl$PR_SET_THP_DISABLE(0x29, 0x1) 09:05:14 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000380)='/dev/input/event#\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x438100, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000080)=0x2) ioctl$EVIOCGABS3F(r0, 0x8018457f, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x43) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000100)=""/25) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000000)={0x0, 0x3, 0x8, 0x8, 0x80000001, 0x8}) 09:05:14 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getrlimit(0x8, &(0x7f0000000000)) socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') dup2(r1, r2) [ 334.407969][T10175] syz-executor.5 (10175) used greatest stack depth: 22008 bytes left 09:05:14 executing program 5: r0 = io_uring_setup(0x417, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x11c}) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) r1 = socket$inet6(0xa, 0x100000003, 0x3a) add_key$keyring(0x0, &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) sendto$inet6(r1, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 334.525141][T10210] FAT-fs (loop4): bogus number of reserved sectors [ 334.600703][T10210] FAT-fs (loop4): Can't find a valid FAT filesystem 09:05:14 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='.\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000001c0)="25bca274769e620aa734fa0095e0612687ecb86a5c8802a9d8aea872943afd02090000b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="7465833b73866e0000000000000000000000000000000025061a7a8e080f808d334d04b8200d54ac40603cf1a466b9bb745fe0efbe3725b2983b7f"]) 09:05:14 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000140)="987d72684e4b275db9594041e41af949", 0x10) [ 334.914532][T10230] EXT4-fs (loop2): Unrecognized mount option "teƒ;s†n" or missing value 09:05:14 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getrlimit(0x8, &(0x7f0000000000)) socket$pptp(0x18, 0x1, 0x2) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000600)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, 'port0\x00', 0xc3, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x406, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') dup2(r1, r2) 09:05:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x10}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x12db, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x48000, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000180)=0x1) 09:05:15 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f00002f5ff8)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f000020a000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000196000/0x3000)=nil) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="15930000000000000000010000000800178104000000"], 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x40000) clone(0x22086605, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 09:05:15 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b640)={&(0x7f000000b380)={0x8c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x4}, @TIPC_NLA_BEARER={0x60, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @local, 0x421e}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) r1 = socket(0x2, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000040), &(0x7f0000000140)=0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f00000000c0)={{0x2, 0x0, @reserved="432691b2354e438481bfc513f43fced37717f6dd44993029a2e1fc90c61d33c7"}}) syz_open_dev$ndb(0x0, 0x0, 0x0) 09:05:15 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f00000002c0)={0x6, 'veth1_to_bond\x00', {0x5}, 0x91e}) r1 = socket(0x10, 0x80002, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xe8, "0cd4e01ba87366740745d7c7966aa44a2af92ede7bce39bf8e8f2ef80788699bd6b4f7d9e275ecc3aa6fc771df19ab9c2b84f6959154eab5a97b0eef1660addf19de2539f54f602cb124b52b45155914b39910b82495914421a971d8580bd3d30e947c2c53d0b2087ae8e2085b2a5e5277254837ed903bfa14216cabad7aedb3068b18b8e6c7c992f9915fedad80269f616685d68fa635ce910411df2602fb1d9af0d10a143ebfe61593399ced6b8028fd9d5c78e6952640117759f71d055b3d38325bbb7e40387f34a1f4f73daa1f7a14e54a7ec08ff129564b5ef5b57c81db5783c0792d0a029d"}, &(0x7f0000000180)=0xf0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={r2, 0x76, "54571f21b88642a326d85276d08bb6733b949a38145f4644d773a7f04443a781ccc41aec9f5075fb57dacca1cec2ec1c8a7d386c4542c28701d5b21e4704fef94677ceec824f96fa1b1088527830f9b2d1feaf83db216fe4ebea01414d13d8f0256a57a26bf02b6ea410f46dd881c92f63787372431b"}, &(0x7f0000000280)=0x7e) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001000090468fe07002b0000000100ee002d000000450001070300001404001800120014000e04000020000300"/57, 0x39}], 0x1) 09:05:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000040)=0x1) write$UHID_INPUT(r2, &(0x7f0000001cc0), 0x1006) sendfile(r2, r2, &(0x7f0000000240)=0x100, 0x3f) 09:05:15 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="cd75fc0a7fa7c11905010000000000000000b1b60000c64795c44d04c48d1d7f4141f86010275f", @ANYRES32=r3, @ANYBLOB="00000000000000000500270000000000"], 0x28}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r5, 0xc0845658, 0x0) ioctl$VIDIOC_QUERYSTD(r5, 0x8008563f, &(0x7f0000000200)) r6 = socket$inet6(0xa, 0x3, 0x6) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sendfile(r6, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_DMA(r7, 0xc0406429, &(0x7f0000000100)={r8, 0x3, &(0x7f0000000300)=[0x40000002, 0x4, 0x1], &(0x7f0000000280), 0x30, 0x6, 0x1, &(0x7f0000000180)=[0x81, 0x2, 0x1, 0x1, 0x34cd, 0x4], &(0x7f00000003c0)}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000000)={r8, 0x70}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r9, &(0x7f0000000280)="bd0f7a0bbf5bd91e334908b4973d0dea3e408dccef6e09f373df", 0x1a, 0xc100c, &(0x7f0000000340)={0xa, 0x4e22, 0x10000, @rand_addr="1e844bbee71461afd277295d0cab7a0f", 0x7}, 0x1c) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000380)) 09:05:15 executing program 5: socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x200, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) 09:05:15 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$BLKPG(r0, 0x1269, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) flock(r1, 0x8) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000480)="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", 0xfd}, {&(0x7f0000000100)}, {&(0x7f0000000900)="345c2d8464d48dbe1db4ec986cf95cb03f41a44dfbabe12014ed2e94adaefd4ac9ce7a66fa2ca9a0ec6aa8d43a4664839a6d491b7eb05c4fcc319d152e6c4a15faff7e62a8e70dc01dfd2cad7c4076640298660cac28e6120ee3be5d6a4bc89a84bf1f4fe1648ebb65117c71a567950eebb384cdad5a0c659f1a73c36b9cd4ec918859b1a1c3f58b8d72591bf8ca7b353101d8c0f9fb5dfde7a88c3da8f2640a035d27600aefcac52dbddc6e9ec705e6f4ea30fb154104518c7064872fbfcc5eeafb78e09c980cdafd6d6233df114d5c8d9004fb51", 0xd5}], 0x3, 0xd) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpgrp(0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x20000, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300)='TIPC\x00') r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r5, &(0x7f0000001300)=[{&(0x7f0000000200)="892e0d597945aa09489d3633157a5ab0d5254093f1f5d2c04b61b47aa992582e98934ecd898478226498007f639a6a27e4e0bb8ffdf9f6b6557506dae083edf66c65dfcfb615cc2d3a997a25bacaa646f453eb7535f9f46cc1ff4916e1e53cfde3afd96db47e0337cf70ab5c391ca751fe9a6a09c3adb4c770986c904d14e65cc497298ed30547b7f324ace26e6eb91d07aa3a152db9f07877f78ea42959d9c02e14f7ecd761e7a4399504d9573d2525139cf9af8299b005a4be310df4e3dedcb062a3a8e0417aaf23d69b4b6909d1d2bb8dd4988a5c044cc950142bdc5f6f17ee6bde8dfcc3f598578a2ab2a465ec4e20bb348bf41bb81bc5bf455cafacb2a9b422cbace11a6036e322ebdde41ca9ba2b5862aa63f4a2fca45714a5d2cac8ef1c9a8565c494b1bf610d78d2ae0e10cf51607b6eeec158a79db847d8d302f10a76f0139f61d5f08bd08cf2f799cf663f78773163510447bf1aa5cb7716367b353d9b162b68c02af1e905c6b258f3516b11702fbdd533f88d503a3beb68a17342a1c79c6175c3c83e89729d9c3f69f12c2daab0dc88d82ecbb8b44eeff51645b32da9a587792c5958ab75b25d3bbf7ff0a98d2cedfb6132296db4c844f56b0858abacffe29e22e931121d31d50f38bc2277b5aaef46cc03ab7af7caca6be14ab48d217f5c11734d2cd541406265c42289c05b013e04472e8114ed662c7a20ff248a53e9219edd13b15f8eb9a88b66fe36d02c48ac5f3321fbe6fb1cda4a0b39fe2b6800800557d1b965174daec6fc71477ae563fd755bd60516aace2271e2c6d1d6617a231b60d765a373c003daa91c5bd5bfab4c5d08548fa281e936060eccef6e86d1aba8fb0d905c51d9e0f270e6515a7e2f08203b8175539e7f6f44b022e9ff5f3db8414d555c2551b99f85d3c858225d56995b6b7a1eb48f4c7e1f2c5f5e910d7966f15405696432da09ba9c5d3907181fdb806e991b58f48c944377bc629f83fae16bfe980199181002609dbd06f216b6c28f52ea5aca7eae7fe9f59581b9a1447ef58e83f6d027d9383824fe515ec736ac1601ecc42463e56abc3f85519db848d89febeb671719c6bd69a04612c083026bba4fe2b86f909cae8b6942ae9873d528edd9e344d2814785e41cdef48bff018adc09a39a0a7a432a0d351460b3587260c16af42d90415c72875e30e68d0bed6e3fd37b9d24e9cf70b08d53d17da16c8d66be3f37b18e5ecd52b0c8f748d031349f4bf7b2e871f7acaaba5f02ece0e3f39cd1fbe283cb712e7d5580734a7acd2c7a9af5f3156c298da177dd3f4935fcb76f4bf64aaaa687e64e866cd8d5c370cb6a3913200f30aaf03f35d19bd51d43879bab6083201fa7e48795e3ced2cf40cf14638be93bd50479a4d4df5fcd8f782c86589173cc671aeee8db21c22b697dcc5624593cab1e17cf4f7dd72cfb044fb0d96f5a973ad7c1212a3c2f2fdecaa5433ad115591bdf5dbb2972f8f2bfbf66a08da480f5d6a165abe6478cba6443631bf5f1855e3c9c4bb2662fd06b160a5c12fe293678dc4bdca8ef30bfd5bbb49777a7efec081af76dd7938682ba39762c8c4b5285da2cde915ad6aec323fdc64dccc088ba2533ce69a9d98baef3604850368b70055dc9351fbda91c02dae750dd584f72d7118d52ede310442756d5c49ee88c52009866d6700437bed3b3fff5825ac0c3da99cc94dd8ef41a75da5ea66e19c678ca7071e9109c6125872c19052664c21c21b321a08fec95aa7fe22d1088821d6ac0b13af4758a4d6d2d02bc2429d3970077450218e53a1a4739b3cfa5d06f205c8ebe6f8627d16badb7df451adfd01e728bb38cc66b0498e79fceb2d8ab1042d3d3af712ce2be58e778eb087682f6f377fe4a7484204fa07bc9455ba8c258a979e8558515d584d765812e334db77214eaee5bdcc2b599e774815d8d038d366393560322e1b4d677d999433e3ce1e7db2e0bf46bc88c1cc3195c5c97d2ef3ba6a3cd8ca77b534dc6b7803af361d32d402f0b10d70c602df3be7cb5335ab19ec244a06752eac47441402ab461c333ddbc07f02481364620918a9050556b82e919fffb8c282b612f3ebd11bdaa90db0d65be2ab2e16995bb57c128730cfcf8c235bdffa57e92ce0d42151dc95cfb3c021c125dd51e648117022aac7637b9db991f8e4a21eb8aff33c086200e7640703aa9347d9dee197767073c488dfd88a27a7b7ff5abd333abf39a7cb5729ef3a8c074cebc0e8576a686933847467a81a2084f84ebcab28f72092ac23ef5afd974197d03b594739ce42502ae917c3282fd90e26e8129329de3dfd617a35f273347c70878ec72e37f9cde4870cc5903a5dc6f8b5c24e195d173736450d4c1a0faeee42d2b010929f32eba7c962297455074d15777a7e85cb4b54f5db293386acad1588eae4cbb5ebfc157fbc4fb642b8e4f7e3042e21c0312901dcf55ae8d17a2374271d3252f5a91d43bbbedb17206fbc6667e6b1bf4e801263fd8599b0fc4ea5448350ccf8df76c75de51696bf38efbe4c8551caac4ac8e68b9d5d5ddac6bba149c5cf92817b6c818f34e36617eb5e45937b274a5ef87ffb6d88c8e69629223ed64979d32164b6220409d195ee2822675c52a347ff603fa00f3f3c03a036aa4553a08c6c9ede398c98d5064760e9a7f4995760bc1241a9b6d50d2ba8ed69612521c036d210df09da27cc675e65638d343899adb275e9fc53ef5c6c15bd5cf869bd0e789a79866b62014ef2d962f696353985d1580871efe78051ffec556e4fdc288bb45d284aa114d9cc4de0f203cf70134ece4b26e9c13963931940839a00c752bad3b364de5902f54362cb2", 0x7df}], 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x10000, 0xd5) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r7, 0xc0845658, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000e40)=ANY=[@ANYRES64, @ANYRESHEX=r7, @ANYRESDEC=0x0], 0x3}, 0x1, 0x0, 0x0, 0xc00c045}, 0x20040000) setpriority(0x0, r2, 0xffff) pkey_alloc(0x0, 0x2) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x1) ioctl$VIDIOC_SUBDEV_S_CROP(0xffffffffffffffff, 0xc038563c, &(0x7f00000001c0)={0x0, 0x0, {0x4, 0x9d, 0x10000, 0xfffffffe}}) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r8, 0xc0845658, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r10, 0xc0845658, 0x0) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000c00)={0x0, @initdev, @multicast2}, &(0x7f0000000c80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000d00)={'team0\x00', r11}) r12 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r12, 0xc0845658, 0x0) r13 = openat$cgroup_ro(r12, &(0x7f0000000c40)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) openat$cgroup_procs(r13, &(0x7f0000000cc0)='cgroup.procs\x00', 0x2, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000180)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f0000000040)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) r14 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r14, 0xc0845658, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r14, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8040300}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r4, 0x8, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x1) [ 335.615845][T10258] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 335.710128][T10258] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. 09:05:15 executing program 3: r0 = perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x98, 0x0, 0x4000000000, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000000800), 0x1}, 0x0, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x3, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1000000004, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a3a, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xb, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r2 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) socket(0x10, 0x80002, 0x2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)="2e00000022008146e01f8002009d0edc2976d153b4", 0x15}, {&(0x7f0000000540)="edd00a5376a01eedd2352d7be58e47081f5e41fa65b110825fb37e976a6d5f68ec583a2520102d2c969a7796129399d6b52137534e4c4a8d96f8da0fa4598c64b88360972477c91afd8446958a9529c7fdec8ab88f7aa8cc55c72de27c713afa38556b3257e5c6c072a0a1aa157943ec5d8183643b6d400f7e0ff1dd2188d1898bce946306a89b3d0f73c3ce9ac8d78ef530c7c3da98b2151a13777d091a5440d4fbae24a6c1ca1f0352d53efd4a55195b940a7049f449fed56a10b6c91ad4761cfb91584d58d3a3b7d0223680dc727a0a40b5da", 0xd4}, {&(0x7f0000000640)="2880674de595dd8239a13fc7c7cad17fb56c25050e23d58b289be15ce0fafc3b25a4a4e2a75ba3b8acd588c51486631ea0546978ac2f7a44fea62c09b67e6b77ad5f21ce4a94c8c3f6e57f383ef405f48f739c66dbdeba21f89ebc5230055f9632e6193b338ebdf8491fa2d927b662837b7c281bf82a66a0e2cd70eaa5d2975312e0631dc13a5621da9ff646436640274611d2777d149b4c29cd2d30c6ef8d1bb7095e26920160963fcc750c48072b3c8f0d8fb0713dbbdecdfbfa2cd06694bd090e82fba1b742003fb183d86f33c85d70", 0xd1}, {&(0x7f0000000740)="470275dbf037716957ecc0eda0dd1e3bd09e5b11d994090a27132bba0d6a7d5e2df152e9b7e171502c527124ecb08143602cef5565a6af06a5ca1e3e8fd0aa032b3b889c4f756e7210d80c07db65fc8b660bd3459806a68fde", 0x59}], 0x4}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b0011002f004c00000020140e00090002009d0edc2976d153b4", 0x235}], 0x1}, 0x0) ioctl$sock_ifreq(r4, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r5 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r5, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r6 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r7 = socket(0x10, 0x80002, 0x0) ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_flags}) r8 = dup2(r7, r6) r9 = socket$rxrpc(0x21, 0x2, 0xa) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') bind$rxrpc(r9, &(0x7f00000000c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/ptmx\x00', 0x572ee3215d6e2cb4, 0x0) preadv(r7, &(0x7f0000000d00)=[{&(0x7f0000001080)=""/166}, {&(0x7f0000001140)=""/83}, {&(0x7f00000011c0)=""/167}], 0xa, 0xfffffffffd0b8c85) listen(r9, 0x9) r10 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r10, 0x0, 0x0, 0x1000f4) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f00000002c0)={r10}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) get_thread_area(&(0x7f0000000080)={0x9d5, 0x20000800, 0x4000, 0x1, 0x2, 0x1, 0x1, 0x0, 0x1}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r11 = inotify_init1(0x0) r12 = creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0x169, 0x2) r13 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r13, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) setsockopt$inet6_int(r13, 0x29, 0x31, &(0x7f0000000000)=0x5, 0x4) sendto$inet6(r13, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r13, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r13, 0x8983, &(0x7f0000000cc0)={0x7, '\x00', {0x6}, 0x4}) fallocate(r12, 0x0, 0x0, 0x1000f4) setsockopt$inet_group_source_req(r12, 0x0, 0x2b, &(0x7f0000000400)={0x80000000, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e21, @local}}}, 0x108) fcntl$setown(r11, 0x8, 0xffffffffffffffff) fcntl$getownex(r11, 0x10, &(0x7f0000000100)={0x0, 0x0}) r15 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r15, 0x401054d6, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r14, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x7ffff002}], 0x2, 0x0) [ 335.797185][ T1617] block nbd2: Receive control failed (result -107) [ 335.872180][ T28] audit: type=1804 audit(1578819915.823:38): pid=10277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir682189151/syzkaller.xbQTfM/15/file0" dev="sda1" ino=16631 res=1 [ 335.883120][T10254] block nbd2: shutting down sockets 09:05:15 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x280501, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_read_part_table(0x2, 0x0, &(0x7f0000000240)) 09:05:15 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(r0, 0x0, 0x0, 0x4000) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x800, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="736563750080000000007a0000000000000000000000b86cfffffffff90000000003000000034000000000000000000000ba0bfb5f515b5b5b000d00000000b3b4adff312ec30970628804dd17dc9c22935546d97a28a21f659600ffffffde03000000000000dd6752c114f2aa00"], 0x58) r2 = socket$inet6(0xa, 0x6, 0xfb) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, &(0x7f0000000540)=""/136) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$TIOCCONS(r3, 0x541d) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(r4, 0x800000c0045005, &(0x7f00000004c0)=0x100040000) r5 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) clone(0x80000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000500), 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb), &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'bond0\x00'}) r6 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)}}, 0x20) r7 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f00000002c0)) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x800000000008a03}) syz_open_procfs(0x0, &(0x7f0000000140)='projid_map\x00') dup(0xffffffffffffffff) [ 335.942607][ T28] audit: type=1804 audit(1578819915.893:39): pid=10277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir682189151/syzkaller.xbQTfM/15/file0" dev="sda1" ino=16631 res=1 [ 335.958295][ T28] audit: type=1804 audit(1578819915.913:40): pid=10277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir682189151/syzkaller.xbQTfM/15/file0" dev="sda1" ino=16631 res=1 [ 336.009335][ T28] audit: type=1804 audit(1578819915.963:41): pid=10277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir682189151/syzkaller.xbQTfM/15/file0" dev="sda1" ino=16631 res=1 [ 336.038684][T10281] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 09:05:16 executing program 5: socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x200, 0x0) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) [ 336.157345][T10291] ptrace attach of "/root/syz-executor.3"[9639] was attempted by " àÿ 0 p €  ÿ Àÿ ðÿ ÿÿÿÿ Õ\x09  @ ] À  !    \x0a    /dev/dlm_plock F     TIPCv2 \x0a N À@        /dev/midi# @ [ 336.250085][T10299] Unknown ioctl 21533 [ 336.427584][ T28] audit: type=1804 audit(1578819916.383:42): pid=10277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir682189151/syzkaller.xbQTfM/15/file0" dev="sda1" ino=16631 res=1 [ 336.428233][ T28] audit: type=1804 audit(1578819916.383:43): pid=10277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir682189151/syzkaller.xbQTfM/15/file0" dev="sda1" ino=16631 res=1 09:05:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x1, 0x9, 0x300, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x9}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x9}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x6}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1a}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0xa17e}, @NFCTH_STATUS={0x8, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/exec\x00', 0x2, 0x0) fadvise64(r4, 0x1207, 0x5c, 0x3) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x4000000) [ 336.429223][ T28] audit: type=1804 audit(1578819916.383:44): pid=10277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir682189151/syzkaller.xbQTfM/15/file0" dev="sda1" ino=16631 res=1 09:05:16 executing program 1: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) socket(0x1e, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x8000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000000)={0x0, 0x7fffffff}) fsetxattr(r0, 0x0, 0x0, 0x0, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000100)={0x1, 0x5, 0x0, 0x0, 0x800, 0x5, 0x1, 0x2, 0x0, 0x8, 0x6, 0x3f, 0x0, 0x4, 0x2, 0x49, 0xfc, 0x20, 0x2, [], 0x1, 0x1}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000200)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) unshare(0x40000000) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc02c5625, &(0x7f0000000040)={0x2, 0x7f, @name="38697ebda6dd58fd3573ac7c360e7b834bc2fa684c71e40b434c5b7d0e795303"}) 09:05:16 executing program 2: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet6(0xa, 0x3, 0xfc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@remote, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x5, 0x4, 0x3ff, 0x0, 0x1}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r2, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r3}, 0xc) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r3, 0x0, 0x14}, 0xc) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000040)) [ 336.463786][ T28] audit: type=1804 audit(1578819916.393:45): pid=10277 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir682189151/syzkaller.xbQTfM/15/file0" dev="sda1" ino=16631 res=1 09:05:16 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0x0, 0x0, 0x275}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) dup2(r0, r2) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) ioctl$TCGETX(r4, 0x5432, &(0x7f0000000100)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x0, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000788ffc), 0x4) fcntl$dupfd(r5, 0x0, r5) r6 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x6bb64acc, 0x12100) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, 0x0) shmget$private(0x0, 0x3000, 0x54000000, &(0x7f0000003000/0x3000)=nil) 09:05:16 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) write$capi20_data(r3, &(0x7f0000000440)={{0x10, 0x1ee2, 0x3, 0x80, 0xfff, 0x55}, 0xd4, "1daeb6bf862df648bf700edbc8dc4fc6a3b2ce1572fd80f4ac816dce9fbb7fbbf0115c54c678a1f412b20d0b9b22dc36bbc59652403533a8adfb42a74b5560989bc6d6fc46d6cb5d6317c95870c9d7c25f6101cfe68d9547361cc8dc81a6d7b00b54a3fba10d32706a9922a92998dd907f1ababd52030f5fbdab5e5c00d47680c11a646a4884fd4f10d5591f05ba6d43890b916e59e420e34e683d7e58e822b0aa459c3158523be2be991583681ebffed0005afb9397a66999aa7062ebd1f6146d9acb2549fd0bab5ebda82ab59f9c6e6eb13fa3"}, 0xe6) 09:05:16 executing program 3: mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x70c5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81040000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=@gettaction={0xcc, 0x32, 0x404, 0x70bd27, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x401}]}, 0xcc}, 0x1, 0x0, 0x0, 0x45}, 0x2008000) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0x8000) [ 336.974056][ T254] device bridge_slave_1 left promiscuous mode [ 337.023013][ T254] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.044269][T10299] Unknown ioctl 21533 [ 337.083840][ T254] device bridge_slave_0 left promiscuous mode [ 337.143159][ T254] bridge0: port 1(bridge_slave_0) entered disabled state 09:05:17 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) write$capi20_data(r3, &(0x7f0000000440)={{0x10, 0x1ee2, 0x3, 0x80, 0xfff, 0x55}, 0xd4, "1daeb6bf862df648bf700edbc8dc4fc6a3b2ce1572fd80f4ac816dce9fbb7fbbf0115c54c678a1f412b20d0b9b22dc36bbc59652403533a8adfb42a74b5560989bc6d6fc46d6cb5d6317c95870c9d7c25f6101cfe68d9547361cc8dc81a6d7b00b54a3fba10d32706a9922a92998dd907f1ababd52030f5fbdab5e5c00d47680c11a646a4884fd4f10d5591f05ba6d43890b916e59e420e34e683d7e58e822b0aa459c3158523be2be991583681ebffed0005afb9397a66999aa7062ebd1f6146d9acb2549fd0bab5ebda82ab59f9c6e6eb13fa3"}, 0xe6) [ 337.255372][ T254] device veth1_vlan left promiscuous mode [ 337.261940][ T254] device veth0_vlan left promiscuous mode 09:05:17 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) write$capi20_data(r3, &(0x7f0000000440)={{0x10, 0x1ee2, 0x3, 0x80, 0xfff, 0x55}, 0xd4, "1daeb6bf862df648bf700edbc8dc4fc6a3b2ce1572fd80f4ac816dce9fbb7fbbf0115c54c678a1f412b20d0b9b22dc36bbc59652403533a8adfb42a74b5560989bc6d6fc46d6cb5d6317c95870c9d7c25f6101cfe68d9547361cc8dc81a6d7b00b54a3fba10d32706a9922a92998dd907f1ababd52030f5fbdab5e5c00d47680c11a646a4884fd4f10d5591f05ba6d43890b916e59e420e34e683d7e58e822b0aa459c3158523be2be991583681ebffed0005afb9397a66999aa7062ebd1f6146d9acb2549fd0bab5ebda82ab59f9c6e6eb13fa3"}, 0xe6) 09:05:17 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000580)='./file0/file0\x00', &(0x7f00000005c0)='trusted.overlay.origin\x00', &(0x7f0000000600)='y\x00', 0x2, 0x4) socketpair(0x26, 0x800, 0x40, &(0x7f0000000240)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x30, r2, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x1, @bearer=@udp='udp:syz2\x00'}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20040400}, 0x20000040) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000e3ff22c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9791fa6000000000000", @ANYRES32=0x0, @ANYBLOB="00000079abd1932a"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x88a8ffff}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x14}]}, 0x28}}, 0x0) socket$isdn(0x22, 0x3, 0x11) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000640)={r6, 0x1, 0x80, "fe068bc2f5946915d6308f87866f32fe8376d3222b7ac5fe2f"}) setregid(0x0, 0xee01) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x2, 0x8) socketpair$unix(0x1, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, 0x0) fcntl$getown(r8, 0x9) statx(r8, &(0x7f0000000140)='./file0\x00', 0x100, 0xbff, &(0x7f00000002c0)) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 09:05:17 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) write$capi20_data(r3, &(0x7f0000000440)={{0x10, 0x1ee2, 0x3, 0x80, 0xfff, 0x55}, 0xd4, "1daeb6bf862df648bf700edbc8dc4fc6a3b2ce1572fd80f4ac816dce9fbb7fbbf0115c54c678a1f412b20d0b9b22dc36bbc59652403533a8adfb42a74b5560989bc6d6fc46d6cb5d6317c95870c9d7c25f6101cfe68d9547361cc8dc81a6d7b00b54a3fba10d32706a9922a92998dd907f1ababd52030f5fbdab5e5c00d47680c11a646a4884fd4f10d5591f05ba6d43890b916e59e420e34e683d7e58e822b0aa459c3158523be2be991583681ebffed0005afb9397a66999aa7062ebd1f6146d9acb2549fd0bab5ebda82ab59f9c6e6eb13fa3"}, 0xe6) [ 340.997415][ T254] device hsr_slave_0 left promiscuous mode [ 341.057299][ T254] device hsr_slave_1 left promiscuous mode [ 341.113619][ T254] team0 (unregistering): Port device team_slave_1 removed [ 341.128996][ T254] team0 (unregistering): Port device team_slave_0 removed [ 341.144530][ T254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.193533][ T254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.336849][ T254] bond0 (unregistering): Released all slaves [ 341.515248][T10358] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 341.534188][T10362] device veth3 entered promiscuous mode [ 341.549407][T10362] batman_adv: batadv0: Adding interface: veth3 [ 341.558446][T10362] batman_adv: batadv0: The MTU of interface veth3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.588757][T10362] batman_adv: batadv0: Interface activated: veth3 [ 341.604535][T10368] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 09:05:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000080)={0xd, 0x8d}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) r2 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000200)={0x0, r3}) write(0xffffffffffffffff, &(0x7f0000000180)="355024f8dbce267429c9cc85cb062f0c3f4a6ba92c8fd3d633163095c95c1f06aaae797f65652f6b866b67a9092b032695a8f38b9052d018285b6dc0c29254e0376b94fcfce3ed2346c19bbf4f95e40324d34ac0d07c6977fe132e96127670e9f6abf37f26ba2ee22d602a1e61107d0702ac", 0x72) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='auxv\x00') linkat(r3, &(0x7f0000000040)='./file0\x00', r4, &(0x7f0000000100)='./file0\x00', 0x3800) 09:05:30 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) write$capi20_data(r3, &(0x7f0000000440)={{0x10, 0x1ee2, 0x3, 0x80, 0xfff, 0x55}, 0xd4, "1daeb6bf862df648bf700edbc8dc4fc6a3b2ce1572fd80f4ac816dce9fbb7fbbf0115c54c678a1f412b20d0b9b22dc36bbc59652403533a8adfb42a74b5560989bc6d6fc46d6cb5d6317c95870c9d7c25f6101cfe68d9547361cc8dc81a6d7b00b54a3fba10d32706a9922a92998dd907f1ababd52030f5fbdab5e5c00d47680c11a646a4884fd4f10d5591f05ba6d43890b916e59e420e34e683d7e58e822b0aa459c3158523be2be991583681ebffed0005afb9397a66999aa7062ebd1f6146d9acb2549fd0bab5ebda82ab59f9c6e6eb13fa3"}, 0xe6) 09:05:30 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) write$capi20_data(r3, &(0x7f0000000440)={{0x10, 0x1ee2, 0x3, 0x80, 0xfff, 0x55}, 0xd4, "1daeb6bf862df648bf700edbc8dc4fc6a3b2ce1572fd80f4ac816dce9fbb7fbbf0115c54c678a1f412b20d0b9b22dc36bbc59652403533a8adfb42a74b5560989bc6d6fc46d6cb5d6317c95870c9d7c25f6101cfe68d9547361cc8dc81a6d7b00b54a3fba10d32706a9922a92998dd907f1ababd52030f5fbdab5e5c00d47680c11a646a4884fd4f10d5591f05ba6d43890b916e59e420e34e683d7e58e822b0aa459c3158523be2be991583681ebffed0005afb9397a66999aa7062ebd1f6146d9acb2549fd0bab5ebda82ab59f9c6e6eb13fa3"}, 0xe6) 09:05:30 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f00000002c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000640)='cmdline\x00') accept4$inet(r2, &(0x7f0000000680)={0x2, 0x0, @initdev}, &(0x7f00000006c0)=0x10, 0x80000) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x87) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) dup3(r0, r1, 0x0) 09:05:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x23) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2321202e2fd3fd9abdaa86377accb7c437576c65"], 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="33b746ed1200e69300fc215c292dcbbd9d9934a22923d7933ec5b9577e8a003a402dbee775a9e1ae0700cffa48bf7ac675ba4073a3474388ecbe00656f8c8b27aac4a5a51f032eba364fb49e1939d9e033ab22ae3309ba77217298171bf77e138661a8b3c548d1a2b7b10b45cacdd70a235be71d341102894ea4dc1439274bc277c1cbd0cf79c87c093b76c00a56278abd1c3a13ebb21207c988915989aeb36e819c5bd78f1ede55aca1f84b0132c0ec448ae5829fa90ee928b1a0ae26c2533992fa9fe0e01f880ced6c25dca25c56351a6a4c2fa7", 0xd5, 0x20000000, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000ff0310000d0400"/20, @ANYBLOB="281d9365d3a2d8b3a370d18efa095f7df0acd0cecf8996b18f019ec0dca860b3a22ad0a4965c4b3d4666c7c49a050c660b441a567e2958409891c0ef09cddea6179a75fcf3a6246aeee289bafbc38365511b21e83edef9cce01d96d97be4", @ANYBLOB="7d77138245eaa3dc"], 0x3}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', r4}) syz_extract_tcp_res(&(0x7f00000000c0), 0x0, 0x0) 09:05:30 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2000, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000080)={0x17, 0xce, &(0x7f0000000100)="d7c5160b893f689ffe4b42e1d2511eccffeb3b1b5447f9b4bc5b59edb0fb483747c37972a02f1f5d00408382fb6bed779cad7349fb76e09b14fd3bf8777088dc5e8ba6ebada37cad5fec4580e46944cf59b68c48bd182797bd9b2277dc40c8bbd36929bb83ea746fd2c22eb7eae9bce2e61263fdce68a7bd5720432a0616d982e9e5ce99986015f8901da548cefe0763164623f5bf3f17228f4a719d9d679749636e5b271737d8eae6cfbad3bd3b644f79fc750f8714c0c85b061cddee3fee79261bd5147736877760f5bcd0fd42"}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') preadv(r1, &(0x7f00000017c0), 0x3da, 0x0) 09:05:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0x1, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) lseek(r2, 0x81, 0x76bdec60989c57b2) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r0, 0xab03) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002f00)={0x6, 0x6, &(0x7f0000000000)=@raw=[@func, @jmp={0x5, 0x1, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0x10}, @ldst={0x3, 0x0, 0x1, 0x0, 0x8, 0x0, 0x9}, @jmp={0x5, 0x0, 0x5, 0xb, 0x1, 0x4, 0x10}, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x56c5}], &(0x7f0000002e00)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) syz_open_dev$ndb(0x0, 0x0, 0x0) 09:05:30 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) write$capi20_data(r3, &(0x7f0000000440)={{0x10, 0x1ee2, 0x3, 0x80, 0xfff, 0x55}, 0xd4, "1daeb6bf862df648bf700edbc8dc4fc6a3b2ce1572fd80f4ac816dce9fbb7fbbf0115c54c678a1f412b20d0b9b22dc36bbc59652403533a8adfb42a74b5560989bc6d6fc46d6cb5d6317c95870c9d7c25f6101cfe68d9547361cc8dc81a6d7b00b54a3fba10d32706a9922a92998dd907f1ababd52030f5fbdab5e5c00d47680c11a646a4884fd4f10d5591f05ba6d43890b916e59e420e34e683d7e58e822b0aa459c3158523be2be991583681ebffed0005afb9397a66999aa7062ebd1f6146d9acb2549fd0bab5ebda82ab59f9c6e6eb13fa3"}, 0xe6) 09:05:30 executing program 1: r0 = socket$inet6(0xa, 0x400000000005, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000100)={0x0, 0x0, 0x0, "8aabff53674d7d01457e1efbc0cc92e66c561dfbf29e73f829bc7f3687b13e2a"}) r2 = getpid() sched_setscheduler(r2, 0x0, &(0x7f00000001c0)) sched_rr_get_interval(r2, 0x0) getpid() dup(0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000006ffc), 0x4) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) pipe(0x0) r3 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = gettid() syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) kcmp(0x0, r4, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) memfd_create(0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x100000001) ftruncate(r5, 0x200004) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, 0x0) bind$rds(r6, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendfile(r0, r5, 0x0, 0x80001d00c0d0) 09:05:30 executing program 4: socket$inet6(0xa, 0x8000008000080003, 0x5) socket(0x10, 0x80002, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r0, &(0x7f0000000380)=""/87, 0x1f7) getdents64(r0, &(0x7f0000000080)=""/167, 0xa7) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r4, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, [], 0x5, 0x0}}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x3a067c218fd214b9}, 0x24) wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f00000001c0)=""/57, 0x39}], 0x3, 0x0, 0x0, 0x0) tkill(r1, 0x3c) r5 = socket$packet(0x11, 0x2, 0x300) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) 09:05:30 executing program 2: socketpair$unix(0x1, 0x40000000000003, 0x0, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair(0x2, 0xa, 0x5a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, 0x0, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_tcp_int(r8, 0x6, 0x0, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r9, 0xc0845658, 0x0) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_tcp_int(r10, 0x6, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000040)='iso9660\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYPTR=&(0x7f0000001400)=ANY=[@ANYPTR=&(0x7f0000001380)=ANY=[@ANYPTR, @ANYRES32=r1, @ANYRESHEX=r2], @ANYRES32=r8, @ANYBLOB="2dde4d6b58893956d00bbbd78375ae0926eb2a59de4f03d85345a1eca6c5f7648109f126f19bf70889a1b520059538c6ff3ece68ad35ac966fc6f7d1d5c6a164c24b", @ANYRES16=r1, @ANYBLOB="a9b32f3078a7e7e27fee651faf8e4a069f58e0bf0a5212379799bc27f534b677be0190dd2c783b4feb88900d64a813b5576bd8d0ae115b21d950eb796bafae7a0fa16adbd2b823ff88201f7492e6527c0ef98272821b04a845bae88ffb14f183d5d38447f53a256e09082e4867a81f2d9248b37fc6b7895edf4a665cd978aff697e9803479dec7513cb9987386d9fbe94ecb5e05ec26f684bdcfa1950bb0a99563780d10fa791772722a4e0382c24ea6bce2886f1ffe9b5ab7528a5f854e5b8d3287f8271d2b17ca90e3fe97ce6f84d516895e9f8bb088a3cce7cd03a26dd675d82cd5fd95051856f2a442094032971435b5e7d00ff74a", @ANYRESDEC=r9, @ANYPTR=&(0x7f00000013c0)=ANY=[@ANYRES64, @ANYRES32=0x0]], @ANYRESHEX=0x0, @ANYRESDEC, @ANYRES16=r10]) [ 350.966492][T10272] block nbd5: Receive control failed (result -107) 09:05:30 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x0, 0x1000, 0x0, 0x6}, 0x7) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000004c0)=0x80, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x80, 0x4) r1 = socket(0x100000000011, 0x2, 0x9) bind(r1, &(0x7f0000000140)=@generic={0x11, "00000100000000000800000000eba71a4976e200002cb18f6e2e2aba000000012e0b3836005404b0e0301a4c3ee340b7679500800000000000000101013c5811039e15775027182166fd792bbf0e66f5ff1b0816f3f6db1c0001000000740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x2b) getsockname$packet(r1, &(0x7f0000000240), &(0x7f00000002c0)=0xff55) r2 = syz_open_dev$vcsu(&(0x7f0000000280)='/dev/vcsu#\x00', 0x0, 0x2000) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x0, 0x330) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0}, &(0x7f0000000580)=0x14) bind$xdp(r0, &(0x7f0000000600)={0x2c, 0x0, r4, 0x0, r0}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) r7 = dup(r6) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000340)=0x800000, 0x4) writev(r5, &(0x7f0000000100)=[{&(0x7f00000007c0)="580000001400192340834b80043f679a2cff00804824ca945f640094000500289d5aaa000000000000008449bb06d383d537b300f0fffeff2c707f8f00ff200000000010000100090a00"/88, 0x58}], 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r8, 0xc0845658, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000300)=0x8c, 0x8) ioctl$PPPIOCGFLAGS1(r8, 0x8004745a, &(0x7f0000000080)) [ 351.008917][T10396] block nbd5: shutting down sockets [ 351.041043][T10417] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 09:05:31 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) 09:05:31 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x821002}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x200, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x452043c0f873af99) r2 = socket$unix(0x1, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="5500000018007f6800fe01b2a4a280930a060001fe80000202dc0000390009003500502801", 0x25}], 0x1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r1, 0x0, 0x400100000000, 0x0) 09:05:31 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x4, 0x1, 0x4, 0x80000000, 0x5357, {r3, r4/1000+10000}, {0x5, 0x1, 0x8, 0x5, 0x80, 0x80, "4e258549"}, 0x9, 0x5, @offset=0x1, 0x3, 0x0, r0}) ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f0000000040)) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) socket$packet(0x11, 0x0, 0x300) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, 0x0) write$P9_RREADDIR(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="68000000290200ff01000000000000000100000000000000ffffffff001d00000907004c2f66696c653083034711e986135f33fb03000000050000000064000000000000000007002e2f66696c65300601000000fdad8440887517fbe570275093bb000000000000e73102c780e372e3eb1a750000000000fa0700"], 0x68) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x840, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, 0x0, 0xffffffffffffffff}}) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r8, 0xc0845658, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) close(r0) 09:05:31 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x5, 0x5, 0xe001}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f0000000080)=0x1) 09:05:31 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) 09:05:31 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) 09:05:31 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) 09:05:31 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) [ 351.590918][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 351.590930][ T28] audit: type=1800 audit(1578819931.543:47): pid=10404 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=16562 res=0 09:05:31 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) 09:05:31 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuseblk\x00', 0x800, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}], [{@subj_user={'subj_user', 0x3d, ',user'}}]}}) syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000000)='GPL&em1&posix_acl_accesslomd5sumem0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4804) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x4, @broadcast, 0x4e21, 0x0, 'rr\x00', 0x11, 0x5, 0x7d}, 0x2c) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) getpid() r5 = openat$md(0xffffffffffffff9c, &(0x7f0000000040)='/dev/md0\x00', 0x20000, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r3) socket$inet(0x2, 0x5, 0x0) r6 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x2, 0x0, 0x10, 0x1f, "7457c6a9297a758f40bfff0570f897aaff60783661eacfd651864ba2125c15e29e5327627b56df1d5e88c1c88f9665cc3b00e5ccfa088684dea31cf95cf0925e", "22557df5c77d5e2768bf353e37ffa53498284645633aab9ba0c7e3e71e859bb4", [0x8]}) 09:05:31 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x480, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="e2c6eed22489b2b4e1fff35c3a3ce5ab45c52115f5be2842f8e9d04028b9174c99f3f09d3ade5cc1e0188f8ac0fc8d8ca29d3e2ffd78b6e73afb7c0916cb423579e9c540e8f504241a0d2049c6b3fdad19469f84e8f9299cee6df478a08442cb7fc38eb5d131478b5e3d1c0d08bd01b9deb5e205e4384d91633e08e9f2394a206ac5e08296d2c32b5c9c256bf366e34b57b6045e06d64f36a38fafbe8013b180f4bd5df00f5d76ef86ea0000000000000000", @ANYRES16=0x0, @ANYBLOB="0500000000000000000001000000000000000841000000000018000000003a000000"], 0x68}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r3, 0x0) write$RDMA_USER_CM_CMD_REJECT(r3, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r4, 0x0) write$RDMA_USER_CM_CMD_REJECT(r4, 0x0, 0x0) dup2(r4, r3) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ocfs2_control\x00', 0xc2685cf24303b8f8, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) 09:05:31 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) [ 351.832146][T10464] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20001 09:05:31 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) 09:05:31 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) [ 351.911352][ T28] audit: type=1804 audit(1578819931.863:48): pid=10442 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir641919796/syzkaller.fWqsOy/13/file0" dev="sda1" ino=16661 res=1 [ 351.958125][T10464] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20001 [ 352.066208][ T28] audit: type=1804 audit(1578819931.863:49): pid=10452 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir641919796/syzkaller.fWqsOy/13/file0" dev="sda1" ino=16661 res=1 [ 352.122511][ T28] audit: type=1804 audit(1578819931.863:50): pid=10455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir641919796/syzkaller.fWqsOy/13/file0" dev="sda1" ino=16661 res=1 [ 352.523295][ T28] audit: type=1804 audit(1578819932.473:51): pid=10442 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir641919796/syzkaller.fWqsOy/13/file0" dev="sda1" ino=16661 res=1 09:05:32 executing program 2: r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000280)={0x2, r1}) fcntl$setlease(r0, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)={0x4, 0x1, 0x4, 0x80000000, 0x5357, {r3, r4/1000+10000}, {0x5, 0x1, 0x8, 0x5, 0x80, 0x80, "4e258549"}, 0x9, 0x5, @offset=0x1, 0x3, 0x0, r0}) ioctl$SIOCX25GDTEFACILITIES(r5, 0x89ea, &(0x7f0000000040)) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) socket$packet(0x11, 0x0, 0x300) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, 0x0) write$P9_RREADDIR(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="68000000290200ff01000000000000000100000000000000ffffffff001d00000907004c2f66696c653083034711e986135f33fb03000000050000000064000000000000000007002e2f66696c65300601000000fdad8440887517fbe570275093bb000000000000e73102c780e372e3eb1a750000000000fa0700"], 0x68) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000380)) openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x840, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002380)={{0x0, 0x0, 0x0, 0xffffffffffffffff}}) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r8, 0xc0845658, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) close(r0) 09:05:32 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$rds(0x15, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0xd) socket(0x2000000011, 0x4000000000080002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x19, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe, 0x7541a95f, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) 09:05:32 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) 09:05:32 executing program 3: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) fcntl$dupfd(r1, 0x0, r0) 09:05:32 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) [ 352.563458][ T28] audit: type=1804 audit(1578819932.473:52): pid=10448 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir641919796/syzkaller.fWqsOy/13/file0" dev="sda1" ino=16661 res=1 [ 352.601774][ T28] audit: type=1804 audit(1578819932.473:53): pid=10455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir641919796/syzkaller.fWqsOy/13/file0" dev="sda1" ino=16661 res=1 09:05:32 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) 09:05:32 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) 09:05:32 executing program 3: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) [ 353.159340][ T28] audit: type=1804 audit(1578819933.113:54): pid=10508 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir641919796/syzkaller.fWqsOy/14/file0" dev="sda1" ino=16668 res=1 [ 353.230857][ T28] audit: type=1804 audit(1578819933.143:55): pid=10509 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir641919796/syzkaller.fWqsOy/14/file0" dev="sda1" ino=16668 res=1 [ 353.285457][ T28] audit: type=1804 audit(1578819933.153:56): pid=10495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir641919796/syzkaller.fWqsOy/14/file0" dev="sda1" ino=16668 res=1 09:05:33 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x31f}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x480, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r0, 0x0) write$P9_RWALK(r0, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x3, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="e2c6eed22489b2b4e1fff35c3a3ce5ab45c52115f5be2842f8e9d04028b9174c99f3f09d3ade5cc1e0188f8ac0fc8d8ca29d3e2ffd78b6e73afb7c0916cb423579e9c540e8f504241a0d2049c6b3fdad19469f84e8f9299cee6df478a08442cb7fc38eb5d131478b5e3d1c0d08bd01b9deb5e205e4384d91633e08e9f2394a206ac5e08296d2c32b5c9c256bf366e34b57b6045e06d64f36a38fafbe8013b180f4bd5df00f5d76ef86ea0000000000000000", @ANYRES16=0x0, @ANYBLOB="0500000000000000000001000000000000000841000000000018000000003a000000"], 0x68}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x48a00}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x2000020) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r3, 0x0) write$RDMA_USER_CM_CMD_REJECT(r3, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4012, r4, 0x0) write$RDMA_USER_CM_CMD_REJECT(r4, 0x0, 0x0) dup2(r4, r3) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ocfs2_control\x00', 0xc2685cf24303b8f8, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000b40)='oom_adj\x00') r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='auxv\x00') ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) 09:05:33 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000080)=')eth1-\x00', &(0x7f00000000c0)='&\x00', &(0x7f0000000100)='/dev/watch_queue\x00', &(0x7f0000000140)='/dev/watch_queue\x00', &(0x7f0000000180)='/dev/watch_queue\x00'], &(0x7f0000000400)=[&(0x7f0000000200)='/dev/watch_queue\x00', &(0x7f0000000240)='(mime_typenodev\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='em1}\'$)!\x00', &(0x7f0000000300)='\xa2\x00', &(0x7f0000000340)='/dev/watch_queue\x00', &(0x7f0000000380)='-:em0lo\x03-mime_type\x00', &(0x7f00000003c0)='%\x1a\'\\ppp1-[cpuseteth0%\x00']) 09:05:33 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:33 executing program 3: socket$l2tp(0x18, 0x1, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) 09:05:33 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x40000000, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f25ecdb4cb92e0a480e0014000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x2, 0x2, 0xa, 0x3f, 0xfb5}, &(0x7f00000000c0)=0x20) 09:05:33 executing program 4: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0xf000) 09:05:33 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:33 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$rds(0x15, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0xd) socket(0x2000000011, 0x4000000000080002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x19, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe, 0x7541a95f, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) 09:05:33 executing program 3: socket$l2tp(0x18, 0x1, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) 09:05:33 executing program 3: socket$l2tp(0x18, 0x1, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) 09:05:33 executing program 0: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) fcntl$dupfd(r1, 0x0, r0) 09:05:33 executing program 4: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0xf000) 09:05:35 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000300)=[{&(0x7f0000000140)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000004f0200000000024f000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x1000008000}, {&(0x7f0000000240)="5ab37b03a87e3114ecd5f7c02c08993abe363f8ccf6e7b66f6c6", 0x1a}], 0x0, 0x0) 09:05:35 executing program 4: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0xf000) 09:05:35 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:35 executing program 0: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:35 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x40000000, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f25ecdb4cb92e0a480e0014000000e8bd6efb250009000e000100400000ff050005001201", 0x2e}], 0x1}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8, 0x2, 0x2, 0xa, 0x3f, 0xfb5}, &(0x7f00000000c0)=0x20) 09:05:35 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$rds(0x15, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0xd) socket(0x2000000011, 0x4000000000080002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x19, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe, 0x7541a95f, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) 09:05:35 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:35 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:35 executing program 0: socket$l2tp(0x18, 0x1, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) 09:05:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7ff) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x0, 0x9ed, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) getpid() clock_adjtime(0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25CTLCON(r4, 0x89e1, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x0, 0x0, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25CTLCON(r5, 0x89e2, 0x0) r6 = dup3(r4, r5, 0x80000) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000240), 0x0) r7 = dup(0xffffffffffffffff) r8 = dup(0xffffffffffffffff) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) r12 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r12, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) r13 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r13, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) r14 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r14, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) r15 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r15, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) r16 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r16, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYPTR, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRESOCT=r10, @ANYRES64=r11, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="ccb2024b87c12943a2cdb77dce856212d8ec445a0caf106315d3bacfb9e245cd4255d1908542514acf572e460cdc4498be4a816608c0ca1b3662f27f83788d00793f7aee8b50cc00223adec0fd902b63531c196edea27efde0e7a9fe0158b9181c4a435eecb4674a167001415319d2f450b39580045734584472ed8bfe801a3f0800000000006e3c02cbc3a60a12bd82207c89a71b65162ab6e0714cbf6c0cb3cc78522f5d0d358c", @ANYRESDEC=r2], @ANYRES16=r1, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="bb0284b9cf989a81076c37868f9546e223e1c017e66cf148cd730fa4d3034911e8433da3954cdf1d86de5ecf1f6771d45ce4ddfa67bbe81018e64c92839ebcc9967cb6bfe8a0bbdf9f80ed58faa595650e981d1534a08ed5b3ef74b8a804673e45f30cc1d39b0c4b7626c998dd5be6024db99697975f3e66d7ac1c7f6f727b9acf6c53cbd66aec686ef7925f08849150ea9f426f367cb8dfeed2ad7fa8007b0248987389e3799989d3cdbed7930282559068e6136da058ae05be", @ANYRES64, @ANYRESOCT=0x0, @ANYRES16=r12, @ANYRES16=r13, @ANYRES16=r14, @ANYRESOCT=r7], @ANYRESOCT=r6, @ANYRES32=0x0, @ANYRES32=r8, @ANYRES64=r15, @ANYRESDEC=r16]], 0x4}}, 0x40000) syz_open_procfs(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x4}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000015000), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r17 = accept$alg(r0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}) sendmmsg$alg(r17, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r17, &(0x7f0000000000)={0x0, 0xe7030000, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0xfffffdd7}], 0x1, 0x0, 0x2000000}, 0x0) [ 355.287570][T10566] ISOFS: Unable to identify CD-ROM format. 09:05:35 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:35 executing program 0: socket$l2tp(0x18, 0x1, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) 09:05:35 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@rand_addr='\t\x00', @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x2, 0x0, 0x6}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) 09:05:35 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:35 executing program 0: socket$l2tp(0x18, 0x1, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) 09:05:35 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:35 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:35 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) socket$rds(0x15, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0xd) socket(0x2000000011, 0x4000000000080002, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x19, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe, 0x7541a95f, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) 09:05:35 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:35 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x7ff) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f0000000100)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}, 0x0, 0x0, 0x9ed, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) getpid() clock_adjtime(0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25CTLCON(r4, 0x89e1, &(0x7f0000000040)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x0, 0x0, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25CTLCON(r5, 0x89e2, 0x0) r6 = dup3(r4, r5, 0x80000) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000240), 0x0) r7 = dup(0xffffffffffffffff) r8 = dup(0xffffffffffffffff) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00') r10 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r10, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) r12 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r12, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) r13 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r13, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) r14 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r14, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) r15 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r15, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) r16 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r16, 0x29, 0x48, &(0x7f0000009dc0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x14) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3a323bd54ee5f405bb9a2a2e41b64ffd3bf62ca01e6f85a1b643224e0838b6c43821fa22aaea671c7e3869ec85c9a26ff5d337e4a3780918805bfa43246a63e13277a20525be6b672799846a45199a24354591c918c17d8fae6346d07ff8821f429aba512638eecedef540e893cb1dec2b51dff8988ffbeb64a85e46b144f1413975c1d23d3b1fc297ff00cccb606d737f1012d65f6a96e2da224aafaa3156b269a786c3abe80c0b18876a4a4eeb6f2327a35ad53d4cff67196f52c0754ee84909c2096bbd4d1e8045e196e5d38fc48ffe2832ec8774a176ea067f8c282336ec4477d5a5ee163eb97d855a829fac74b01ff37cb8179174d4a2ed80890df13884b523a1ea81dffac0168dce519b4fdfb953b7e89d", @ANYRES16=r9, @ANYPTR, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRESOCT=r10, @ANYRES64=r11, @ANYRES32=0x0, @ANYBLOB="e3cc3dc781d5944a0dd88bb037c6154c77a4fc9a50b3c49f72afdc77d4172192f92f454aae6329fc00d95a507e8b871cd2df6f3e8d28b5272c4f72a313c90a854414bcbfc006269488803293127df7e3de17401f7e913ceecb5af7eb616a91f96f2e598593a015ced33ebafeec947b7936782bd06c59b4dca106130c175ff4e129606d1f31bde80e17d40a3782e232bde5f1d80c8e58c8fc33788d927815b595b636812fcae962156cf33d239c357d896366c8f364bfa612f1c9aa6603c59de7259d379a4772d3fed08499775fe1af535aabc8d3e80c885630c1bf2c4ddb80ac0377b5407a45041fc5b99d570d0242d2ae115ed6a248c809593b3197276f933203ad6d0cd782952a04be21e7fa7050e6925d5cd03ee80b451ce627e79271d42ee9153e26189260608d9740d8e4c0232ad690fd0e980456cc987e434c02bc937f304da158557166ac9c015e0574a9aaf3890d80dd537d9372f6a5cc15d3366f53a4b0ecd2b3b030613ed264d45d4edf7171c48d", @ANYBLOB="ccb2024b87c12943a2cdb77dce856212d8ec445a0caf106315d3bacfb9e245cd4255d1908542514acf572e460cdc4498be4a816608c0ca1b3662f27f83788d00793f7aee8b50cc00223adec0fd902b63531c196edea27efde0e7a9fe0158b9181c4a435eecb4674a167001415319d2f450b39580045734584472ed8bfe801a3f0800000000006e3c02cbc3a60a12bd82207c89a71b65162ab6e0714cbf6c0cb3cc78522f5d0d358c", @ANYRESDEC=r2], @ANYRES16=r1, @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="bb0284b9cf989a81076c37868f9546e223e1c017e66cf148cd730fa4d3034911e8433da3954cdf1d86de5ecf1f6771d45ce4ddfa67bbe81018e64c92839ebcc9967cb6bfe8a0bbdf9f80ed58faa595650e981d1534a08ed5b3ef74b8a804673e45f30cc1d39b0c4b7626c998dd5be6024db99697975f3e66d7ac1c7f6f727b9acf6c53cbd66aec686ef7925f08849150ea9f426f367cb8dfeed2ad7fa8007b0248987389e3799989d3cdbed7930282559068e6136da058ae05be", @ANYRES64, @ANYRESOCT=0x0, @ANYRES16=r12, @ANYRES16=r13, @ANYRES16=r14, @ANYRESOCT=r7], @ANYRESOCT=r6, @ANYRES32=0x0, @ANYRES32=r8, @ANYRES64=r15, @ANYRESDEC=r16]], 0x4}}, 0x40000) syz_open_procfs(0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x4}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000015000), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000012c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r17 = accept$alg(r0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}) sendmmsg$alg(r17, &(0x7f0000005900)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r17, &(0x7f0000000000)={0x0, 0xe7030000, &(0x7f0000000140)=[{&(0x7f0000001480)=""/4096, 0xfffffdd7}], 0x1, 0x0, 0x2000000}, 0x0) 09:05:35 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) 09:05:35 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:35 executing program 3: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) 09:05:36 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) 09:05:36 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:36 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:36 executing program 3: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) 09:05:36 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) 09:05:36 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:36 executing program 1: r0 = socket(0x10, 0x80002, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="080db5055e0bcfe8696071") r1 = socket$inet6(0xa, 0x4, 0x7) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000140)={0x3}, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29, 0x3, 0x4942516c40925cf9}], 0x18}], 0x1, 0x40000000) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) ioctl$TIOCSSERIAL(r2, 0x541e, &(0x7f0000000300)={0x4, 0x0, 0x800, 0x101, 0x7fff, 0x9ec9, 0x6, 0x4, 0x9, 0xff, 0x1, 0x9, 0x8, 0x4, &(0x7f0000000180)=""/12, 0x0, 0x1, 0x6}) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000200)=""/215, &(0x7f0000000000)=0xd7) r3 = gettid() sched_setattr(r3, &(0x7f0000000040)={0x38, 0x3, 0x8, 0x0, 0x7, 0x8, 0x40, 0x7ff, 0x7, 0x3}, 0x0) 09:05:36 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:36 executing program 3: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) 09:05:36 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) 09:05:36 executing program 5: socket$l2tp(0x18, 0x1, 0x1) openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0xf000) 09:05:36 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x8447, 0x0) preadv(r0, &(0x7f0000000800)=[{&(0x7f0000000000)=""/31, 0x1f}], 0x1, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)={0x0, 0x1, 0x4, 0x2000, 0x3b8, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "0be891b5"}, 0xa35, 0x0, @userptr=0x8001}) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000080)={0x23, 0x41, &(0x7f0000000840)="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", {0x8, 0x2, 0x38415262, 0x7, 0x3ff, 0x4, 0xb, 0x8000}}) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x8, r1) pkey_free(r1) 09:05:37 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:37 executing program 5: socket$l2tp(0x18, 0x1, 0x1) openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0xf000) 09:05:37 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:05:37 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) 09:05:37 executing program 2: r0 = syz_open_dev$usbmon(0x0, 0x20000000001, 0x801) recvfrom$inet(r0, 0x0, 0x202, 0x0, 0x0, 0x10000007c) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x11, 0x2, 0x5) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$tipc(r5, 0x0, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000008c0)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000007c0)) r7 = getpgid(0x0) connect$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x1, {0xccce, 0x7, 0x80000001, 0x8, 0x7, 0x5}, 0xe0, 0x6}, 0xe) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000840)={{0x0, r3, r4, r6, r4, 0x4c1078b5631b409f, 0xb}, 0xb8fb, 0xffc, 0x3, 0x8000, r7, r7, 0x81}) r8 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x0, 0x2000) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x420401, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000200)={0x1, 0x6}) ioctl$TIOCSCTTY(r0, 0x540e, 0x100000000) sendmsg(r0, &(0x7f0000001b40)={&(0x7f00000003c0)=@in={0x2, 0x4e24, @multicast1}, 0x80, &(0x7f0000001a00)=[{&(0x7f00000019c0)="c99d74", 0x3}], 0x1}, 0x40000) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="2d41d358b8361e7d73e3e48513a08593", 0xffffffbd) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000080)={[0x0, 0x0, 0x114], 0x3ff, 0x4400, 0x200, 0x1, 0x1, r7}) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='cubic\x00', 0xffffffffffffffcd) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000080)={0x3, 0x70, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x8, 0x2000, 0x8000000000e, 0xd00, 0x7f, 0x2, 0xfffffffffffffff8, 0x0, 0x0, 0x8001, 0x4, 0x9e6d, 0x73d9, 0x5c97, 0x8000000000000000, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x6, 0xfff, 0x7, 0xfffffffffffffffe, 0x200, 0x0, 0x80000000, 0x6, @perf_bp={0x0, 0x8}, 0x100, 0x8, 0x5, 0x6, 0x0, 0x8880, 0xc1f}, 0x0, 0xe, r1, 0x0) r10 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000440), 0x0, r10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440)='IPVS\x00') memfd_create(&(0x7f0000000f40)='3\x00\x1e\x18J\xb6\t\xca\xd3\x00O9\x143\xd3ty\xf9 \n\x13S+\xefB\xff\x00D\xb8\xeb\fo\xf8\xbdv\xaf\xf6\x18\x1eE\x1eYQc\x94\xd2\xc8#\x9e0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000100eb8000000000020001", @ANYRES32, @ANYRES32, @ANYBLOB="b8e365400357609aeb2c35eb6346b93e", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESDEC=r5], 0x7, 0x1) r6 = socket(0x0, 0x3, 0x8) syz_open_dev$amidi(0x0, 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) sendmsg$key(r6, 0x0, 0x0) r7 = gettid() waitid(0x0, r7, &(0x7f0000000040), 0x0, &(0x7f0000000480)) sendmsg$key(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20004850) r8 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) r9 = dup2(r8, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) r10 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r10) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) kcmp(r10, r7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, r9, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r3, 0x0, 0x4, &(0x7f0000000180)='em1\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0xc) open(0x0, 0xe279a88a3b20cda9, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xa1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setpipe(r11, 0x407, 0xfffffffffffffffe) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r13, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x0, 0xffffffffffffffff, {0x6a7, 0x4, 0x0, 0xfff}}, 0xffffffffffffffb2) r14 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000002c0), 0x0) pwritev(r14, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r14) sendfile(r11, r12, 0x0, 0x102000004) 09:05:37 executing program 0: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) 09:05:37 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:05:37 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) 09:05:37 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) 09:05:37 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:05:37 executing program 0: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) 09:05:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x800, 0xffff0000, 0x5}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={r4, 0xf6a}, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup2(r5, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="70010000240007001000000000004000400a5bd9d702ff4d692c72", @ANYRES32=r1, @ANYBLOB="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"], 0x170}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) 09:05:37 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:37 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) 09:05:37 executing program 3 (fault-call:1 fault-nth:0): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) [ 358.026580][T10714] FAULT_INJECTION: forcing a failure. [ 358.026580][T10714] name failslab, interval 1, probability 0, space 0, times 1 [ 358.057742][T10714] CPU: 1 PID: 10714 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 358.068640][T10714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.078888][T10714] Call Trace: [ 358.082321][T10714] dump_stack+0x197/0x210 [ 358.086715][T10714] should_fail.cold+0xa/0x10 [ 358.092528][T10714] ? setup_fault_attr+0x220/0x220 [ 358.097785][T10714] ? ___might_sleep+0x163/0x2c0 [ 358.102708][T10714] __should_failslab+0x121/0x190 [ 358.107693][T10714] should_failslab+0x9/0x14 [ 358.112204][T10714] __kmalloc+0x2e0/0x770 [ 358.116932][T10714] ? mark_held_locks+0xf0/0xf0 [ 358.121702][T10714] ? mark_lock+0xc2/0x1220 [ 358.126162][T10714] ? _parse_integer+0x190/0x190 [ 358.131102][T10714] ? tomoyo_realpath_from_path+0xc5/0x660 [ 358.136840][T10714] tomoyo_realpath_from_path+0xc5/0x660 [ 358.142396][T10714] ? tomoyo_path_number_perm+0x193/0x520 [ 358.148073][T10714] tomoyo_path_number_perm+0x1dd/0x520 [ 358.153538][T10714] ? tomoyo_path_number_perm+0x193/0x520 [ 358.159179][T10714] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 358.165275][T10714] ? __f_unlock_pos+0x19/0x20 [ 358.169992][T10714] ? __fget+0x37f/0x550 09:05:38 executing program 0: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) [ 358.174163][T10714] ? do_dup2+0x4f0/0x4f0 [ 358.178465][T10714] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 358.184769][T10714] ? fput_many+0x12c/0x1a0 [ 358.189200][T10714] tomoyo_file_ioctl+0x23/0x30 [ 358.194134][T10714] security_file_ioctl+0x77/0xc0 [ 358.199120][T10714] ksys_ioctl+0x56/0x180 [ 358.203374][T10714] __x64_sys_ioctl+0x73/0xb0 [ 358.208117][T10714] do_syscall_64+0xfa/0x790 [ 358.212940][T10714] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 358.219791][T10714] RIP: 0033:0x45af49 [ 358.223688][T10714] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 358.243299][T10714] RSP: 002b:00007f9f1a181c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 358.251717][T10714] RAX: ffffffffffffffda RBX: 00007f9f1a181c90 RCX: 000000000045af49 [ 358.260134][T10714] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 358.268158][T10714] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 358.276139][T10714] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f1a1826d4 [ 358.284117][T10714] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 [ 358.372566][T10715] netlink: 332 bytes leftover after parsing attributes in process `syz-executor.2'. [ 358.432520][T10715] netlink: 332 bytes leftover after parsing attributes in process `syz-executor.2'. [ 358.453040][T10721] netlink: 332 bytes leftover after parsing attributes in process `syz-executor.2'. [ 358.463002][T10721] netlink: 332 bytes leftover after parsing attributes in process `syz-executor.2'. [ 358.510201][T10714] ERROR: Out of memory at tomoyo_realpath_from_path. 09:05:38 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) 09:05:38 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:38 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:05:38 executing program 2: ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040)='NLBL_CALIPSO\x00') setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x104000000000000, 0x40, &(0x7f00000007c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000200000003000000601200003011000000000000301100000000000000000000c8110000c8110000c8110000c8110000c81100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000008113011000000000000000000000000000000000000000030106367726f7570000000000000000000000000000000000000000000000001000080002e2f6367726f75702f73797a3000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006800726174656573740000000000000000000000000000000000000000000000000000000000000000000000000000006873723000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000280053594e50524f585900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a6eae9b57219db158a98f90600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070009800000000000000000000000000000000000000000028004d41524b00000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800"/4800], 0xffffffffffffffa2) 09:05:38 executing program 1: pipe(&(0x7f0000000680)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) socket$packet(0x11, 0x3, 0x300) r1 = dup(0xffffffffffffffff) capget(0x0, 0x0) getpgid(0x0) memfd_create(0x0, 0x5) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x1) dup2(r2, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x5452, &(0x7f0000000040)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000100eb8000000000020001", @ANYRES32, @ANYRES32, @ANYBLOB="b8e365400357609aeb2c35eb6346b93e", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESDEC=r5], 0x7, 0x1) r6 = socket(0x0, 0x3, 0x8) syz_open_dev$amidi(0x0, 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) sendmsg$key(r6, 0x0, 0x0) r7 = gettid() waitid(0x0, r7, &(0x7f0000000040), 0x0, &(0x7f0000000480)) sendmsg$key(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20004850) r8 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) r9 = dup2(r8, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) r10 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r10) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) kcmp(r10, r7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, r9, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r3, 0x0, 0x4, &(0x7f0000000180)='em1\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0xc) open(0x0, 0xe279a88a3b20cda9, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xa1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setpipe(r11, 0x407, 0xfffffffffffffffe) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r13, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x0, 0xffffffffffffffff, {0x6a7, 0x4, 0x0, 0xfff}}, 0xffffffffffffffb2) r14 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000002c0), 0x0) pwritev(r14, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r14) sendfile(r11, r12, 0x0, 0x102000004) 09:05:38 executing program 3 (fault-call:1 fault-nth:1): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) [ 358.911987][T10738] FAULT_INJECTION: forcing a failure. [ 358.911987][T10738] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 358.925246][T10738] CPU: 1 PID: 10738 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 358.935139][T10738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 358.945199][T10738] Call Trace: [ 358.948503][T10738] dump_stack+0x197/0x210 [ 358.952852][T10738] should_fail.cold+0xa/0x10 [ 358.957458][T10738] ? setup_fault_attr+0x220/0x220 [ 358.962492][T10738] ? __kasan_check_read+0x11/0x20 [ 358.967529][T10738] ? mark_lock+0xc2/0x1220 [ 358.972045][T10738] ? __kernel_text_address+0xd/0x40 [ 358.977330][T10738] should_fail_alloc_page+0x50/0x60 [ 358.982539][T10738] __alloc_pages_nodemask+0x1a1/0x910 [ 358.987931][T10738] ? __alloc_pages_slowpath+0x2900/0x2900 [ 358.993657][T10738] ? __kasan_check_read+0x11/0x20 [ 358.998687][T10738] ? setup_fault_attr+0x220/0x220 [ 359.003718][T10738] cache_grow_begin+0x90/0xc60 [ 359.008559][T10738] ? trace_hardirqs_off+0x62/0x240 [ 359.013687][T10738] __kmalloc+0x6b2/0x770 [ 359.018892][T10738] ? mark_held_locks+0xf0/0xf0 [ 359.023664][T10738] ? mark_lock+0xc2/0x1220 [ 359.028096][T10738] ? tomoyo_realpath_from_path+0xc5/0x660 [ 359.033820][T10738] tomoyo_realpath_from_path+0xc5/0x660 [ 359.039380][T10738] ? tomoyo_path_number_perm+0x193/0x520 [ 359.045025][T10738] tomoyo_path_number_perm+0x1dd/0x520 [ 359.050492][T10738] ? tomoyo_path_number_perm+0x193/0x520 [ 359.056160][T10738] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 359.061979][T10738] ? __f_unlock_pos+0x19/0x20 [ 359.066701][T10738] ? __fget+0x37f/0x550 [ 359.070869][T10738] ? do_dup2+0x4f0/0x4f0 [ 359.075115][T10738] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 359.081379][T10738] ? fput_many+0x12c/0x1a0 [ 359.085817][T10738] tomoyo_file_ioctl+0x23/0x30 [ 359.090583][T10738] security_file_ioctl+0x77/0xc0 [ 359.095534][T10738] ksys_ioctl+0x56/0x180 [ 359.099786][T10738] __x64_sys_ioctl+0x73/0xb0 [ 359.104387][T10738] do_syscall_64+0xfa/0x790 [ 359.108896][T10738] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.114797][T10738] RIP: 0033:0x45af49 [ 359.118704][T10738] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 359.138314][T10738] RSP: 002b:00007f9f1a181c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.146739][T10738] RAX: ffffffffffffffda RBX: 00007f9f1a181c90 RCX: 000000000045af49 [ 359.154720][T10738] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 359.162697][T10738] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 359.170670][T10738] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f1a1826d4 [ 359.178747][T10738] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 09:05:39 executing program 5: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) 09:05:39 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:05:39 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x2, 0x2, 0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000280)=""/217, &(0x7f0000000380)=0xd9) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800515cc2a0000200000000000000006113dc2d08f6c4b57180000046339db500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xdba3dd835d632db6, 0x10, &(0x7f0000000000), 0xfdd1}, 0x48) 09:05:39 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:39 executing program 5: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) 09:05:39 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:05:39 executing program 3 (fault-call:1 fault-nth:2): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:39 executing program 5: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) 09:05:39 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:39 executing program 2: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffff6}, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5f0c5157db0633e38f5165a9980db30a4d0e5defaa39987ab8a761ed8f78ad333c08b6fce07af1453afb5f5c00"], 0x1) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, 0x0, 0x4000000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, 0x0) r1 = socket$inet(0x2, 0x4000000805, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x1, @multicast2}}}, &(0x7f0000000200)=0x90) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) msgsnd(0x0, 0x0, 0x0, 0x0) [ 359.578527][T10763] FAULT_INJECTION: forcing a failure. [ 359.578527][T10763] name failslab, interval 1, probability 0, space 0, times 0 [ 359.649477][T10763] CPU: 0 PID: 10763 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 359.659404][T10763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 359.669466][T10763] Call Trace: [ 359.672768][T10763] dump_stack+0x197/0x210 [ 359.677119][T10763] should_fail.cold+0xa/0x10 [ 359.682159][T10763] ? setup_fault_attr+0x220/0x220 [ 359.687206][T10763] ? ___might_sleep+0x163/0x2c0 [ 359.692075][T10763] __should_failslab+0x121/0x190 [ 359.697030][T10763] should_failslab+0x9/0x14 [ 359.701538][T10763] __kmalloc+0x2e0/0x770 [ 359.705795][T10763] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 359.712124][T10763] ? d_absolute_path+0x11b/0x170 [ 359.717076][T10763] ? __d_path+0x140/0x140 [ 359.721415][T10763] ? tomoyo_encode2.part.0+0xf5/0x400 [ 359.726803][T10763] tomoyo_encode2.part.0+0xf5/0x400 [ 359.732013][T10763] tomoyo_encode+0x2b/0x50 [ 359.736445][T10763] tomoyo_realpath_from_path+0x19c/0x660 [ 359.742098][T10763] tomoyo_path_number_perm+0x1dd/0x520 [ 359.747569][T10763] ? tomoyo_path_number_perm+0x193/0x520 [ 359.753343][T10763] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 359.759155][T10763] ? __f_unlock_pos+0x19/0x20 [ 359.763877][T10763] ? __fget+0x37f/0x550 [ 359.768048][T10763] ? do_dup2+0x4f0/0x4f0 [ 359.772310][T10763] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 359.778561][T10763] ? fput_many+0x12c/0x1a0 [ 359.782992][T10763] tomoyo_file_ioctl+0x23/0x30 [ 359.787773][T10763] security_file_ioctl+0x77/0xc0 [ 359.792728][T10763] ksys_ioctl+0x56/0x180 [ 359.796984][T10763] __x64_sys_ioctl+0x73/0xb0 [ 359.801588][T10763] do_syscall_64+0xfa/0x790 [ 359.806105][T10763] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 359.812004][T10763] RIP: 0033:0x45af49 [ 359.815904][T10763] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 359.835517][T10763] RSP: 002b:00007f9f1a181c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 359.843938][T10763] RAX: ffffffffffffffda RBX: 00007f9f1a181c90 RCX: 000000000045af49 [ 359.851914][T10763] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 359.859894][T10763] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 359.867874][T10763] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f1a1826d4 [ 359.875956][T10763] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 [ 359.940170][T10763] ERROR: Out of memory at tomoyo_realpath_from_path. 09:05:40 executing program 1: pipe(&(0x7f0000000680)) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) socket$packet(0x11, 0x3, 0x300) r1 = dup(0xffffffffffffffff) capget(0x0, 0x0) getpgid(0x0) memfd_create(0x0, 0x5) r2 = syz_open_dev$sndseq(0x0, 0x0, 0x1) dup2(r2, 0xffffffffffffffff) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x5452, &(0x7f0000000040)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="020000000100eb8000000000020001", @ANYRES32, @ANYRES32, @ANYBLOB="b8e365400357609aeb2c35eb6346b93e", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRESDEC=r5], 0x7, 0x1) r6 = socket(0x0, 0x3, 0x8) syz_open_dev$amidi(0x0, 0x9c4, 0x70000) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, &(0x7f0000000180)={'\x00', 0x4}) sendmsg$key(r6, 0x0, 0x0) r7 = gettid() waitid(0x0, r7, &(0x7f0000000040), 0x0, &(0x7f0000000480)) sendmsg$key(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x20004850) r8 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) r9 = dup2(r8, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'}) r10 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r10) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x227d, &(0x7f0000000780)) kcmp(r10, r7, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, r9, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000002380)='\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r3, 0x0, 0x4, &(0x7f0000000180)='em1\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000080)='/dev/autofs\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r1, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0xc) open(0x0, 0xe279a88a3b20cda9, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xa1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setpipe(r11, 0x407, 0xfffffffffffffffe) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0x10) r12 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r13 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r13, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000240)={0x20, 0x0, 0xffffffffffffffff, {0x6a7, 0x4, 0x0, 0xfff}}, 0xffffffffffffffb2) r14 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000002c0), 0x0) pwritev(r14, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r12, 0x4c00, r14) sendfile(r11, r12, 0x0, 0x102000004) 09:05:40 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:40 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:40 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:40 executing program 3 (fault-call:1 fault-nth:3): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:40 executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x88) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x3, 0x8, 0x0) remap_file_pages(&(0x7f000012a000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x4, 0x0, 0x0, 0x0) [ 360.338517][T10789] FAULT_INJECTION: forcing a failure. [ 360.338517][T10789] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 360.361129][T10790] FAULT_INJECTION: forcing a failure. [ 360.361129][T10790] name failslab, interval 1, probability 0, space 0, times 0 [ 360.374081][T10789] CPU: 1 PID: 10789 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 09:05:40 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) [ 360.384000][T10789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.394075][T10789] Call Trace: [ 360.397390][T10789] dump_stack+0x197/0x210 [ 360.401891][T10789] should_fail.cold+0xa/0x10 [ 360.406567][T10789] ? setup_fault_attr+0x220/0x220 [ 360.411610][T10789] ? ___might_sleep+0x163/0x2c0 [ 360.416662][T10789] should_fail_alloc_page+0x50/0x60 [ 360.421886][T10789] __alloc_pages_nodemask+0x1a1/0x910 [ 360.427486][T10789] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 360.433673][T10789] ? __alloc_pages_slowpath+0x2900/0x2900 [ 360.439702][T10789] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 360.445802][T10789] ? __kmalloc+0x608/0x770 [ 360.450239][T10789] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 360.456977][T10789] alloc_pages_current+0x107/0x210 [ 360.462164][T10789] watch_queue_ioctl+0x6db/0x16e0 [ 360.467307][T10789] ? watch_queue_map_pages+0x620/0x620 [ 360.472794][T10789] ? tomoyo_file_ioctl+0x23/0x30 [ 360.477756][T10789] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 09:05:40 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) [ 360.483389][T10795] mmap: syz-executor.2 (10795) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 360.484282][T10789] ? security_file_ioctl+0x8d/0xc0 [ 360.501818][T10789] ? watch_queue_map_pages+0x620/0x620 [ 360.507503][T10789] ksys_ioctl+0x123/0x180 [ 360.511950][T10789] __x64_sys_ioctl+0x73/0xb0 [ 360.516571][T10789] do_syscall_64+0xfa/0x790 [ 360.521099][T10789] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.527182][T10789] RIP: 0033:0x45af49 [ 360.531095][T10789] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.550941][T10789] RSP: 002b:00007f9f1a181c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.559908][T10789] RAX: ffffffffffffffda RBX: 00007f9f1a181c90 RCX: 000000000045af49 [ 360.567989][T10789] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 360.576201][T10789] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 09:05:40 executing program 2: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000002c0), 0x12) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r2, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000002540)=[{0x0}, {0x0}, {&(0x7f0000003800)=""/4100, 0xffffff5f}], 0x3, 0x0, 0x17b, 0x3e8}, 0x180) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="67169bc8e669d17460e7da7bfed0519741dcf79015a48270fe3dff0b73affaa1dc5604c0835fd7804e087a969221e145f91c44a0ce7e5e8fe65dca631bdc70ec61e99a5bd6f31d7ec9c377a4cd9d487c41e120e3ef2f4396e40803670267a2603a9a433c0604dc2293542c8435e7d71423f5a0404f13bec642559b118b9f375024704a710ea6e49813ba9c8ddd4d8d7007bf7d0799a76561784e716a52d2853f32f6d7c2e4814fcb2e4df35700"], 0xad) [ 360.584320][T10789] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f1a1826d4 [ 360.592312][T10789] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 [ 360.617180][T10790] CPU: 0 PID: 10790 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 360.627218][T10790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 360.637556][T10790] Call Trace: [ 360.640871][T10790] dump_stack+0x197/0x210 [ 360.645494][T10790] should_fail.cold+0xa/0x10 [ 360.650251][T10790] ? setup_fault_attr+0x220/0x220 [ 360.655546][T10790] ? ___might_sleep+0x163/0x2c0 [ 360.660561][T10790] __should_failslab+0x121/0x190 [ 360.665527][T10790] should_failslab+0x9/0x14 [ 360.670054][T10790] __kmalloc+0x2e0/0x770 [ 360.674316][T10790] ? mark_held_locks+0xf0/0xf0 [ 360.679101][T10790] ? mark_lock+0xc2/0x1220 [ 360.683534][T10790] ? _parse_integer+0x190/0x190 [ 360.688840][T10790] ? tomoyo_realpath_from_path+0xc5/0x660 [ 360.694587][T10790] tomoyo_realpath_from_path+0xc5/0x660 [ 360.700175][T10790] ? tomoyo_path_number_perm+0x193/0x520 [ 360.705841][T10790] tomoyo_path_number_perm+0x1dd/0x520 [ 360.711311][T10790] ? tomoyo_path_number_perm+0x193/0x520 [ 360.717054][T10790] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 360.722872][T10790] ? __f_unlock_pos+0x19/0x20 [ 360.727598][T10790] ? __fget+0x37f/0x550 [ 360.731771][T10790] ? do_dup2+0x4f0/0x4f0 [ 360.736030][T10790] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 360.742280][T10790] ? fput_many+0x12c/0x1a0 [ 360.746721][T10790] tomoyo_file_ioctl+0x23/0x30 [ 360.751571][T10790] security_file_ioctl+0x77/0xc0 [ 360.756521][T10790] ksys_ioctl+0x56/0x180 [ 360.760777][T10790] __x64_sys_ioctl+0x73/0xb0 [ 360.765433][T10790] do_syscall_64+0xfa/0x790 [ 360.769953][T10790] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 360.775849][T10790] RIP: 0033:0x45af49 [ 360.779754][T10790] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 360.799598][T10790] RSP: 002b:00007f606590dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.808104][T10790] RAX: ffffffffffffffda RBX: 00007f606590dc90 RCX: 000000000045af49 [ 360.816082][T10790] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 360.825384][T10790] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 360.833673][T10790] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f606590e6d4 [ 360.841989][T10790] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 09:05:40 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:40 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) 09:05:40 executing program 3 (fault-call:1 fault-nth:4): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) [ 360.937725][T10790] ERROR: Out of memory at tomoyo_realpath_from_path. [ 361.105893][T10822] FAULT_INJECTION: forcing a failure. [ 361.105893][T10822] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 361.137377][T10822] CPU: 0 PID: 10822 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 361.147428][T10822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.157605][T10822] Call Trace: [ 361.160919][T10822] dump_stack+0x197/0x210 [ 361.165630][T10822] should_fail.cold+0xa/0x10 [ 361.170274][T10822] ? setup_fault_attr+0x220/0x220 [ 361.175511][T10822] ? ___might_sleep+0x163/0x2c0 [ 361.180404][T10822] should_fail_alloc_page+0x50/0x60 [ 361.185636][T10822] __alloc_pages_nodemask+0x1a1/0x910 [ 361.191030][T10822] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 361.197304][T10822] ? __alloc_pages_slowpath+0x2900/0x2900 [ 361.203258][T10822] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 361.209268][T10822] ? __kmalloc+0x608/0x770 [ 361.213713][T10822] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 361.220010][T10822] alloc_pages_current+0x107/0x210 [ 361.225149][T10822] watch_queue_ioctl+0x6db/0x16e0 [ 361.230214][T10822] ? watch_queue_map_pages+0x620/0x620 [ 361.235700][T10822] ? tomoyo_file_ioctl+0x23/0x30 [ 361.240748][T10822] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.247128][T10822] ? security_file_ioctl+0x8d/0xc0 [ 361.252345][T10822] ? watch_queue_map_pages+0x620/0x620 [ 361.257827][T10822] ksys_ioctl+0x123/0x180 [ 361.262184][T10822] __x64_sys_ioctl+0x73/0xb0 [ 361.267107][T10822] do_syscall_64+0xfa/0x790 [ 361.271728][T10822] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.277637][T10822] RIP: 0033:0x45af49 [ 361.282039][T10822] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 361.301835][T10822] RSP: 002b:00007f9f1a181c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.310270][T10822] RAX: ffffffffffffffda RBX: 00007f9f1a181c90 RCX: 000000000045af49 [ 361.318268][T10822] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 361.326272][T10822] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 361.334264][T10822] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f1a1826d4 [ 361.342254][T10822] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 09:05:41 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)={[{@wsync='wsync'}]}) getpeername$unix(r1, &(0x7f0000000080)=@abs, &(0x7f0000000100)=0x6e) 09:05:41 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) 09:05:41 executing program 0 (fault-call:1 fault-nth:1): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:41 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:41 executing program 3 (fault-call:1 fault-nth:5): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) [ 361.612236][T10835] FAULT_INJECTION: forcing a failure. [ 361.612236][T10835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 361.650560][T10838] FAULT_INJECTION: forcing a failure. [ 361.650560][T10838] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 361.652355][T10835] CPU: 0 PID: 10835 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 361.673911][T10835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.684038][T10835] Call Trace: [ 361.687383][T10835] dump_stack+0x197/0x210 [ 361.691721][T10835] should_fail.cold+0xa/0x10 [ 361.696307][T10835] ? setup_fault_attr+0x220/0x220 [ 361.701473][T10835] ? ___might_sleep+0x163/0x2c0 [ 361.706593][T10835] should_fail_alloc_page+0x50/0x60 [ 361.711902][T10835] __alloc_pages_nodemask+0x1a1/0x910 [ 361.717282][T10835] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 361.723650][T10835] ? __alloc_pages_slowpath+0x2900/0x2900 [ 361.729377][T10835] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 361.735368][T10835] ? __kmalloc+0x608/0x770 [ 361.739794][T10835] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 361.746054][T10835] alloc_pages_current+0x107/0x210 [ 361.751192][T10835] watch_queue_ioctl+0x6db/0x16e0 [ 361.756282][T10835] ? watch_queue_map_pages+0x620/0x620 [ 361.761944][T10835] ? tomoyo_file_ioctl+0x23/0x30 [ 361.766890][T10835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 361.773134][T10835] ? security_file_ioctl+0x8d/0xc0 [ 361.778295][T10835] ? watch_queue_map_pages+0x620/0x620 [ 361.783857][T10835] ksys_ioctl+0x123/0x180 [ 361.788316][T10835] __x64_sys_ioctl+0x73/0xb0 [ 361.792977][T10835] do_syscall_64+0xfa/0x790 [ 361.798455][T10835] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 361.805138][T10835] RIP: 0033:0x45af49 [ 361.809271][T10835] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 361.831858][T10835] RSP: 002b:00007f9f1a181c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.840479][T10835] RAX: ffffffffffffffda RBX: 00007f9f1a181c90 RCX: 000000000045af49 [ 361.849021][T10835] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 361.857559][T10835] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 361.865960][T10835] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f1a1826d4 [ 361.875529][T10835] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 [ 361.883562][T10838] CPU: 1 PID: 10838 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 361.893703][T10838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 361.905185][T10838] Call Trace: [ 361.908895][T10838] dump_stack+0x197/0x210 [ 361.913580][T10838] should_fail.cold+0xa/0x10 [ 361.918669][T10838] ? setup_fault_attr+0x220/0x220 [ 361.924077][T10838] ? __kasan_check_read+0x11/0x20 [ 361.929300][T10838] ? mark_lock+0xc2/0x1220 [ 361.933746][T10838] ? __kernel_text_address+0xd/0x40 [ 361.938980][T10838] should_fail_alloc_page+0x50/0x60 [ 361.944217][T10838] __alloc_pages_nodemask+0x1a1/0x910 [ 361.949858][T10838] ? __alloc_pages_slowpath+0x2900/0x2900 [ 361.956054][T10838] ? __kasan_check_read+0x11/0x20 09:05:41 executing program 3 (fault-call:1 fault-nth:6): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) [ 361.961652][T10838] ? setup_fault_attr+0x220/0x220 [ 361.966775][T10838] cache_grow_begin+0x90/0xc60 [ 361.971655][T10838] ? trace_hardirqs_off+0x62/0x240 [ 361.976886][T10838] __kmalloc+0x6b2/0x770 [ 361.981152][T10838] ? mark_held_locks+0xf0/0xf0 [ 361.986515][T10838] ? mark_lock+0xc2/0x1220 [ 361.991143][T10838] ? tomoyo_realpath_from_path+0xc5/0x660 [ 361.996895][T10838] tomoyo_realpath_from_path+0xc5/0x660 [ 362.002463][T10838] ? tomoyo_path_number_perm+0x193/0x520 [ 362.009113][T10838] tomoyo_path_number_perm+0x1dd/0x520 [ 362.014776][T10838] ? tomoyo_path_number_perm+0x193/0x520 [ 362.021651][T10838] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 362.028129][T10838] ? __f_unlock_pos+0x19/0x20 [ 362.033533][T10838] ? __fget+0x37f/0x550 [ 362.038423][T10838] ? do_dup2+0x4f0/0x4f0 [ 362.043655][T10838] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 362.050386][T10838] ? fput_many+0x12c/0x1a0 [ 362.055493][T10838] tomoyo_file_ioctl+0x23/0x30 [ 362.060106][T10854] FAULT_INJECTION: forcing a failure. [ 362.060106][T10854] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 362.060382][T10838] security_file_ioctl+0x77/0xc0 [ 362.076474][T10841] XFS (loop1): Invalid superblock magic number [ 362.079508][T10838] ksys_ioctl+0x56/0x180 [ 362.079529][T10838] __x64_sys_ioctl+0x73/0xb0 [ 362.079550][T10838] do_syscall_64+0xfa/0x790 [ 362.079571][T10838] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.079582][T10838] RIP: 0033:0x45af49 [ 362.079604][T10838] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 362.079612][T10838] RSP: 002b:00007f606590dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.138025][T10838] RAX: ffffffffffffffda RBX: 00007f606590dc90 RCX: 000000000045af49 [ 362.154073][T10838] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 362.162224][T10838] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 362.170221][T10838] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f606590e6d4 [ 362.178341][T10838] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 [ 362.186543][T10854] CPU: 0 PID: 10854 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 362.196591][T10854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.206667][T10854] Call Trace: [ 362.209981][T10854] dump_stack+0x197/0x210 09:05:42 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) [ 362.214341][T10854] should_fail.cold+0xa/0x10 [ 362.218958][T10854] ? setup_fault_attr+0x220/0x220 [ 362.224181][T10854] ? ___might_sleep+0x163/0x2c0 [ 362.229083][T10854] should_fail_alloc_page+0x50/0x60 [ 362.234307][T10854] __alloc_pages_nodemask+0x1a1/0x910 [ 362.239983][T10854] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 362.246345][T10854] ? __alloc_pages_slowpath+0x2900/0x2900 [ 362.252425][T10854] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 362.258715][T10854] ? __kmalloc+0x608/0x770 09:05:42 executing program 5: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) [ 362.263163][T10854] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 362.269443][T10854] alloc_pages_current+0x107/0x210 [ 362.274583][T10854] watch_queue_ioctl+0x6db/0x16e0 [ 362.279665][T10854] ? watch_queue_map_pages+0x620/0x620 [ 362.285165][T10854] ? tomoyo_file_ioctl+0x23/0x30 [ 362.290123][T10854] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.296388][T10854] ? security_file_ioctl+0x8d/0xc0 [ 362.301525][T10854] ? watch_queue_map_pages+0x620/0x620 [ 362.307096][T10854] ksys_ioctl+0x123/0x180 [ 362.311453][T10854] __x64_sys_ioctl+0x73/0xb0 [ 362.316070][T10854] do_syscall_64+0xfa/0x790 [ 362.320601][T10854] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.326678][T10854] RIP: 0033:0x45af49 [ 362.330588][T10854] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 362.350206][T10854] RSP: 002b:00007f9f1a181c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 09:05:42 executing program 2: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000003c0)={0x1, 0x9, 0x4, 0xe000, 0x2, {0x77359400}, {0x5, 0xc, 0x9, 0x3, 0x20, 0x0, "80f2ce1e"}, 0x4, 0x4, @planes=&(0x7f0000000340)={0x3f, 0x5, @mem_offset=0x9, 0x72d}, 0x298b2575, 0x0, r0}) bind$alg(r1, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bsg\x00', 0x2800, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f0000000680)={0x7, 0x21, 0x1}, 0x7) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x7fff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x0) socket(0x10, 0x803, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x2000, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x40000) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r9, 0xc0845658, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0xf0, r10, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, [{0x8, 0x0, [0x81, 0x1, 0x14, 0x1f]}, {0xb, 0x0, [0x10, 0x11, 0xc, 0x1e, 0x8, 0x8, 0xb]}, {0xe, 0x0, [0x10, 0x1c, 0x1b, 0x19, 0xd, 0x10, 0x1b, 0xd, 0x10, 0x3]}, {0xc, 0x0, [0x13, 0xb, 0xc, 0x18, 0x19, 0x16, 0xe, 0x20]}]}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x1a}}, @NL80211_ATTR_SCAN_SSIDS={0xc, 0x2d, [{0x5, 0x0, [0x9]}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x70, 0x7d, [@NL80211_BAND_6GHZ={0x6b, 0x3, "625421cce17327738c7e43bc8ea304928c0db3c094bd9137e30fa422cbf9d9b7cd2816192bbfd189e2e84f73f465de4d3f6e994990f554f2ffd3934fbbb1cf20569891ff58dc0f07882ffbcfd8b2f07082e9f2d5cce7a71780c312d69494db445dc5dd9e8d43c6"}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x42000}, 0x0) 09:05:42 executing program 5: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) [ 362.358948][T10854] RAX: ffffffffffffffda RBX: 00007f9f1a181c90 RCX: 000000000045af49 [ 362.367028][T10854] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 362.375428][T10854] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 362.383415][T10854] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f1a1826d4 [ 362.391406][T10854] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 09:05:42 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:42 executing program 3 (fault-call:1 fault-nth:7): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) [ 362.739766][T10874] FAULT_INJECTION: forcing a failure. [ 362.739766][T10874] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 362.753422][T10874] CPU: 1 PID: 10874 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 362.763580][T10874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 362.773938][T10874] Call Trace: [ 362.777391][T10874] dump_stack+0x197/0x210 [ 362.781746][T10874] should_fail.cold+0xa/0x10 [ 362.786476][T10874] ? setup_fault_attr+0x220/0x220 [ 362.791627][T10874] ? ___might_sleep+0x163/0x2c0 [ 362.796518][T10874] should_fail_alloc_page+0x50/0x60 [ 362.801823][T10874] __alloc_pages_nodemask+0x1a1/0x910 [ 362.807223][T10874] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 362.813400][T10874] ? __alloc_pages_slowpath+0x2900/0x2900 [ 362.819221][T10874] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 362.825337][T10874] ? __kmalloc+0x608/0x770 [ 362.829778][T10874] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 362.836045][T10874] alloc_pages_current+0x107/0x210 [ 362.841506][T10874] watch_queue_ioctl+0x6db/0x16e0 [ 362.846561][T10874] ? watch_queue_map_pages+0x620/0x620 [ 362.852234][T10874] ? tomoyo_file_ioctl+0x23/0x30 [ 362.857196][T10874] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 362.863628][T10874] ? security_file_ioctl+0x8d/0xc0 [ 362.868764][T10874] ? watch_queue_map_pages+0x620/0x620 [ 362.874685][T10874] ksys_ioctl+0x123/0x180 [ 362.879049][T10874] __x64_sys_ioctl+0x73/0xb0 [ 362.883986][T10874] do_syscall_64+0xfa/0x790 [ 362.888690][T10874] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 362.894592][T10874] RIP: 0033:0x45af49 [ 362.898617][T10874] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 362.918403][T10874] RSP: 002b:00007f9f1a181c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.927061][T10874] RAX: ffffffffffffffda RBX: 00007f9f1a181c90 RCX: 000000000045af49 [ 362.935384][T10874] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 362.943368][T10874] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 362.951755][T10874] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f1a1826d4 [ 362.959825][T10874] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 09:05:43 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:43 executing program 0 (fault-call:1 fault-nth:2): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:43 executing program 5: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) 09:05:43 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:43 executing program 3 (fault-call:1 fault-nth:8): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:43 executing program 2: bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000003c0)={0x1, 0x9, 0x4, 0xe000, 0x2, {0x77359400}, {0x5, 0xc, 0x9, 0x3, 0x20, 0x0, "80f2ce1e"}, 0x4, 0x4, @planes=&(0x7f0000000340)={0x3f, 0x5, @mem_offset=0x9, 0x72d}, 0x298b2575, 0x0, r0}) bind$alg(r1, &(0x7f0000000440)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000500)='/dev/bsg\x00', 0x2800, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f0000000680)={0x7, 0x21, 0x1}, 0x7) r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x7fff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x0) socket(0x10, 0x803, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x2000, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x40000) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r9, 0xc0845658, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00') sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000580)={0xf0, r10, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}, @NL80211_ATTR_SCAN_SSIDS={0x34, 0x2d, [{0x8, 0x0, [0x81, 0x1, 0x14, 0x1f]}, {0xb, 0x0, [0x10, 0x11, 0xc, 0x1e, 0x8, 0x8, 0xb]}, {0xe, 0x0, [0x10, 0x1c, 0x1b, 0x19, 0xd, 0x10, 0x1b, 0xd, 0x10, 0x3]}, {0xc, 0x0, [0x13, 0xb, 0xc, 0x18, 0x19, 0x16, 0xe, 0x20]}]}, @NL80211_ATTR_MAC={0xa, 0x6, @dev={[], 0x1a}}, @NL80211_ATTR_SCAN_SSIDS={0xc, 0x2d, [{0x5, 0x0, [0x9]}]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x70, 0x7d, [@NL80211_BAND_6GHZ={0x6b, 0x3, "625421cce17327738c7e43bc8ea304928c0db3c094bd9137e30fa422cbf9d9b7cd2816192bbfd189e2e84f73f465de4d3f6e994990f554f2ffd3934fbbb1cf20569891ff58dc0f07882ffbcfd8b2f07082e9f2d5cce7a71780c312d69494db445dc5dd9e8d43c6"}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x42000}, 0x0) [ 363.267885][T10893] FAULT_INJECTION: forcing a failure. [ 363.267885][T10893] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 363.310440][T10894] FAULT_INJECTION: forcing a failure. [ 363.310440][T10894] name failslab, interval 1, probability 0, space 0, times 0 [ 363.334796][T10893] CPU: 0 PID: 10893 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 363.344731][T10893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.354823][T10893] Call Trace: [ 363.358140][T10893] dump_stack+0x197/0x210 [ 363.362492][T10893] should_fail.cold+0xa/0x10 [ 363.367187][T10893] ? setup_fault_attr+0x220/0x220 [ 363.372230][T10893] ? ___might_sleep+0x163/0x2c0 [ 363.377318][T10893] should_fail_alloc_page+0x50/0x60 [ 363.382640][T10893] __alloc_pages_nodemask+0x1a1/0x910 [ 363.388047][T10893] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 363.394212][T10893] ? __alloc_pages_slowpath+0x2900/0x2900 [ 363.399933][T10893] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 363.405925][T10893] ? __kmalloc+0x608/0x770 [ 363.410380][T10893] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 363.416723][T10893] alloc_pages_current+0x107/0x210 [ 363.421854][T10893] watch_queue_ioctl+0x6db/0x16e0 [ 363.426889][T10893] ? watch_queue_map_pages+0x620/0x620 [ 363.432370][T10893] ? tomoyo_file_ioctl+0x23/0x30 [ 363.437321][T10893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.444164][T10893] ? security_file_ioctl+0x8d/0xc0 [ 363.449304][T10893] ? watch_queue_map_pages+0x620/0x620 [ 363.454781][T10893] ksys_ioctl+0x123/0x180 [ 363.459269][T10893] __x64_sys_ioctl+0x73/0xb0 [ 363.464022][T10893] do_syscall_64+0xfa/0x790 [ 363.468554][T10893] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.474468][T10893] RIP: 0033:0x45af49 [ 363.478371][T10893] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.498050][T10893] RSP: 002b:00007f9f1a181c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 09:05:43 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0xf000) [ 363.506550][T10893] RAX: ffffffffffffffda RBX: 00007f9f1a181c90 RCX: 000000000045af49 [ 363.514519][T10893] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 363.522639][T10893] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 363.530886][T10893] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f1a1826d4 [ 363.539041][T10893] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 [ 363.558820][T10894] CPU: 1 PID: 10894 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 363.568741][T10894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 363.578893][T10894] Call Trace: [ 363.582207][T10894] dump_stack+0x197/0x210 [ 363.586562][T10894] should_fail.cold+0xa/0x10 [ 363.591176][T10894] ? setup_fault_attr+0x220/0x220 [ 363.596223][T10894] ? ___might_sleep+0x163/0x2c0 [ 363.601106][T10894] __should_failslab+0x121/0x190 [ 363.606070][T10894] should_failslab+0x9/0x14 09:05:43 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:43 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) [ 363.610779][T10894] __kmalloc+0x2e0/0x770 [ 363.615042][T10894] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 363.621626][T10894] ? d_absolute_path+0x11b/0x170 [ 363.626594][T10894] ? __d_path+0x140/0x140 [ 363.630932][T10894] ? tomoyo_encode2.part.0+0xf5/0x400 [ 363.636439][T10894] tomoyo_encode2.part.0+0xf5/0x400 [ 363.641887][T10894] tomoyo_encode+0x2b/0x50 [ 363.646310][T10894] tomoyo_realpath_from_path+0x19c/0x660 [ 363.651985][T10894] tomoyo_path_number_perm+0x1dd/0x520 [ 363.657438][T10894] ? tomoyo_path_number_perm+0x193/0x520 [ 363.663063][T10894] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 363.668858][T10894] ? __f_unlock_pos+0x19/0x20 [ 363.673593][T10894] ? __fget+0x37f/0x550 [ 363.677745][T10894] ? do_dup2+0x4f0/0x4f0 [ 363.681981][T10894] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 363.688268][T10894] ? fput_many+0x12c/0x1a0 [ 363.692682][T10894] tomoyo_file_ioctl+0x23/0x30 [ 363.697441][T10894] security_file_ioctl+0x77/0xc0 [ 363.702371][T10894] ksys_ioctl+0x56/0x180 [ 363.706612][T10894] __x64_sys_ioctl+0x73/0xb0 [ 363.711200][T10894] do_syscall_64+0xfa/0x790 [ 363.715712][T10894] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 363.721652][T10894] RIP: 0033:0x45af49 [ 363.725538][T10894] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 363.745135][T10894] RSP: 002b:00007f606590dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.753632][T10894] RAX: ffffffffffffffda RBX: 00007f606590dc90 RCX: 000000000045af49 [ 363.761642][T10894] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 363.769718][T10894] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 363.777681][T10894] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f606590e6d4 [ 363.785644][T10894] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 [ 363.807023][T10894] ERROR: Out of memory at tomoyo_realpath_from_path. 09:05:43 executing program 3 (fault-call:1 fault-nth:9): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:43 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:43 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:44 executing program 0 (fault-call:1 fault-nth:3): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) [ 364.127825][T10916] FAULT_INJECTION: forcing a failure. [ 364.127825][T10916] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:05:44 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0xf000) [ 364.249943][T10916] CPU: 0 PID: 10916 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 364.259897][T10916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.269965][T10916] Call Trace: [ 364.273276][T10916] dump_stack+0x197/0x210 [ 364.277622][T10916] should_fail.cold+0xa/0x10 [ 364.282228][T10916] ? setup_fault_attr+0x220/0x220 [ 364.287443][T10916] ? ___might_sleep+0x163/0x2c0 [ 364.292318][T10916] should_fail_alloc_page+0x50/0x60 [ 364.297528][T10916] __alloc_pages_nodemask+0x1a1/0x910 [ 364.302916][T10916] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 364.309088][T10916] ? __alloc_pages_slowpath+0x2900/0x2900 [ 364.314838][T10916] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 364.320849][T10916] ? __kmalloc+0x608/0x770 [ 364.325294][T10916] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 364.331564][T10916] alloc_pages_current+0x107/0x210 [ 364.336702][T10916] watch_queue_ioctl+0x6db/0x16e0 [ 364.341766][T10916] ? watch_queue_map_pages+0x620/0x620 [ 364.347249][T10916] ? tomoyo_file_ioctl+0x23/0x30 [ 364.352293][T10916] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.358547][T10916] ? security_file_ioctl+0x8d/0xc0 [ 364.363678][T10916] ? watch_queue_map_pages+0x620/0x620 [ 364.369165][T10916] ksys_ioctl+0x123/0x180 [ 364.373516][T10916] __x64_sys_ioctl+0x73/0xb0 [ 364.378126][T10916] do_syscall_64+0xfa/0x790 [ 364.382650][T10916] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.388641][T10916] RIP: 0033:0x45af49 [ 364.392550][T10916] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 364.412168][T10916] RSP: 002b:00007f9f1a181c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.420736][T10916] RAX: ffffffffffffffda RBX: 00007f9f1a181c90 RCX: 000000000045af49 [ 364.428828][T10916] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 364.436905][T10916] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 09:05:44 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) [ 364.445336][T10916] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f1a1826d4 [ 364.453322][T10916] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 [ 364.508622][T10929] FAULT_INJECTION: forcing a failure. [ 364.508622][T10929] name failslab, interval 1, probability 0, space 0, times 0 [ 364.575889][T10929] CPU: 0 PID: 10929 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 364.585918][T10929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.596097][T10929] Call Trace: [ 364.599411][T10929] dump_stack+0x197/0x210 [ 364.603919][T10929] should_fail.cold+0xa/0x10 [ 364.608530][T10929] ? setup_fault_attr+0x220/0x220 [ 364.613572][T10929] ? ___might_sleep+0x163/0x2c0 [ 364.618447][T10929] __should_failslab+0x121/0x190 [ 364.623410][T10929] should_failslab+0x9/0x14 [ 364.628007][T10929] __kmalloc+0x2e0/0x770 [ 364.632307][T10929] ? down_write_killable_nested+0x170/0x170 [ 364.638232][T10929] ? watch_queue_ioctl+0x5f5/0x16e0 [ 364.643537][T10929] watch_queue_ioctl+0x5f5/0x16e0 [ 364.648620][T10929] ? watch_queue_map_pages+0x620/0x620 [ 364.654105][T10929] ? tomoyo_file_ioctl+0x23/0x30 [ 364.659066][T10929] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.665322][T10929] ? security_file_ioctl+0x8d/0xc0 [ 364.670449][T10929] ? watch_queue_map_pages+0x620/0x620 [ 364.675921][T10929] ksys_ioctl+0x123/0x180 [ 364.680275][T10929] __x64_sys_ioctl+0x73/0xb0 [ 364.684896][T10929] do_syscall_64+0xfa/0x790 [ 364.689412][T10929] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.695564][T10929] RIP: 0033:0x45af49 [ 364.699575][T10929] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:05:44 executing program 3 (fault-call:1 fault-nth:10): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:44 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) [ 364.719489][T10929] RSP: 002b:00007f606590dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.727952][T10929] RAX: ffffffffffffffda RBX: 00007f606590dc90 RCX: 000000000045af49 [ 364.735943][T10929] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 364.744720][T10929] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 364.752792][T10929] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f606590e6d4 [ 364.760878][T10929] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 [ 364.832830][T10936] FAULT_INJECTION: forcing a failure. [ 364.832830][T10936] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 364.864698][T10936] CPU: 1 PID: 10936 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 364.874633][T10936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.884846][T10936] Call Trace: [ 364.888165][T10936] dump_stack+0x197/0x210 [ 364.892523][T10936] should_fail.cold+0xa/0x10 [ 364.897147][T10936] ? setup_fault_attr+0x220/0x220 [ 364.902288][T10936] ? ___might_sleep+0x163/0x2c0 [ 364.907175][T10936] should_fail_alloc_page+0x50/0x60 [ 364.912529][T10936] __alloc_pages_nodemask+0x1a1/0x910 [ 364.917927][T10936] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 364.924120][T10936] ? __alloc_pages_slowpath+0x2900/0x2900 [ 364.929955][T10936] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 364.936154][T10936] ? __kmalloc+0x608/0x770 [ 364.940690][T10936] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 364.947149][T10936] alloc_pages_current+0x107/0x210 [ 364.952295][T10936] watch_queue_ioctl+0x6db/0x16e0 [ 364.957350][T10936] ? watch_queue_map_pages+0x620/0x620 [ 364.962936][T10936] ? tomoyo_file_ioctl+0x23/0x30 [ 364.967897][T10936] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.974159][T10936] ? security_file_ioctl+0x8d/0xc0 [ 364.979296][T10936] ? watch_queue_map_pages+0x620/0x620 [ 364.984829][T10936] ksys_ioctl+0x123/0x180 [ 364.989276][T10936] __x64_sys_ioctl+0x73/0xb0 [ 364.993991][T10936] do_syscall_64+0xfa/0x790 [ 364.998522][T10936] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.004531][T10936] RIP: 0033:0x45af49 [ 365.008450][T10936] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 365.028240][T10936] RSP: 002b:00007f9f1a181c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.036697][T10936] RAX: ffffffffffffffda RBX: 00007f9f1a181c90 RCX: 000000000045af49 [ 365.044687][T10936] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 365.052707][T10936] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 365.060790][T10936] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f1a1826d4 [ 365.069064][T10936] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 09:05:45 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:45 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0xf000) 09:05:45 executing program 4: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) 09:05:45 executing program 0 (fault-call:1 fault-nth:4): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:45 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:45 executing program 3 (fault-call:1 fault-nth:11): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:45 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0xf000) [ 365.201103][T10952] FAULT_INJECTION: forcing a failure. [ 365.201103][T10952] name failslab, interval 1, probability 0, space 0, times 0 [ 365.222800][T10952] CPU: 1 PID: 10952 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 365.233096][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.243537][T10952] Call Trace: [ 365.246858][T10952] dump_stack+0x197/0x210 [ 365.251536][T10952] should_fail.cold+0xa/0x10 [ 365.256138][T10952] ? setup_fault_attr+0x220/0x220 [ 365.261188][T10952] ? ___might_sleep+0x163/0x2c0 [ 365.266172][T10952] __should_failslab+0x121/0x190 [ 365.271115][T10952] should_failslab+0x9/0x14 [ 365.275845][T10952] kmem_cache_alloc_node_trace+0x274/0x750 [ 365.281815][T10952] __get_vm_area_node+0x12f/0x3b0 [ 365.286845][T10952] vmap+0xb6/0x170 [ 365.290705][T10952] ? watch_queue_ioctl+0x919/0x16e0 [ 365.296128][T10952] watch_queue_ioctl+0x919/0x16e0 [ 365.301336][T10952] ? watch_queue_map_pages+0x620/0x620 [ 365.306804][T10952] ? tomoyo_file_ioctl+0x23/0x30 [ 365.311759][T10952] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.318035][T10952] ? security_file_ioctl+0x8d/0xc0 [ 365.323535][T10952] ? watch_queue_map_pages+0x620/0x620 [ 365.329128][T10952] ksys_ioctl+0x123/0x180 [ 365.333972][T10952] __x64_sys_ioctl+0x73/0xb0 [ 365.339477][T10952] do_syscall_64+0xfa/0x790 [ 365.344153][T10952] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.350214][T10952] RIP: 0033:0x45af49 [ 365.354193][T10952] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 365.374773][T10952] RSP: 002b:00007f9f1a181c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.383526][T10952] RAX: ffffffffffffffda RBX: 00007f9f1a181c90 RCX: 000000000045af49 [ 365.391850][T10952] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 365.399957][T10952] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 365.408106][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f1a1826d4 [ 365.416088][T10952] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 [ 365.457491][T10954] FAULT_INJECTION: forcing a failure. [ 365.457491][T10954] name fail_page_alloc, interval 1, probability 0, space 0, times 0 09:05:45 executing program 4: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) 09:05:45 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0xf000) [ 365.548479][T10954] CPU: 1 PID: 10954 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 365.558421][T10954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.568654][T10954] Call Trace: [ 365.571987][T10954] dump_stack+0x197/0x210 [ 365.576353][T10954] should_fail.cold+0xa/0x10 [ 365.581111][T10954] ? setup_fault_attr+0x220/0x220 [ 365.586165][T10954] ? ___might_sleep+0x163/0x2c0 [ 365.591057][T10954] should_fail_alloc_page+0x50/0x60 09:05:45 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0xf000) [ 365.596379][T10954] __alloc_pages_nodemask+0x1a1/0x910 [ 365.601866][T10954] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 365.608137][T10954] ? __alloc_pages_slowpath+0x2900/0x2900 [ 365.614014][T10954] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 365.620029][T10954] ? __kmalloc+0x608/0x770 [ 365.624478][T10954] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 365.630759][T10954] alloc_pages_current+0x107/0x210 [ 365.636201][T10954] watch_queue_ioctl+0x6db/0x16e0 [ 365.641286][T10954] ? watch_queue_map_pages+0x620/0x620 09:05:45 executing program 3 (fault-call:1 fault-nth:12): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) [ 365.646804][T10954] ? tomoyo_file_ioctl+0x23/0x30 [ 365.651776][T10954] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.658045][T10954] ? security_file_ioctl+0x8d/0xc0 [ 365.663187][T10954] ? watch_queue_map_pages+0x620/0x620 [ 365.668674][T10954] ksys_ioctl+0x123/0x180 [ 365.673139][T10954] __x64_sys_ioctl+0x73/0xb0 [ 365.677758][T10954] do_syscall_64+0xfa/0x790 [ 365.682294][T10954] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.688205][T10954] RIP: 0033:0x45af49 [ 365.692128][T10954] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 365.711936][T10954] RSP: 002b:00007f606590dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 365.720380][T10954] RAX: ffffffffffffffda RBX: 00007f606590dc90 RCX: 000000000045af49 [ 365.728376][T10954] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 365.736373][T10954] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 09:05:45 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) [ 365.744654][T10954] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f606590e6d4 [ 365.752642][T10954] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 [ 365.812603][T10971] FAULT_INJECTION: forcing a failure. [ 365.812603][T10971] name failslab, interval 1, probability 0, space 0, times 0 [ 365.870423][T10971] CPU: 0 PID: 10971 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 365.880474][T10971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 365.890546][T10971] Call Trace: [ 365.893860][T10971] dump_stack+0x197/0x210 [ 365.898316][T10971] should_fail.cold+0xa/0x10 [ 365.902924][T10971] ? setup_fault_attr+0x220/0x220 [ 365.907968][T10971] ? ___might_sleep+0x163/0x2c0 [ 365.912836][T10971] __should_failslab+0x121/0x190 [ 365.917877][T10971] should_failslab+0x9/0x14 [ 365.922398][T10971] kmem_cache_alloc_node_trace+0x274/0x750 [ 365.928260][T10971] __get_vm_area_node+0x12f/0x3b0 [ 365.933285][T10971] vmap+0xb6/0x170 [ 365.937006][T10971] ? watch_queue_ioctl+0x919/0x16e0 [ 365.942213][T10971] watch_queue_ioctl+0x919/0x16e0 [ 365.947267][T10971] ? watch_queue_map_pages+0x620/0x620 [ 365.952743][T10971] ? tomoyo_file_ioctl+0x23/0x30 [ 365.957695][T10971] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 365.963931][T10971] ? security_file_ioctl+0x8d/0xc0 [ 365.969043][T10971] ? watch_queue_map_pages+0x620/0x620 [ 365.974513][T10971] ksys_ioctl+0x123/0x180 [ 365.978859][T10971] __x64_sys_ioctl+0x73/0xb0 [ 365.983463][T10971] do_syscall_64+0xfa/0x790 [ 365.987981][T10971] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 365.993881][T10971] RIP: 0033:0x45af49 [ 365.997784][T10971] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:05:46 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:46 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) fcntl$dupfd(r1, 0x0, r0) 09:05:46 executing program 0 (fault-call:1 fault-nth:5): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:46 executing program 4: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0xf000) [ 366.017569][T10971] RSP: 002b:00007f9f1a181c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.026112][T10971] RAX: ffffffffffffffda RBX: 00007f9f1a181c90 RCX: 000000000045af49 [ 366.034070][T10971] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 366.042110][T10971] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 366.050076][T10971] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f1a1826d4 [ 366.058051][T10971] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 09:05:46 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:46 executing program 3 (fault-call:1 fault-nth:13): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:46 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) fcntl$dupfd(r1, 0x0, r0) [ 366.203987][T10991] FAULT_INJECTION: forcing a failure. [ 366.203987][T10991] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 366.282394][T10991] CPU: 0 PID: 10991 Comm: syz-executor.0 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 366.292325][T10991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.302476][T10991] Call Trace: [ 366.305785][T10991] dump_stack+0x197/0x210 [ 366.310148][T10991] should_fail.cold+0xa/0x10 [ 366.314777][T10991] ? setup_fault_attr+0x220/0x220 [ 366.319816][T10991] ? ___might_sleep+0x163/0x2c0 [ 366.324699][T10991] should_fail_alloc_page+0x50/0x60 09:05:46 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) [ 366.329918][T10991] __alloc_pages_nodemask+0x1a1/0x910 [ 366.335306][T10991] ? rcu_lockdep_current_cpu_online+0xe3/0x130 [ 366.341480][T10991] ? __alloc_pages_slowpath+0x2900/0x2900 [ 366.347217][T10991] ? rcu_read_lock_any_held.part.0+0x50/0x50 [ 366.353331][T10991] ? __kmalloc+0x608/0x770 [ 366.357760][T10991] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 366.364018][T10991] alloc_pages_current+0x107/0x210 [ 366.369147][T10991] watch_queue_ioctl+0x6db/0x16e0 [ 366.374196][T10991] ? watch_queue_map_pages+0x620/0x620 [ 366.379672][T10991] ? tomoyo_file_ioctl+0x23/0x30 [ 366.384627][T10991] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.390871][T10991] ? security_file_ioctl+0x8d/0xc0 [ 366.395995][T10991] ? watch_queue_map_pages+0x620/0x620 [ 366.401470][T10991] ksys_ioctl+0x123/0x180 [ 366.405817][T10991] __x64_sys_ioctl+0x73/0xb0 [ 366.410424][T10991] do_syscall_64+0xfa/0x790 [ 366.414960][T10991] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.420859][T10991] RIP: 0033:0x45af49 [ 366.424768][T10991] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 366.444501][T10991] RSP: 002b:00007f606590dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.452923][T10991] RAX: ffffffffffffffda RBX: 00007f606590dc90 RCX: 000000000045af49 [ 366.460909][T10991] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 366.468901][T10991] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 09:05:46 executing program 0 (fault-call:1 fault-nth:6): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) [ 366.476888][T10991] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f606590e6d4 [ 366.485124][T10991] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 [ 366.503479][T10999] FAULT_INJECTION: forcing a failure. [ 366.503479][T10999] name failslab, interval 1, probability 0, space 0, times 0 09:05:46 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:46 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0xf000) [ 366.581725][T10999] CPU: 1 PID: 10999 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 366.591660][T10999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 366.601732][T10999] Call Trace: [ 366.605046][T10999] dump_stack+0x197/0x210 [ 366.609399][T10999] should_fail.cold+0xa/0x10 [ 366.614012][T10999] ? setup_fault_attr+0x220/0x220 [ 366.619056][T10999] ? ___might_sleep+0x163/0x2c0 [ 366.623910][T10999] __should_failslab+0x121/0x190 [ 366.628864][T10999] should_failslab+0x9/0x14 [ 366.633380][T10999] kmem_cache_alloc_node+0x268/0x740 [ 366.638676][T10999] ? ___might_sleep+0x163/0x2c0 [ 366.643556][T10999] alloc_vmap_area+0x147/0x2080 [ 366.648431][T10999] ? __get_vm_area_node+0x12f/0x3b0 [ 366.653643][T10999] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 366.659219][T10999] ? purge_vmap_area_lazy+0x40/0x40 [ 366.664435][T10999] __get_vm_area_node+0x17e/0x3b0 [ 366.669469][T10999] vmap+0xb6/0x170 [ 366.673199][T10999] ? watch_queue_ioctl+0x919/0x16e0 [ 366.678402][T10999] watch_queue_ioctl+0x919/0x16e0 [ 366.683447][T10999] ? watch_queue_map_pages+0x620/0x620 [ 366.688925][T10999] ? tomoyo_file_ioctl+0x23/0x30 [ 366.693880][T10999] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 366.700130][T10999] ? security_file_ioctl+0x8d/0xc0 [ 366.705252][T10999] ? watch_queue_map_pages+0x620/0x620 [ 366.710722][T10999] ksys_ioctl+0x123/0x180 [ 366.715074][T10999] __x64_sys_ioctl+0x73/0xb0 [ 366.719684][T10999] do_syscall_64+0xfa/0x790 [ 366.724296][T10999] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 366.730189][T10999] RIP: 0033:0x45af49 [ 366.734094][T10999] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 366.753704][T10999] RSP: 002b:00007f9f1a181c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 366.762125][T10999] RAX: ffffffffffffffda RBX: 00007f9f1a181c90 RCX: 000000000045af49 [ 366.770099][T10999] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 09:05:46 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) [ 366.778083][T10999] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 366.786057][T10999] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f1a1826d4 [ 366.794030][T10999] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 09:05:46 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:05:46 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:46 executing program 3 (fault-call:1 fault-nth:14): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:46 executing program 5 (fault-call:3 fault-nth:0): r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:46 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0xf000) 09:05:46 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x2, 0x8) [ 367.035620][T11033] FAULT_INJECTION: forcing a failure. [ 367.035620][T11033] name failslab, interval 1, probability 0, space 0, times 0 [ 367.039638][T11030] FAULT_INJECTION: forcing a failure. [ 367.039638][T11030] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 367.094821][T11033] CPU: 0 PID: 11033 Comm: syz-executor.5 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 367.105027][T11033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.115104][T11033] Call Trace: [ 367.118407][T11033] dump_stack+0x197/0x210 [ 367.122756][T11033] should_fail.cold+0xa/0x10 [ 367.127367][T11033] ? setup_fault_attr+0x220/0x220 [ 367.132404][T11033] ? ___might_sleep+0x163/0x2c0 [ 367.137259][T11033] __should_failslab+0x121/0x190 [ 367.142188][T11033] should_failslab+0x9/0x14 [ 367.146803][T11033] kmem_cache_alloc+0x2aa/0x710 [ 367.151666][T11033] ? __kasan_check_read+0x11/0x20 [ 367.156756][T11033] vm_area_dup+0x21/0x170 [ 367.161077][T11033] __split_vma+0xab/0x560 [ 367.165395][T11033] ? find_vma+0x30/0x170 [ 367.169623][T11033] __do_munmap+0x396/0x10f0 [ 367.174111][T11033] ? __kasan_check_read+0x11/0x20 [ 367.179192][T11033] ? arch_get_unmapped_area_topdown+0xfa/0x590 [ 367.185348][T11033] mmap_region+0x227/0x1760 [ 367.189842][T11033] ? __x64_sys_brk+0x760/0x760 [ 367.194627][T11033] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.200881][T11033] ? get_unmapped_area+0x2ad/0x3d0 [ 367.205983][T11033] do_mmap+0x837/0x1150 [ 367.210215][T11033] vm_mmap_pgoff+0x1c5/0x230 [ 367.214840][T11033] ? randomize_stack_top+0x110/0x110 [ 367.220134][T11033] ? do_dup2+0x4f0/0x4f0 [ 367.224366][T11033] ksys_mmap_pgoff+0x4aa/0x630 [ 367.229125][T11033] ? find_mergeable_anon_vma+0x2d0/0x2d0 [ 367.234755][T11033] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 367.240208][T11033] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 367.245749][T11033] ? do_syscall_64+0x26/0x790 [ 367.250416][T11033] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.256569][T11033] __x64_sys_mmap+0xe9/0x1b0 [ 367.261153][T11033] do_syscall_64+0xfa/0x790 [ 367.265649][T11033] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.271547][T11033] RIP: 0033:0x45af49 [ 367.275438][T11033] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 367.295034][T11033] RSP: 002b:00007f3a2905ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 367.303554][T11033] RAX: ffffffffffffffda RBX: 00007f3a2905ac90 RCX: 000000000045af49 [ 367.311520][T11033] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 367.319484][T11033] RBP: 000000000075bf20 R08: 0000000000000005 R09: 000000000000f000 [ 367.327509][T11033] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f3a2905b6d4 [ 367.335474][T11033] R13: 00000000004c843f R14: 00000000004e0620 R15: 0000000000000006 [ 367.343459][T11030] CPU: 1 PID: 11030 Comm: syz-executor.3 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 367.353356][T11030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.363423][T11030] Call Trace: [ 367.366727][T11030] dump_stack+0x197/0x210 [ 367.371074][T11030] should_fail.cold+0xa/0x10 [ 367.375672][T11030] ? setup_fault_attr+0x220/0x220 [ 367.381225][T11030] ? ___might_sleep+0x163/0x2c0 [ 367.386100][T11030] should_fail_alloc_page+0x50/0x60 [ 367.391308][T11030] __alloc_pages_nodemask+0x1a1/0x910 [ 367.396692][T11030] ? watch_queue_ioctl+0x919/0x16e0 [ 367.401895][T11030] ? ksys_ioctl+0x123/0x180 [ 367.406399][T11030] ? __x64_sys_ioctl+0x73/0xb0 [ 367.411169][T11030] ? do_syscall_64+0xfa/0x790 [ 367.415861][T11030] ? __alloc_pages_slowpath+0x2900/0x2900 [ 367.421588][T11030] ? __kasan_check_read+0x11/0x20 [ 367.426738][T11030] ? mark_lock+0xc2/0x1220 [ 367.431167][T11030] ? bad_range+0xea/0x420 [ 367.435505][T11030] ? get_page_from_freelist+0x1719/0x42e0 09:05:47 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x10, 0x8) 09:05:47 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x127b, 0x8) 09:05:47 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x2405, 0x8) [ 367.441239][T11030] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 367.447492][T11030] alloc_pages_current+0x107/0x210 [ 367.452619][T11030] __get_free_pages+0xc/0x40 [ 367.457220][T11030] kasan_populate_vmalloc_pte+0x2f/0x1c0 [ 367.462872][T11030] __apply_to_page_range+0x6a1/0xab0 [ 367.468179][T11030] ? memset+0x40/0x40 [ 367.472173][T11030] ? memset+0x40/0x40 [ 367.476162][T11030] apply_to_page_range+0x3b/0x50 [ 367.481114][T11030] kasan_populate_vmalloc+0x66/0x70 [ 367.486328][T11030] alloc_vmap_area+0xc26/0x2080 [ 367.491209][T11030] ? purge_vmap_area_lazy+0x40/0x40 09:05:47 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x4c01, 0x8) [ 367.496430][T11030] __get_vm_area_node+0x17e/0x3b0 [ 367.501475][T11030] vmap+0xb6/0x170 [ 367.505207][T11030] ? watch_queue_ioctl+0x919/0x16e0 [ 367.510420][T11030] watch_queue_ioctl+0x919/0x16e0 [ 367.515465][T11030] ? watch_queue_map_pages+0x620/0x620 [ 367.520937][T11030] ? tomoyo_file_ioctl+0x23/0x30 [ 367.525885][T11030] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.532134][T11030] ? security_file_ioctl+0x8d/0xc0 [ 367.537252][T11030] ? watch_queue_map_pages+0x620/0x620 [ 367.542723][T11030] ksys_ioctl+0x123/0x180 [ 367.547071][T11030] __x64_sys_ioctl+0x73/0xb0 [ 367.551676][T11030] do_syscall_64+0xfa/0x790 [ 367.556196][T11030] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.562094][T11030] RIP: 0033:0x45af49 [ 367.566001][T11030] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 367.585614][T11030] RSP: 002b:00007f9f1a181c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 09:05:47 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x4c80, 0x8) 09:05:47 executing program 5 (fault-call:3 fault-nth:1): r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) [ 367.594036][T11030] RAX: ffffffffffffffda RBX: 00007f9f1a181c90 RCX: 000000000045af49 [ 367.602032][T11030] RDX: 0000000000000008 RSI: 0000000000005760 RDI: 0000000000000003 [ 367.610022][T11030] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 367.618008][T11030] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9f1a1826d4 [ 367.625985][T11030] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000004 09:05:47 executing program 1: socket$l2tp(0x18, 0x1, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x0) 09:05:47 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:47 executing program 3 (fault-call:1 fault-nth:15): r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:47 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0xf000) [ 367.711865][T11053] FAULT_INJECTION: forcing a failure. [ 367.711865][T11053] name failslab, interval 1, probability 0, space 0, times 0 [ 367.807188][T11053] CPU: 0 PID: 11053 Comm: syz-executor.5 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 367.817126][T11053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.827193][T11053] Call Trace: [ 367.830504][T11053] dump_stack+0x197/0x210 [ 367.834855][T11053] should_fail.cold+0xa/0x10 [ 367.839467][T11053] ? setup_fault_attr+0x220/0x220 [ 367.844525][T11053] __should_failslab+0x121/0x190 [ 367.849486][T11053] should_failslab+0x9/0x14 [ 367.854009][T11053] kmem_cache_alloc+0x47/0x710 [ 367.858797][T11053] anon_vma_clone+0x111/0x5f0 [ 367.863504][T11053] __split_vma+0x17e/0x560 [ 367.867929][T11053] ? find_vma+0x30/0x170 [ 367.872183][T11053] __do_munmap+0x396/0x10f0 [ 367.876704][T11053] ? __kasan_check_read+0x11/0x20 [ 367.881742][T11053] ? arch_get_unmapped_area_topdown+0xfa/0x590 [ 367.887913][T11053] mmap_region+0x227/0x1760 [ 367.892525][T11053] ? __x64_sys_brk+0x760/0x760 [ 367.897303][T11053] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.903551][T11053] ? get_unmapped_area+0x2ad/0x3d0 [ 367.908682][T11053] do_mmap+0x837/0x1150 [ 367.912858][T11053] vm_mmap_pgoff+0x1c5/0x230 [ 367.917471][T11053] ? randomize_stack_top+0x110/0x110 [ 367.922766][T11053] ? do_dup2+0x4f0/0x4f0 [ 367.927032][T11053] ksys_mmap_pgoff+0x4aa/0x630 [ 367.931813][T11053] ? find_mergeable_anon_vma+0x2d0/0x2d0 [ 367.937470][T11053] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 367.942940][T11053] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 367.948413][T11053] ? do_syscall_64+0x26/0x790 [ 367.953113][T11053] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.959199][T11053] __x64_sys_mmap+0xe9/0x1b0 [ 367.963806][T11053] do_syscall_64+0xfa/0x790 [ 367.968321][T11053] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.974305][T11053] RIP: 0033:0x45af49 [ 367.978210][T11053] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 367.997818][T11053] RSP: 002b:00007f3a2905ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 09:05:47 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0xf000) 09:05:47 executing program 2: syz_open_dev$swradio(0x0, 0x1, 0x2) syz_open_dev$swradio(0x0, 0x1, 0x2) socket$inet6(0xa, 0x1, 0x84) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x80, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r2, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x24000000) 09:05:47 executing program 1: socket$l2tp(0x18, 0x1, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x0) 09:05:48 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x4c81, 0x8) [ 368.006239][T11053] RAX: ffffffffffffffda RBX: 00007f3a2905ac90 RCX: 000000000045af49 [ 368.014217][T11053] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 368.022199][T11053] RBP: 000000000075bf20 R08: 0000000000000005 R09: 000000000000f000 [ 368.030176][T11053] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f3a2905b6d4 [ 368.038156][T11053] R13: 00000000004c843f R14: 00000000004e0620 R15: 0000000000000006 09:05:48 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:48 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0xf000) 09:05:48 executing program 1: socket$l2tp(0x18, 0x1, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x0) 09:05:48 executing program 5 (fault-call:3 fault-nth:2): r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:48 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x2, 0x8) 09:05:48 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0xf000) 09:05:48 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x4c82, 0x8) [ 368.404962][T11091] FAULT_INJECTION: forcing a failure. [ 368.404962][T11091] name failslab, interval 1, probability 0, space 0, times 0 [ 368.477271][T11091] CPU: 1 PID: 11091 Comm: syz-executor.5 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 368.487204][T11091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 368.497269][T11091] Call Trace: [ 368.500574][T11091] dump_stack+0x197/0x210 [ 368.504925][T11091] should_fail.cold+0xa/0x10 [ 368.509529][T11091] ? setup_fault_attr+0x220/0x220 [ 368.514567][T11091] ? ___might_sleep+0x163/0x2c0 [ 368.519432][T11091] __should_failslab+0x121/0x190 [ 368.524388][T11091] should_failslab+0x9/0x14 [ 368.528903][T11091] kmem_cache_alloc+0x2aa/0x710 [ 368.533772][T11091] vm_area_dup+0x21/0x170 [ 368.538379][T11091] __split_vma+0xab/0x560 [ 368.542724][T11091] ? find_vma+0x30/0x170 [ 368.546981][T11091] __do_munmap+0x40f/0x10f0 [ 368.551513][T11091] ? __kasan_check_read+0x11/0x20 [ 368.556561][T11091] ? arch_get_unmapped_area_topdown+0xfa/0x590 [ 368.562727][T11091] mmap_region+0x227/0x1760 [ 368.567244][T11091] ? __x64_sys_brk+0x760/0x760 [ 368.572014][T11091] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 368.578256][T11091] ? get_unmapped_area+0x2ad/0x3d0 [ 368.583379][T11091] do_mmap+0x837/0x1150 [ 368.587553][T11091] vm_mmap_pgoff+0x1c5/0x230 [ 368.592157][T11091] ? randomize_stack_top+0x110/0x110 [ 368.597445][T11091] ? do_dup2+0x4f0/0x4f0 [ 368.601735][T11091] ksys_mmap_pgoff+0x4aa/0x630 [ 368.606515][T11091] ? find_mergeable_anon_vma+0x2d0/0x2d0 [ 368.612255][T11091] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 368.617730][T11091] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 368.623225][T11091] ? do_syscall_64+0x26/0x790 [ 368.627914][T11091] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.633999][T11091] __x64_sys_mmap+0xe9/0x1b0 [ 368.638611][T11091] do_syscall_64+0xfa/0x790 [ 368.643126][T11091] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 368.649040][T11091] RIP: 0033:0x45af49 [ 368.652943][T11091] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:05:48 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5206, 0x8) [ 368.672576][T11091] RSP: 002b:00007f3a2905ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 368.681434][T11091] RAX: ffffffffffffffda RBX: 00007f3a2905ac90 RCX: 000000000045af49 [ 368.689409][T11091] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 368.697388][T11091] RBP: 000000000075bf20 R08: 0000000000000005 R09: 000000000000f000 [ 368.705363][T11091] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f3a2905b6d4 [ 368.713335][T11091] R13: 00000000004c843f R14: 00000000004e0620 R15: 0000000000000006 09:05:48 executing program 1: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:05:48 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000001300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006a80)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/173, 0xad}, {&(0x7f00000000c0)=""/94, 0x5e}, {&(0x7f0000000540)=""/139, 0x8b}, {&(0x7f0000000300)=""/99, 0x63}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/8, 0x8}], 0x6, &(0x7f0000000840)=""/55, 0x37}, 0xea}, {{&(0x7f0000000880)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000900)=""/188, 0xbc}, {&(0x7f00000009c0)=""/255, 0xff}, {&(0x7f0000000ac0)=""/249, 0xf9}], 0x3}, 0x7728}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000000ec0)=""/243, 0xf3}, {0x0}, {&(0x7f0000001040)=""/25, 0x19}, {0x0}, {&(0x7f0000001180)=""/153, 0x99}, {0x0}, {&(0x7f0000004380)=""/4096, 0x1000}], 0x7, &(0x7f0000001280)}}, {{&(0x7f0000005540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}}}, 0x80, &(0x7f00000012c0)=[{&(0x7f00000055c0)=""/240, 0xf0}], 0x1}}, {{&(0x7f0000005f00)=@alg, 0x80, &(0x7f0000006340)=[{&(0x7f0000006080)=""/159, 0x9f}, {&(0x7f0000006140)=""/87, 0x57}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f00000069c0)=[{0x0}, {&(0x7f0000006580)=""/216, 0xd8}, {0x0}, {&(0x7f0000006740)=""/205, 0xcd}, {&(0x7f0000006840)=""/154, 0x9a}, {0x0}], 0x6, &(0x7f0000006a40)=""/22, 0x16}, 0xff}], 0x6, 0x40000201, &(0x7f0000006cc0)={0x0, 0x989680}) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x4, &(0x7f0000000200), &(0x7f0000000180)=0x4) socket$alg(0x26, 0x5, 0x0) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000140)={0x10001, 0x5}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dlm-monitor\x00', 0x105000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000400)=0xc88, 0x4) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) 09:05:48 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x10, 0x8) 09:05:48 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x541d, 0x8) 09:05:48 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:48 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x4c00, 0x8) 09:05:48 executing program 1: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:05:49 executing program 5 (fault-call:3 fault-nth:3): r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:49 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5421, 0x8) 09:05:49 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:49 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x4c01, 0x8) [ 369.183501][T11127] FAULT_INJECTION: forcing a failure. [ 369.183501][T11127] name failslab, interval 1, probability 0, space 0, times 0 09:05:49 executing program 1: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:05:49 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5450, 0x8) [ 369.540260][T11127] CPU: 0 PID: 11127 Comm: syz-executor.5 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 369.551057][T11127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 369.561118][T11127] Call Trace: [ 369.564440][T11127] dump_stack+0x197/0x210 [ 369.568791][T11127] should_fail.cold+0xa/0x10 [ 369.573402][T11127] ? setup_fault_attr+0x220/0x220 [ 369.578453][T11127] __should_failslab+0x121/0x190 [ 369.583410][T11127] should_failslab+0x9/0x14 [ 369.587923][T11127] kmem_cache_alloc+0x47/0x710 [ 369.592702][T11127] anon_vma_clone+0x111/0x5f0 [ 369.597398][T11127] __split_vma+0x17e/0x560 [ 369.601826][T11127] ? find_vma+0x30/0x170 [ 369.606075][T11127] __do_munmap+0x40f/0x10f0 [ 369.610595][T11127] ? __kasan_check_read+0x11/0x20 [ 369.615633][T11127] ? arch_get_unmapped_area_topdown+0xfa/0x590 [ 369.621800][T11127] mmap_region+0x227/0x1760 [ 369.627277][T11127] ? __x64_sys_brk+0x760/0x760 [ 369.632053][T11127] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 369.638308][T11127] ? get_unmapped_area+0x2ad/0x3d0 [ 369.643430][T11127] do_mmap+0x837/0x1150 [ 369.647610][T11127] vm_mmap_pgoff+0x1c5/0x230 [ 369.652216][T11127] ? randomize_stack_top+0x110/0x110 [ 369.657508][T11127] ? do_dup2+0x4f0/0x4f0 [ 369.661773][T11127] ksys_mmap_pgoff+0x4aa/0x630 [ 369.666549][T11127] ? find_mergeable_anon_vma+0x2d0/0x2d0 [ 369.672194][T11127] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 369.677664][T11127] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 369.683148][T11127] ? do_syscall_64+0x26/0x790 [ 369.687850][T11127] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 369.693943][T11127] __x64_sys_mmap+0xe9/0x1b0 [ 369.698546][T11127] do_syscall_64+0xfa/0x790 [ 369.703049][T11127] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 369.709115][T11127] RIP: 0033:0x45af49 [ 369.713015][T11127] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 369.732625][T11127] RSP: 002b:00007f3a2905ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 369.741046][T11127] RAX: ffffffffffffffda RBX: 00007f3a2905ac90 RCX: 000000000045af49 [ 369.749025][T11127] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 369.757000][T11127] RBP: 000000000075bf20 R08: 0000000000000005 R09: 000000000000f000 [ 369.765665][T11127] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f3a2905b6d4 [ 369.773653][T11127] R13: 00000000004c843f R14: 00000000004e0620 R15: 0000000000000006 09:05:49 executing program 2 (fault-call:4 fault-nth:0): r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:49 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:49 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5451, 0x8) 09:05:49 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5421, 0x8) 09:05:49 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:05:49 executing program 5 (fault-call:3 fault-nth:4): r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) [ 369.865657][ T28] audit: type=1800 audit(1578819949.813:57): pid=11120 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16779 res=0 09:05:49 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5452, 0x8) 09:05:49 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) [ 369.971480][T11160] FAULT_INJECTION: forcing a failure. [ 369.971480][T11160] name failslab, interval 1, probability 0, space 0, times 0 09:05:50 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:05:50 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5450, 0x8) [ 370.085673][T11160] CPU: 0 PID: 11160 Comm: syz-executor.5 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 370.095604][T11160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.105662][T11160] Call Trace: [ 370.108986][T11160] dump_stack+0x197/0x210 [ 370.113335][T11160] should_fail.cold+0xa/0x10 [ 370.117946][T11160] ? setup_fault_attr+0x220/0x220 [ 370.122989][T11160] ? ___might_sleep+0x163/0x2c0 [ 370.127859][T11160] __should_failslab+0x121/0x190 [ 370.132810][T11160] should_failslab+0x9/0x14 [ 370.137322][T11160] kmem_cache_alloc+0x2aa/0x710 [ 370.142195][T11160] ? __do_munmap+0x922/0x10f0 [ 370.148207][T11160] vm_area_alloc+0x20/0x110 [ 370.152722][T11160] mmap_region+0x8f3/0x1760 [ 370.157251][T11160] ? __x64_sys_brk+0x760/0x760 [ 370.162049][T11160] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 370.168300][T11160] ? get_unmapped_area+0x2ad/0x3d0 [ 370.173429][T11160] do_mmap+0x837/0x1150 [ 370.177601][T11160] vm_mmap_pgoff+0x1c5/0x230 [ 370.182212][T11160] ? randomize_stack_top+0x110/0x110 [ 370.187502][T11160] ? do_dup2+0x4f0/0x4f0 [ 370.191763][T11160] ksys_mmap_pgoff+0x4aa/0x630 [ 370.196541][T11160] ? find_mergeable_anon_vma+0x2d0/0x2d0 [ 370.202193][T11160] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 370.207670][T11160] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 370.213144][T11160] ? do_syscall_64+0x26/0x790 [ 370.217839][T11160] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.223919][T11160] __x64_sys_mmap+0xe9/0x1b0 [ 370.228526][T11160] do_syscall_64+0xfa/0x790 [ 370.233044][T11160] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.238941][T11160] RIP: 0033:0x45af49 [ 370.242844][T11160] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 370.262458][T11160] RSP: 002b:00007f3a2905ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 370.271229][T11160] RAX: ffffffffffffffda RBX: 00007f3a2905ac90 RCX: 000000000045af49 09:05:50 executing program 4: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 09:05:50 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5460, 0x8) [ 370.279210][T11160] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 370.287189][T11160] RBP: 000000000075bf20 R08: 0000000000000005 R09: 000000000000f000 [ 370.295438][T11160] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f3a2905b6d4 [ 370.303434][T11160] R13: 00000000004c843f R14: 00000000004e0620 R15: 0000000000000006 [ 370.337796][T11167] FAULT_INJECTION: forcing a failure. [ 370.337796][T11167] name failslab, interval 1, probability 0, space 0, times 0 [ 370.381960][T11167] CPU: 1 PID: 11167 Comm: syz-executor.2 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 370.391889][T11167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 370.401953][T11167] Call Trace: [ 370.405272][T11167] dump_stack+0x197/0x210 [ 370.409619][T11167] should_fail.cold+0xa/0x10 [ 370.414229][T11167] ? setup_fault_attr+0x220/0x220 [ 370.419266][T11167] ? ___might_sleep+0x163/0x2c0 [ 370.424130][T11167] __should_failslab+0x121/0x190 [ 370.429082][T11167] should_failslab+0x9/0x14 [ 370.433595][T11167] kmem_cache_alloc+0x2aa/0x710 [ 370.438467][T11167] ? __kasan_check_read+0x11/0x20 [ 370.443504][T11167] vm_area_dup+0x21/0x170 [ 370.447851][T11167] __split_vma+0xab/0x560 [ 370.452191][T11167] ? find_vma+0x30/0x170 [ 370.456449][T11167] __do_munmap+0x396/0x10f0 [ 370.460962][T11167] ? __kasan_check_read+0x11/0x20 [ 370.465997][T11167] ? arch_get_unmapped_area_topdown+0xfa/0x590 [ 370.472163][T11167] mmap_region+0x227/0x1760 [ 370.476716][T11167] ? __x64_sys_brk+0x760/0x760 [ 370.481496][T11167] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 370.487744][T11167] ? get_unmapped_area+0x2ad/0x3d0 [ 370.492881][T11167] do_mmap+0x837/0x1150 [ 370.497058][T11167] vm_mmap_pgoff+0x1c5/0x230 [ 370.501670][T11167] ? randomize_stack_top+0x110/0x110 [ 370.506972][T11167] ? do_dup2+0x4f0/0x4f0 [ 370.511332][T11167] ksys_mmap_pgoff+0x4aa/0x630 [ 370.516084][T11167] ? find_mergeable_anon_vma+0x2d0/0x2d0 [ 370.521734][T11167] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 370.527170][T11167] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 370.532605][T11167] ? do_syscall_64+0x26/0x790 [ 370.537305][T11167] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.543359][T11167] __x64_sys_mmap+0xe9/0x1b0 [ 370.548827][T11167] do_syscall_64+0xfa/0x790 [ 370.553330][T11167] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 370.559205][T11167] RIP: 0033:0x45af49 [ 370.563097][T11167] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:05:50 executing program 2 (fault-call:4 fault-nth:1): r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:50 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5451, 0x8) 09:05:50 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:05:50 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5761, 0x8) 09:05:50 executing program 5 (fault-call:3 fault-nth:5): r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:05:50 executing program 4: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) [ 370.582697][T11167] RSP: 002b:00007f632e51ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 370.591102][T11167] RAX: ffffffffffffffda RBX: 00007f632e51ac90 RCX: 000000000045af49 [ 370.599068][T11167] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 370.607021][T11167] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 [ 370.614981][T11167] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f632e51b6d4 [ 370.622932][T11167] R13: 00000000004c843f R14: 00000000004e0620 R15: 0000000000000006 09:05:50 executing program 1: socket$l2tp(0x18, 0x1, 0x1) openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x0) 09:05:50 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5452, 0x8) 09:05:50 executing program 4: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 09:05:50 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x6364, 0x8) 09:05:50 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) [ 370.891334][T11205] FAULT_INJECTION: forcing a failure. [ 370.891334][T11205] name failslab, interval 1, probability 0, space 0, times 0 09:05:50 executing program 1: socket$l2tp(0x18, 0x1, 0x1) openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x0) [ 371.020782][T11205] CPU: 0 PID: 11205 Comm: syz-executor.2 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 371.030712][T11205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.041213][T11205] Call Trace: [ 371.044519][T11205] dump_stack+0x197/0x210 [ 371.048869][T11205] should_fail.cold+0xa/0x10 [ 371.053484][T11205] ? setup_fault_attr+0x220/0x220 [ 371.058537][T11205] __should_failslab+0x121/0x190 [ 371.063498][T11205] should_failslab+0x9/0x14 [ 371.068017][T11205] kmem_cache_alloc+0x47/0x710 [ 371.072809][T11205] anon_vma_clone+0x111/0x5f0 [ 371.077515][T11205] __split_vma+0x17e/0x560 [ 371.081982][T11205] ? find_vma+0x30/0x170 [ 371.086236][T11205] __do_munmap+0x396/0x10f0 [ 371.090749][T11205] ? __kasan_check_read+0x11/0x20 [ 371.095809][T11205] ? arch_get_unmapped_area_topdown+0xfa/0x590 [ 371.102071][T11205] mmap_region+0x227/0x1760 [ 371.106626][T11205] ? __x64_sys_brk+0x760/0x760 [ 371.111406][T11205] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 371.117654][T11205] ? get_unmapped_area+0x2ad/0x3d0 [ 371.122774][T11205] do_mmap+0x837/0x1150 [ 371.126954][T11205] vm_mmap_pgoff+0x1c5/0x230 [ 371.131593][T11205] ? randomize_stack_top+0x110/0x110 [ 371.136895][T11205] ? do_dup2+0x4f0/0x4f0 [ 371.141179][T11205] ksys_mmap_pgoff+0x4aa/0x630 [ 371.145958][T11205] ? find_mergeable_anon_vma+0x2d0/0x2d0 [ 371.151606][T11205] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 371.157691][T11205] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 371.163171][T11205] ? do_syscall_64+0x26/0x790 [ 371.167861][T11205] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.173946][T11205] __x64_sys_mmap+0xe9/0x1b0 [ 371.178553][T11205] do_syscall_64+0xfa/0x790 [ 371.183075][T11205] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.188976][T11205] RIP: 0033:0x45af49 [ 371.192885][T11205] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 371.212587][T11205] RSP: 002b:00007f632e51ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 371.221020][T11205] RAX: ffffffffffffffda RBX: 00007f632e51ac90 RCX: 000000000045af49 [ 371.229001][T11205] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 371.236980][T11205] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 [ 371.245005][T11205] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f632e51b6d4 [ 371.253137][T11205] R13: 00000000004c843f R14: 00000000004e0620 R15: 0000000000000006 09:05:51 executing program 2 (fault-call:4 fault-nth:2): r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:51 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5460, 0x8) 09:05:51 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:51 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x660c, 0x8) 09:05:51 executing program 1: socket$l2tp(0x18, 0x1, 0x1) openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x0) 09:05:51 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0xf00, 0x0, 0x11, r2, 0xf000) [ 371.394517][T11234] FAULT_INJECTION: forcing a failure. [ 371.394517][T11234] name failslab, interval 1, probability 0, space 0, times 0 [ 371.427033][T11234] CPU: 1 PID: 11234 Comm: syz-executor.2 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 371.436956][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.447017][T11234] Call Trace: [ 371.450326][T11234] dump_stack+0x197/0x210 [ 371.454672][T11234] should_fail.cold+0xa/0x10 [ 371.459289][T11234] ? setup_fault_attr+0x220/0x220 [ 371.464333][T11234] ? ___might_sleep+0x163/0x2c0 [ 371.469201][T11234] __should_failslab+0x121/0x190 [ 371.474157][T11234] should_failslab+0x9/0x14 [ 371.478671][T11234] kmem_cache_alloc+0x2aa/0x710 [ 371.483544][T11234] vm_area_dup+0x21/0x170 [ 371.487885][T11234] __split_vma+0xab/0x560 [ 371.492223][T11234] ? find_vma+0x30/0x170 [ 371.496479][T11234] __do_munmap+0x40f/0x10f0 [ 371.500997][T11234] ? __kasan_check_read+0x11/0x20 [ 371.506038][T11234] ? arch_get_unmapped_area_topdown+0xfa/0x590 [ 371.512207][T11234] mmap_region+0x227/0x1760 [ 371.516734][T11234] ? __x64_sys_brk+0x760/0x760 [ 371.521506][T11234] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 371.527745][T11234] ? get_unmapped_area+0x2ad/0x3d0 [ 371.532870][T11234] do_mmap+0x837/0x1150 [ 371.537044][T11234] vm_mmap_pgoff+0x1c5/0x230 09:05:51 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x11, r2, 0xf000) 09:05:51 executing program 1 (fault-call:2 fault-nth:0): socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) [ 371.541653][T11234] ? randomize_stack_top+0x110/0x110 [ 371.546946][T11234] ? do_dup2+0x4f0/0x4f0 [ 371.551204][T11234] ksys_mmap_pgoff+0x4aa/0x630 [ 371.555983][T11234] ? find_mergeable_anon_vma+0x2d0/0x2d0 [ 371.561631][T11234] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 371.567104][T11234] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 371.572576][T11234] ? do_syscall_64+0x26/0x790 [ 371.577267][T11234] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.583349][T11234] __x64_sys_mmap+0xe9/0x1b0 [ 371.587957][T11234] do_syscall_64+0xfa/0x790 09:05:51 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1004, 0x0, 0x11, r2, 0xf000) [ 371.592479][T11234] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.595444][T11241] FAULT_INJECTION: forcing a failure. [ 371.595444][T11241] name failslab, interval 1, probability 0, space 0, times 0 [ 371.599252][T11234] RIP: 0033:0x45af49 [ 371.599339][T11234] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 371.599346][T11234] RSP: 002b:00007f632e51ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 371.643856][T11234] RAX: ffffffffffffffda RBX: 00007f632e51ac90 RCX: 000000000045af49 [ 371.651832][T11234] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 371.659808][T11234] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 [ 371.667785][T11234] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f632e51b6d4 [ 371.675762][T11234] R13: 00000000004c843f R14: 00000000004e0620 R15: 0000000000000006 [ 371.683877][T11241] CPU: 0 PID: 11241 Comm: syz-executor.1 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 371.693784][T11241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 371.703849][T11241] Call Trace: [ 371.707156][T11241] dump_stack+0x197/0x210 [ 371.711496][T11241] should_fail.cold+0xa/0x10 [ 371.716098][T11241] ? setup_fault_attr+0x220/0x220 [ 371.721135][T11241] ? ___might_sleep+0x163/0x2c0 [ 371.726005][T11241] __should_failslab+0x121/0x190 [ 371.730954][T11241] should_failslab+0x9/0x14 [ 371.735459][T11241] __kmalloc+0x2e0/0x770 [ 371.739795][T11241] ? mark_held_locks+0xf0/0xf0 [ 371.744566][T11241] ? mark_lock+0xc2/0x1220 [ 371.748997][T11241] ? _parse_integer+0x190/0x190 [ 371.753868][T11241] ? tomoyo_realpath_from_path+0xc5/0x660 [ 371.759603][T11241] tomoyo_realpath_from_path+0xc5/0x660 [ 371.765166][T11241] ? tomoyo_path_number_perm+0x193/0x520 [ 371.770823][T11241] tomoyo_path_number_perm+0x1dd/0x520 [ 371.776406][T11241] ? tomoyo_path_number_perm+0x193/0x520 [ 371.782054][T11241] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 371.787878][T11241] ? __f_unlock_pos+0x19/0x20 [ 371.792598][T11241] ? __fget+0x37f/0x550 [ 371.796776][T11241] ? do_dup2+0x4f0/0x4f0 [ 371.801035][T11241] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 371.807285][T11241] ? fput_many+0x12c/0x1a0 [ 371.811716][T11241] tomoyo_file_ioctl+0x23/0x30 [ 371.816494][T11241] security_file_ioctl+0x77/0xc0 [ 371.821446][T11241] ksys_ioctl+0x56/0x180 [ 371.825701][T11241] __x64_sys_ioctl+0x73/0xb0 [ 371.830312][T11241] do_syscall_64+0xfa/0x790 [ 371.834833][T11241] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 371.840731][T11241] RIP: 0033:0x45af49 09:05:51 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x8912, 0x8) 09:05:51 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x8933, 0x8) 09:05:51 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x8982, 0x8) [ 371.844629][T11241] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 371.864238][T11241] RSP: 002b:00007f574e036c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 371.872661][T11241] RAX: ffffffffffffffda RBX: 00007f574e036c90 RCX: 000000000045af49 [ 371.880644][T11241] RDX: 0000000000000000 RSI: 0000000000005760 RDI: 0000000000000004 [ 371.888630][T11241] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 371.896615][T11241] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f574e0376d4 [ 371.904588][T11241] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000005 09:05:51 executing program 2 (fault-call:4 fault-nth:3): r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:51 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x101c, 0x0, 0x11, r2, 0xf000) 09:05:51 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x8983, 0x8) 09:05:51 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:51 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5761, 0x8) [ 371.941262][T11241] ERROR: Out of memory at tomoyo_realpath_from_path. 09:05:52 executing program 1 (fault-call:2 fault-nth:1): socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) [ 372.105304][T11268] FAULT_INJECTION: forcing a failure. [ 372.105304][T11268] name failslab, interval 1, probability 0, space 0, times 0 [ 372.121140][T11268] CPU: 0 PID: 11268 Comm: syz-executor.2 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 372.131058][T11268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.141120][T11268] Call Trace: [ 372.144435][T11268] dump_stack+0x197/0x210 [ 372.148963][T11268] should_fail.cold+0xa/0x10 [ 372.153569][T11268] ? setup_fault_attr+0x220/0x220 [ 372.158620][T11268] __should_failslab+0x121/0x190 [ 372.163558][T11268] should_failslab+0x9/0x14 [ 372.168062][T11268] kmem_cache_alloc+0x47/0x710 [ 372.172844][T11268] anon_vma_clone+0x111/0x5f0 [ 372.177536][T11268] __split_vma+0x17e/0x560 [ 372.181963][T11268] ? find_vma+0x30/0x170 [ 372.186226][T11268] __do_munmap+0x40f/0x10f0 [ 372.190749][T11268] ? __kasan_check_read+0x11/0x20 [ 372.195793][T11268] ? arch_get_unmapped_area_topdown+0xfa/0x590 [ 372.201963][T11268] mmap_region+0x227/0x1760 [ 372.206484][T11268] ? __x64_sys_brk+0x760/0x760 [ 372.211272][T11268] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 372.217527][T11268] ? get_unmapped_area+0x2ad/0x3d0 [ 372.222653][T11268] do_mmap+0x837/0x1150 [ 372.226940][T11268] vm_mmap_pgoff+0x1c5/0x230 [ 372.231553][T11268] ? randomize_stack_top+0x110/0x110 [ 372.236846][T11268] ? do_dup2+0x4f0/0x4f0 [ 372.241108][T11268] ksys_mmap_pgoff+0x4aa/0x630 [ 372.245902][T11268] ? find_mergeable_anon_vma+0x2d0/0x2d0 [ 372.251550][T11268] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 372.257019][T11268] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 372.262485][T11268] ? do_syscall_64+0x26/0x790 [ 372.267171][T11268] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.270946][T11273] FAULT_INJECTION: forcing a failure. [ 372.270946][T11273] name failslab, interval 1, probability 0, space 0, times 0 [ 372.273251][T11268] __x64_sys_mmap+0xe9/0x1b0 [ 372.273279][T11268] do_syscall_64+0xfa/0x790 [ 372.294906][T11268] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.300792][T11268] RIP: 0033:0x45af49 [ 372.304679][T11268] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 372.324274][T11268] RSP: 002b:00007f632e51ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 372.332697][T11268] RAX: ffffffffffffffda RBX: 00007f632e51ac90 RCX: 000000000045af49 [ 372.340683][T11268] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 372.348651][T11268] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 [ 372.356636][T11268] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f632e51b6d4 [ 372.365114][T11268] R13: 00000000004c843f R14: 00000000004e0620 R15: 0000000000000006 [ 372.373095][T11273] CPU: 1 PID: 11273 Comm: syz-executor.1 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 372.383076][T11273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.393132][T11273] Call Trace: [ 372.396437][T11273] dump_stack+0x197/0x210 [ 372.400790][T11273] should_fail.cold+0xa/0x10 [ 372.405398][T11273] ? setup_fault_attr+0x220/0x220 [ 372.410461][T11273] ? ___might_sleep+0x163/0x2c0 [ 372.415341][T11273] __should_failslab+0x121/0x190 [ 372.420294][T11273] should_failslab+0x9/0x14 [ 372.424805][T11273] __kmalloc+0x2e0/0x770 [ 372.429057][T11273] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 372.435309][T11273] ? d_absolute_path+0x11b/0x170 [ 372.440276][T11273] ? __d_path+0x140/0x140 [ 372.444621][T11273] ? tomoyo_encode2.part.0+0xf5/0x400 [ 372.450013][T11273] tomoyo_encode2.part.0+0xf5/0x400 [ 372.455334][T11273] tomoyo_encode+0x2b/0x50 [ 372.459917][T11273] tomoyo_realpath_from_path+0x19c/0x660 [ 372.465575][T11273] tomoyo_path_number_perm+0x1dd/0x520 [ 372.471045][T11273] ? tomoyo_path_number_perm+0x193/0x520 [ 372.476696][T11273] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 372.482514][T11273] ? __f_unlock_pos+0x19/0x20 [ 372.487240][T11273] ? __fget+0x37f/0x550 [ 372.491414][T11273] ? do_dup2+0x4f0/0x4f0 [ 372.495668][T11273] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 372.501916][T11273] ? fput_many+0x12c/0x1a0 [ 372.506348][T11273] tomoyo_file_ioctl+0x23/0x30 [ 372.511126][T11273] security_file_ioctl+0x77/0xc0 [ 372.516078][T11273] ksys_ioctl+0x56/0x180 [ 372.520338][T11273] __x64_sys_ioctl+0x73/0xb0 [ 372.524941][T11273] do_syscall_64+0xfa/0x790 [ 372.529460][T11273] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.530445][T11280] FAULT_INJECTION: forcing a failure. [ 372.530445][T11280] name failslab, interval 1, probability 0, space 0, times 0 [ 372.535347][T11273] RIP: 0033:0x45af49 [ 372.535363][T11273] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 372.535371][T11273] RSP: 002b:00007f574e036c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 372.579840][T11273] RAX: ffffffffffffffda RBX: 00007f574e036c90 RCX: 000000000045af49 [ 372.587819][T11273] RDX: 0000000000000000 RSI: 0000000000005760 RDI: 0000000000000004 [ 372.596147][T11273] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 09:05:52 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x101d, 0x0, 0x11, r2, 0xf000) 09:05:52 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xae01, 0x8) 09:05:52 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:52 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x6364, 0x8) 09:05:52 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x8910, 0x8) 09:05:52 executing program 2 (fault-call:4 fault-nth:4): r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:52 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x8912, 0x8) 09:05:52 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x8933, 0x8) [ 372.604114][T11273] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f574e0376d4 [ 372.612087][T11273] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000005 [ 372.629729][T11273] ERROR: Out of memory at tomoyo_realpath_from_path. [ 372.667086][T11280] CPU: 0 PID: 11280 Comm: syz-executor.2 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 372.677019][T11280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 372.687083][T11280] Call Trace: [ 372.690397][T11280] dump_stack+0x197/0x210 [ 372.694743][T11280] should_fail.cold+0xa/0x10 [ 372.699350][T11280] ? setup_fault_attr+0x220/0x220 [ 372.704383][T11280] ? ___might_sleep+0x163/0x2c0 [ 372.709249][T11280] __should_failslab+0x121/0x190 09:05:52 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x20ffc000, 0x0, 0x11, r2, 0xf000) 09:05:52 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x400454ca, 0x8) [ 372.714206][T11280] should_failslab+0x9/0x14 [ 372.718720][T11280] kmem_cache_alloc+0x2aa/0x710 [ 372.723582][T11280] ? __do_munmap+0x922/0x10f0 [ 372.728286][T11280] vm_area_alloc+0x20/0x110 [ 372.732803][T11280] mmap_region+0x8f3/0x1760 [ 372.737327][T11280] ? __x64_sys_brk+0x760/0x760 [ 372.742112][T11280] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 372.748479][T11280] ? get_unmapped_area+0x2ad/0x3d0 [ 372.753601][T11280] do_mmap+0x837/0x1150 [ 372.757778][T11280] vm_mmap_pgoff+0x1c5/0x230 [ 372.762381][T11280] ? randomize_stack_top+0x110/0x110 [ 372.767673][T11280] ? do_dup2+0x4f0/0x4f0 [ 372.771937][T11280] ksys_mmap_pgoff+0x4aa/0x630 [ 372.776719][T11280] ? find_mergeable_anon_vma+0x2d0/0x2d0 [ 372.782366][T11280] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 372.787927][T11280] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 372.793420][T11280] ? do_syscall_64+0x26/0x790 [ 372.798129][T11280] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.804394][T11280] __x64_sys_mmap+0xe9/0x1b0 [ 372.809032][T11280] do_syscall_64+0xfa/0x790 [ 372.813899][T11280] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 372.819827][T11280] RIP: 0033:0x45af49 [ 372.824863][T11280] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 372.844816][T11280] RSP: 002b:00007f632e51ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 372.853504][T11280] RAX: ffffffffffffffda RBX: 00007f632e51ac90 RCX: 000000000045af49 [ 372.861506][T11280] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 372.869571][T11280] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 [ 372.877549][T11280] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f632e51b6d4 [ 372.885534][T11280] R13: 00000000004c843f R14: 00000000004e0620 R15: 0000000000000006 09:05:52 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 09:05:53 executing program 1 (fault-call:2 fault-nth:2): socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:05:53 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x7fffdf003000, 0x0, 0x11, r2, 0xf000) 09:05:53 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x40049409, 0x8) 09:05:53 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x8955, 0x8) 09:05:53 executing program 2 (fault-call:4 fault-nth:5): r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:53 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 09:05:53 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x8983, 0x8) 09:05:53 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x11, r2, 0xf000) 09:05:53 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x40086602, 0x8) 09:05:53 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) [ 373.331808][T11324] FAULT_INJECTION: forcing a failure. [ 373.331808][T11324] name failslab, interval 1, probability 0, space 0, times 0 09:05:53 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) [ 373.417129][T11324] CPU: 0 PID: 11324 Comm: syz-executor.1 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 373.427086][T11324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.437150][T11324] Call Trace: [ 373.440458][T11324] dump_stack+0x197/0x210 [ 373.444815][T11324] should_fail.cold+0xa/0x10 [ 373.449422][T11324] ? setup_fault_attr+0x220/0x220 [ 373.454464][T11324] ? ___might_sleep+0x163/0x2c0 [ 373.459337][T11324] __should_failslab+0x121/0x190 09:05:53 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x40186366, 0x8) [ 373.464294][T11324] should_failslab+0x9/0x14 [ 373.468817][T11324] __kmalloc+0x2e0/0x770 [ 373.473077][T11324] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 373.479337][T11324] ? d_absolute_path+0x11b/0x170 [ 373.484285][T11324] ? __d_path+0x140/0x140 [ 373.488625][T11324] ? tomoyo_encode2.part.0+0xf5/0x400 [ 373.494008][T11324] tomoyo_encode2.part.0+0xf5/0x400 [ 373.499244][T11324] tomoyo_encode+0x2b/0x50 [ 373.503687][T11324] tomoyo_realpath_from_path+0x19c/0x660 [ 373.509337][T11324] tomoyo_path_number_perm+0x1dd/0x520 [ 373.514812][T11324] ? tomoyo_path_number_perm+0x193/0x520 [ 373.520464][T11324] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 373.526280][T11324] ? __f_unlock_pos+0x19/0x20 [ 373.531009][T11324] ? __fget+0x37f/0x550 [ 373.535189][T11324] ? do_dup2+0x4f0/0x4f0 [ 373.539444][T11324] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 373.545692][T11324] ? fput_many+0x12c/0x1a0 [ 373.550134][T11324] tomoyo_file_ioctl+0x23/0x30 [ 373.554973][T11324] security_file_ioctl+0x77/0xc0 [ 373.559936][T11324] ksys_ioctl+0x56/0x180 [ 373.564205][T11324] __x64_sys_ioctl+0x73/0xb0 [ 373.568813][T11324] do_syscall_64+0xfa/0x790 [ 373.573482][T11324] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 373.579391][T11324] RIP: 0033:0x45af49 [ 373.583397][T11324] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 373.603014][T11324] RSP: 002b:00007f574e036c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.611440][T11324] RAX: ffffffffffffffda RBX: 00007f574e036c90 RCX: 000000000045af49 [ 373.619421][T11324] RDX: 0000000000000000 RSI: 0000000000005760 RDI: 0000000000000004 [ 373.627393][T11324] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 373.635374][T11324] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f574e0376d4 [ 373.643358][T11324] R13: 00000000004d0db0 R14: 00000000004daa10 R15: 0000000000000005 09:05:53 executing program 1 (fault-call:2 fault-nth:3): socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:05:53 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 09:05:53 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x89e2, 0x8) 09:05:53 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x4020940d, 0x8) 09:05:53 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x11, r2, 0xf000) [ 373.682237][T11324] ERROR: Out of memory at tomoyo_realpath_from_path. 09:05:53 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x11, r2, 0x0) 09:05:53 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0xf000) 09:05:53 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xae01, 0x8) 09:05:53 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 09:05:53 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:05:53 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x800454d2, 0x8) 09:05:53 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1004, 0x0, 0x11, r2, 0x0) 09:05:54 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1c, 0x11, r2, 0xf000) 09:05:54 executing program 4: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 09:05:54 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x2, 0x0) 09:05:54 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x400454ca, 0x8) 09:05:54 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x80086301, 0x8) 09:05:54 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x100a, 0x0, 0x11, r2, 0x0) 09:05:54 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1d, 0x11, r2, 0xf000) 09:05:54 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:54 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x40049409, 0x8) 09:05:54 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc0045005, 0x8) 09:05:54 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x101c, 0x0, 0x11, r2, 0x0) 09:05:54 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1c00, 0x11, r2, 0xf000) 09:05:54 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x10, 0x0) 09:05:54 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x40085618, 0x8) 09:05:54 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc0045878, 0x8) 09:05:54 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x101d, 0x0, 0x11, r2, 0x0) 09:05:54 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:54 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1d00, 0x11, r2, 0xf000) 09:05:54 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x227d, 0x0) 09:05:54 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x401054d6, 0x8) 09:05:54 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc0045878, 0x8) 09:05:55 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x20ffc000, 0x0, 0x11, r2, 0x0) 09:05:55 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:55 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x4c00, 0x0) 09:05:55 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x40186366, 0x8) 09:05:55 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x11, r2, 0xf000) 09:05:55 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc0189436, 0x8) 09:05:55 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:55 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x7fffdf003000, 0x0, 0x11, r2, 0x0) 09:05:55 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x4020940d, 0x8) 09:05:55 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x4c01, 0x0) 09:05:55 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000, 0x11, r2, 0xf000) 09:05:55 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc020660b, 0x8) 09:05:55 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:55 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x4090ae82, 0x8) 09:05:55 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x4c04, 0x0) 09:05:55 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r2, 0xf000) 09:05:55 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x11, r2, 0x0) 09:05:55 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:55 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc028660f, 0x8) 09:05:55 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x4c05, 0x0) 09:05:55 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x800454d2, 0x8) 09:05:55 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r2, 0xf000) 09:05:55 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x11, r2, 0x0) 09:05:56 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:56 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc0a85320, 0x8) 09:05:56 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x80086301, 0x8) 09:05:56 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5421, 0x0) 09:05:56 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000000, 0x11, r2, 0xf000) 09:05:56 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) 09:05:56 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:56 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x2) 09:05:56 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc0045878, 0x8) 09:05:56 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1c000000, 0x11, r2, 0xf000) 09:05:56 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5423, 0x0) 09:05:56 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:56 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x11, r2, 0x0) 09:05:56 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x3) 09:05:56 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc0045878, 0x8) 09:05:56 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1d000000, 0x11, r2, 0xf000) 09:05:56 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5450, 0x0) 09:05:56 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:56 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1c, 0x11, r2, 0x0) 09:05:56 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x4) 09:05:56 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x40000000, 0x11, r2, 0xf000) 09:05:56 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc0189436, 0x8) 09:05:56 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5451, 0x0) 09:05:56 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:56 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1d, 0x11, r2, 0x0) 09:05:57 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x5) 09:05:57 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc020660b, 0x8) 09:05:57 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000000000, 0x11, r2, 0xf000) 09:05:57 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:57 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5452, 0x0) 09:05:57 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa00, 0x11, r2, 0x0) 09:05:57 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x6) 09:05:57 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc0406429, 0x8) 09:05:57 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000000000000, 0x11, r2, 0xf000) 09:05:57 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x7) 09:05:57 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc0845658, 0x8) 09:05:57 executing program 4: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 09:05:57 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5460, 0x0) 09:05:57 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1c00, 0x11, r2, 0x0) 09:05:57 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000000000000, 0x11, r2, 0xf000) 09:05:57 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x2) 09:05:57 executing program 4: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 09:05:57 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x10) 09:05:57 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5761, 0x0) 09:05:57 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1d00, 0x11, r2, 0x0) 09:05:57 executing program 4: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 09:05:57 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x3) 09:05:57 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x2000) 09:05:58 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000000000000, 0x11, r2, 0xf000) 09:05:58 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x6364, 0x0) 09:05:58 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x11, r2, 0x0) 09:05:58 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) 09:05:58 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x4) 09:05:58 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x18baaf) 09:05:58 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1c00000000000000, 0x11, r2, 0xf000) 09:05:58 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x8912, 0x0) 09:05:58 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x5) 09:05:58 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0xc, @vbi={0x160c, 0x4, 0x6, 0x35303553, [0x4, 0xfffffffd], [0xf71, 0x40], 0x274}}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:58 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) 09:05:58 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000, 0x11, r2, 0x0) 09:05:58 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1d00000000000000, 0x11, r2, 0xf000) 09:05:58 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x8933, 0x0) 09:05:58 executing program 0: r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r0, &(0x7f0000001300)=[{&(0x7f0000000200)="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", 0x7df}], 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f00000000c0)) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) 09:05:58 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x6) 09:05:58 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, r2, 0x0) 09:05:58 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000000000000000, 0x11, r2, 0xf000) 09:05:58 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x8983, 0x0) 09:05:58 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x7) 09:05:58 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x800000, 0x11, r2, 0x0) 09:05:59 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) accept4$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x180000) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2) r3 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x8) 09:05:59 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 09:05:59 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r2, 0x0) 09:05:59 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8000000000000000, 0x11, r2, 0xf000) 09:05:59 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x89a2, 0x0) 09:05:59 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x10) 09:05:59 executing program 0: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x3201, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000)=0xe6ec) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) 09:05:59 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 09:05:59 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf002) 09:05:59 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r2, 0x0) 09:05:59 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x400454ca, 0x0) 09:05:59 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 09:05:59 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x2000) 09:05:59 executing program 0: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x280000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x10) 09:05:59 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf004) 09:05:59 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000000, 0x11, r2, 0x0) 09:05:59 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x40049409, 0x0) 09:05:59 executing program 4 (fault-call:4 fault-nth:0): r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:05:59 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x18baaf) 09:05:59 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x232000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:05:59 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf01c) 09:05:59 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x40186366, 0x0) [ 380.034363][T11846] FAULT_INJECTION: forcing a failure. [ 380.034363][T11846] name failslab, interval 1, probability 0, space 0, times 0 [ 380.127118][T11846] CPU: 0 PID: 11846 Comm: syz-executor.4 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 380.137144][T11846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.147206][T11846] Call Trace: [ 380.150512][T11846] dump_stack+0x197/0x210 [ 380.154861][T11846] should_fail.cold+0xa/0x10 [ 380.159501][T11846] ? setup_fault_attr+0x220/0x220 [ 380.164543][T11846] ? ___might_sleep+0x163/0x2c0 [ 380.169417][T11846] __should_failslab+0x121/0x190 [ 380.174371][T11846] should_failslab+0x9/0x14 [ 380.178889][T11846] kmem_cache_alloc+0x2aa/0x710 [ 380.183786][T11846] ? __kasan_check_read+0x11/0x20 [ 380.188838][T11846] vm_area_dup+0x21/0x170 [ 380.195562][T11846] __split_vma+0xab/0x560 [ 380.199916][T11846] ? find_vma+0x30/0x170 [ 380.204177][T11846] __do_munmap+0x396/0x10f0 [ 380.208712][T11846] ? __kasan_check_read+0x11/0x20 [ 380.213761][T11846] ? arch_get_unmapped_area_topdown+0xfa/0x590 [ 380.219935][T11846] mmap_region+0x227/0x1760 [ 380.224459][T11846] ? __x64_sys_brk+0x760/0x760 [ 380.229241][T11846] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 380.235492][T11846] ? get_unmapped_area+0x2ad/0x3d0 [ 380.240621][T11846] do_mmap+0x837/0x1150 [ 380.244886][T11846] vm_mmap_pgoff+0x1c5/0x230 [ 380.249618][T11846] ? randomize_stack_top+0x110/0x110 [ 380.254915][T11846] ? do_dup2+0x4f0/0x4f0 [ 380.259183][T11846] ksys_mmap_pgoff+0x4aa/0x630 [ 380.263965][T11846] ? find_mergeable_anon_vma+0x2d0/0x2d0 [ 380.269615][T11846] ? trace_hardirqs_on_thunk+0x1a/0x1c 09:06:00 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa000000, 0x11, r2, 0x0) 09:06:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfea1}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000540), &(0x7f0000000580)=0x4) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r4}]]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000004c0)={@empty, r4}, 0x14) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x402000, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x7c, r6, 0xe08, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x54, 0x8, [{0x3c, 0x7, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57cbd876}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x60}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43b11fbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x44def2e7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x775e925e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5bf336e2}]}, {0x14, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6563fd7c}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x14004) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x2e4, r6, 0x10, 0x70bd25, 0x80, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x120, 0xc, [{0x3c, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bc08d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b27}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xdbb1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2451}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x42ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x503ced69}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x8533482}]}, {0x4c, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544d23b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x365a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x63b0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30b8a053}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf76}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4360}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44a2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b2c2f44}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6563b057}]}, {0x2c, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7732}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x10a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x73c79f63}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa721}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4abe1b6e}]}, {0x1c, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x476c0f56}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x52ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x260d0845}]}, {0x1c, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x354c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ef5e0a0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57b9}]}, {0xc, 0xb, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d4d8d0d}]}, {0x24, 0xb, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3845}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc489}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb0a3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x66c3}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd8, 0x8, [{0x34, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x279749d9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c7435de}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f9f6b26}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}]}, {0x3c, 0x7, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x672ee3c9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x50831ccb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a04bd1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa6}]}, {0x14, 0x7, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6393f647}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}]}, {0xc, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}]}, {0x34, 0x7, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa615c07}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x18}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b57ddb2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56bb45ca}]}, {0xc, 0x7, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fc1db3}]}, {0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, [{0xc, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc0}]}, {0xc, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}]}, {0x4c, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdc7a4a4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4d2624c5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a62da05}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7715ca7b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f88600a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}]}, {0x1c, 0x7, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x54f063f8}]}]}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x44000}, 0x2000c000) openat$random(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x50402, 0x0) r7 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f00000005c0)={'TPROXY\x00'}, &(0x7f0000000600)=0x1e) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000500)={0xe8d, 0xc933}) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000640)=0x1, 0x4) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) msgget(0x3, 0x200) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x8) 09:06:00 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x111480, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0xbe05d5a62571283d) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:00 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1c000000, 0x11, r2, 0x0) [ 380.275092][T11846] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 380.280569][T11846] ? do_syscall_64+0x26/0x790 [ 380.285267][T11846] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.291362][T11846] __x64_sys_mmap+0xe9/0x1b0 [ 380.295971][T11846] do_syscall_64+0xfa/0x790 [ 380.300490][T11846] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.306390][T11846] RIP: 0033:0x45af49 [ 380.310296][T11846] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 380.330363][T11846] RSP: 002b:00007f3b305d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 380.338787][T11846] RAX: ffffffffffffffda RBX: 00007f3b305d3c90 RCX: 000000000045af49 [ 380.344319][T11861] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 380.346766][T11846] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 380.346777][T11846] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 09:06:00 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf01d) [ 380.346786][T11846] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f3b305d46d4 [ 380.346795][T11846] R13: 00000000004c843f R14: 00000000004e0620 R15: 0000000000000006 09:06:00 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x4020940d, 0x0) [ 380.489411][T11861] 8021q: adding VLAN 0 to HW filter on device bond1 09:06:00 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x239643b0ff448bf1) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000140)=0x28, 0x876ea182) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xb000) 09:06:00 executing program 4 (fault-call:4 fault-nth:1): r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:06:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x800, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x4, &(0x7f00000001c0)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @generic={0x0, 0x1, 0x0, 0x2000, 0x5d1}], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0xbf, &(0x7f0000000480)=""/191, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f0000000300)={0x0, 0x6}, 0x10, r1, r2}, 0x78) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=""/7, 0x7, r1}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r3, 0x4) r4 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x8) 09:06:00 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x4030582a, 0x0) 09:06:00 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1d000000, 0x11, r2, 0x0) [ 380.808368][T11861] bond1: (slave gretap1): making interface the new active one [ 380.835055][T11899] FAULT_INJECTION: forcing a failure. [ 380.835055][T11899] name failslab, interval 1, probability 0, space 0, times 0 09:06:00 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x800454d2, 0x0) 09:06:00 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000080)) [ 380.851573][T11861] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 380.902193][T11899] CPU: 0 PID: 11899 Comm: syz-executor.4 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 380.912117][T11899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.922186][T11899] Call Trace: [ 380.925494][T11899] dump_stack+0x197/0x210 [ 380.929844][T11899] should_fail.cold+0xa/0x10 [ 380.934454][T11899] ? setup_fault_attr+0x220/0x220 [ 380.939507][T11899] __should_failslab+0x121/0x190 [ 380.944460][T11899] should_failslab+0x9/0x14 [ 380.948973][T11899] kmem_cache_alloc+0x47/0x710 [ 380.953764][T11899] anon_vma_clone+0x111/0x5f0 [ 380.958462][T11899] __split_vma+0x17e/0x560 [ 380.962890][T11899] ? find_vma+0x30/0x170 [ 380.967142][T11899] __do_munmap+0x396/0x10f0 [ 380.971661][T11899] ? __kasan_check_read+0x11/0x20 [ 380.976701][T11899] ? arch_get_unmapped_area_topdown+0xfa/0x590 [ 380.982869][T11899] mmap_region+0x227/0x1760 [ 380.983647][T11903] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 380.987383][T11899] ? __x64_sys_brk+0x760/0x760 [ 380.987403][T11899] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 380.987416][T11899] ? get_unmapped_area+0x2ad/0x3d0 [ 380.987434][T11899] do_mmap+0x837/0x1150 [ 380.987457][T11899] vm_mmap_pgoff+0x1c5/0x230 [ 380.987481][T11899] ? randomize_stack_top+0x110/0x110 [ 380.987494][T11899] ? do_dup2+0x4f0/0x4f0 [ 380.987519][T11899] ksys_mmap_pgoff+0x4aa/0x630 [ 380.987536][T11899] ? find_mergeable_anon_vma+0x2d0/0x2d0 [ 380.987558][T11899] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 381.045810][T11899] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 381.051295][T11899] ? do_syscall_64+0x26/0x790 [ 381.055991][T11899] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.062086][T11899] __x64_sys_mmap+0xe9/0x1b0 [ 381.066698][T11899] do_syscall_64+0xfa/0x790 [ 381.071219][T11899] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.077116][T11899] RIP: 0033:0x45af49 [ 381.081146][T11899] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 381.100762][T11899] RSP: 002b:00007f3b305d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 381.109171][T11899] RAX: ffffffffffffffda RBX: 00007f3b305d3c90 RCX: 000000000045af49 [ 381.117130][T11899] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 381.125090][T11899] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 [ 381.133051][T11899] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f3b305d46d4 [ 381.141010][T11899] R13: 00000000004c843f R14: 00000000004e0620 R15: 0000000000000006 [ 381.153976][ T2753] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready 09:06:01 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000080)) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) 09:06:01 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000806d3352bbd7025ecdbdf25020000cd59000100070000005ca6633cfb50f4d0c5f4426ab94fee9bf8a2b36fe701c0c0c2b107bb162d956376ed1fa5fe958efb5fbdd63be296c834b395dbccb8b289ff53f3e37e35452f104b"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x2) delete_module(&(0x7f0000000140)='/dev/watch_queue\x00', 0x0) 09:06:01 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x80084504, 0x0) 09:06:01 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x40000000, 0x11, r2, 0x0) 09:06:01 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f00000000c0)={0x0, 0xfb, 0x7e, 0x2, 0x1f, "6b97d746a0296076518c61369c87038d", "48e9c42db474cdee50e6b2fdf6a104cdb8047cdee78bac4612f1f5f3ab7e1b812c3fc08488c5cca720b6b950561cabc7636a981671c9c72c38f9ab41f9989de85e4867c59f4f5a014cddc42239ecab2afe0f8cd5b237480dae5ece774cfc6487d08ac4879900e0c741"}, 0x7e, 0x3) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) ioctl$sock_rose_SIOCRSCLRRT(r2, 0x89e4) 09:06:01 executing program 4 (fault-call:4 fault-nth:2): r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:06:01 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x80086301, 0x0) [ 381.449443][T11922] FAULT_INJECTION: forcing a failure. [ 381.449443][T11922] name failslab, interval 1, probability 0, space 0, times 0 09:06:01 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r1, 0xd, 0x0) shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x2000) r2 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000000)='/dev/watch_queue\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0xf000) 09:06:01 executing program 0: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) [ 381.509398][T11932] Unknown ioctl -2146676718 [ 381.527313][T11922] CPU: 1 PID: 11922 Comm: syz-executor.4 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 381.534828][T11932] Unknown ioctl -2146676718 [ 381.537232][T11922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.537239][T11922] Call Trace: [ 381.537262][T11922] dump_stack+0x197/0x210 [ 381.537283][T11922] should_fail.cold+0xa/0x10 [ 381.537302][T11922] ? setup_fault_attr+0x220/0x220 [ 381.537320][T11922] ? ___might_sleep+0x163/0x2c0 [ 381.537343][T11922] __should_failslab+0x121/0x190 [ 381.579092][T11922] should_failslab+0x9/0x14 [ 381.583611][T11922] kmem_cache_alloc+0x2aa/0x710 [ 381.588491][T11922] vm_area_dup+0x21/0x170 [ 381.592829][T11922] __split_vma+0xab/0x560 [ 381.597168][T11922] ? find_vma+0x30/0x170 [ 381.601444][T11922] __do_munmap+0x40f/0x10f0 [ 381.605961][T11922] ? __kasan_check_read+0x11/0x20 [ 381.611008][T11922] ? arch_get_unmapped_area_topdown+0xfa/0x590 [ 381.617180][T11922] mmap_region+0x227/0x1760 [ 381.621714][T11922] ? __x64_sys_brk+0x760/0x760 [ 381.626599][T11922] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 381.632942][T11922] ? get_unmapped_area+0x2ad/0x3d0 [ 381.638077][T11922] do_mmap+0x837/0x1150 [ 381.642269][T11922] vm_mmap_pgoff+0x1c5/0x230 [ 381.646883][T11922] ? randomize_stack_top+0x110/0x110 [ 381.652182][T11922] ? do_dup2+0x4f0/0x4f0 [ 381.656451][T11922] ksys_mmap_pgoff+0x4aa/0x630 [ 381.661230][T11922] ? find_mergeable_anon_vma+0x2d0/0x2d0 [ 381.666900][T11922] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 381.672376][T11922] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 381.677848][T11922] ? do_syscall_64+0x26/0x790 [ 381.682549][T11922] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.688637][T11922] __x64_sys_mmap+0xe9/0x1b0 [ 381.693334][T11922] do_syscall_64+0xfa/0x790 [ 381.697955][T11922] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.703854][T11922] RIP: 0033:0x45af49 [ 381.707772][T11922] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 381.727382][T11922] RSP: 002b:00007f3b305d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 381.735918][T11922] RAX: ffffffffffffffda RBX: 00007f3b305d3c90 RCX: 000000000045af49 [ 381.744002][T11922] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 381.751983][T11922] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 09:06:01 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x1) fcntl$dupfd(r1, 0x0, r0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:06:01 executing program 3: ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000080)={{0x38d30b42f2f98620, 0x0, @reserved="d13cd0398d24f4b256bffd399e286028627b189ba9308b6e1288364afd7501da"}, 0xb9, [], "469d71b06b30b588df80e5eb3b86817415849559b2529efd07ee9854c5145e9b34803fc6037d7946291db2c9d699dd96ae94d5fa6929f0a1dcd595d8e8ee7e3311a8a8507b056d2bc75a43c1d332fcad6b656f22db80fbac43b365ffc77898e89bfc457270938b3c7c5b9852fd6b9fdc3e86c2a367dc0bc0980c7bfde0f3c435f9405149386d19ae283a02515d8d5a978037f0296d7df2169af96d0ba5cf7021e33c282c228fd27b6c10cc67ef9450854661671e7e5ecb1764"}) 09:06:01 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000000000, 0x11, r2, 0x0) [ 381.759964][T11922] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f3b305d46d4 [ 381.767943][T11922] R13: 00000000004c843f R14: 00000000004e0620 R15: 0000000000000006 09:06:01 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) fstat(r1, &(0x7f0000000080)) sigaltstack(&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000000)) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:01 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc004500a, 0x0) 09:06:01 executing program 4 (fault-call:4 fault-nth:3): r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:06:01 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xffffffffffffe, 0x11, r2, 0x0) 09:06:01 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000000)='/dev/watch_queue\x00', 0x40000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x220, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80220020}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@gettaction={0xc0, 0x32, 0x200, 0x70bd26, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0x14, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6106bf5e}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}]}, 0xc0}}, 0x20002890) 09:06:02 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) getpeername$inet(r0, &(0x7f0000000000), &(0x7f0000000080)=0x10) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r2) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video35\x00', 0x2, 0x0) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nvme-fabrics\x00', 0x100, 0x0) ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000000440)=""/29) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000280)={0x4228bbb0, 0x32315659, 0x9, 0xffffffde, 0x1, @stepwise={{0x8, 0x1}, {0x1f, 0x1}, {0xffff, 0x5}}}) setuid(0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r6, 0xc0e85667, &(0x7f00000002c0)={0xc0000000, 0x3, "4b8eb770e3402102c8c7536e87821e2b483c80235d64078e1bd947d0740b042d", 0x8d, 0x4, 0xf8e, 0x29, 0x285, 0x3, 0x8000, 0x3f, [0x2, 0xfffffffd, 0x2, 0x7]}) r7 = getuid() ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f00000003c0)) mount$binder(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='binder\x00', 0x2200145, &(0x7f0000000140)={[{@max={'max'}}, {@max={'max'}}, {@max={'max', 0x3d, 0x1}}], [{@seclabel='seclabel'}, {@dont_appraise='dont_appraise'}, {@fowner_lt={'fowner<', r2}}, {@fowner_lt={'fowner<', r3}}, {@euid_gt={'euid>'}}, {@uid_gt={'uid>', r7}}]}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) [ 382.072400][T11964] FAULT_INJECTION: forcing a failure. [ 382.072400][T11964] name failslab, interval 1, probability 0, space 0, times 0 [ 382.117960][T11964] CPU: 1 PID: 11964 Comm: syz-executor.4 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 382.127894][T11964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.137955][T11964] Call Trace: [ 382.141259][T11964] dump_stack+0x197/0x210 [ 382.145614][T11964] should_fail.cold+0xa/0x10 [ 382.150220][T11964] ? setup_fault_attr+0x220/0x220 [ 382.155625][T11964] __should_failslab+0x121/0x190 [ 382.160587][T11964] should_failslab+0x9/0x14 [ 382.165106][T11964] kmem_cache_alloc+0x47/0x710 [ 382.169900][T11964] anon_vma_clone+0x111/0x5f0 [ 382.174602][T11964] __split_vma+0x17e/0x560 [ 382.179032][T11964] ? find_vma+0x30/0x170 [ 382.183292][T11964] __do_munmap+0x40f/0x10f0 [ 382.187805][T11964] ? __kasan_check_read+0x11/0x20 [ 382.192839][T11964] ? arch_get_unmapped_area_topdown+0xfa/0x590 [ 382.199007][T11964] mmap_region+0x227/0x1760 [ 382.203534][T11964] ? __x64_sys_brk+0x760/0x760 [ 382.208313][T11964] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 382.214559][T11964] ? get_unmapped_area+0x2ad/0x3d0 [ 382.219683][T11964] do_mmap+0x837/0x1150 [ 382.223858][T11964] vm_mmap_pgoff+0x1c5/0x230 [ 382.228472][T11964] ? randomize_stack_top+0x110/0x110 [ 382.233765][T11964] ? do_dup2+0x4f0/0x4f0 [ 382.238022][T11964] ksys_mmap_pgoff+0x4aa/0x630 [ 382.242804][T11964] ? find_mergeable_anon_vma+0x2d0/0x2d0 [ 382.248448][T11964] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 382.253928][T11964] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 382.259402][T11964] ? do_syscall_64+0x26/0x790 [ 382.264096][T11964] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 382.270177][T11964] __x64_sys_mmap+0xe9/0x1b0 [ 382.274774][T11964] do_syscall_64+0xfa/0x790 [ 382.279278][T11964] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 382.285172][T11964] RIP: 0033:0x45af49 [ 382.289068][T11964] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 382.308671][T11964] RSP: 002b:00007f3b305d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 09:06:02 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x80000000000000, 0x11, r2, 0x0) [ 382.317080][T11964] RAX: ffffffffffffffda RBX: 00007f3b305d3c90 RCX: 000000000045af49 [ 382.325050][T11964] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 382.333014][T11964] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 [ 382.341001][T11964] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f3b305d46d4 [ 382.348969][T11964] R13: 00000000004c843f R14: 00000000004e0620 R15: 0000000000000006 09:06:02 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100)='nl80211\x00') sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="159300000000000000000100000008001781040000007d83adc6aa147c7cf8a4b4f6432963daa8f711597183022f8b2bb80de00ee2d4370e6ff76ccd471f0a9987c8c38572b52c"], 0x1c}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, 0x0) accept4$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x400) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfea1}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r11}]]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r5, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:06:02 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc0045878, 0x0) 09:06:02 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000080)='/dev/watch_queue\x00', 0x6000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000200)="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", 0x7df}], 0x1) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/74, 0x4a) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x5) [ 382.501366][T11985] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 09:06:02 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000000000000, 0x11, r2, 0x0) 09:06:02 executing program 4 (fault-call:4 fault-nth:4): r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) [ 382.578218][T11985] 8021q: adding VLAN 0 to HW filter on device bond1 09:06:02 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc0045878, 0x0) [ 382.689649][T11990] bond1: (slave gretap1): making interface the new active one [ 382.701846][T11990] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 382.727229][ T9650] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 382.747339][T11997] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 382.807654][T12006] FAULT_INJECTION: forcing a failure. [ 382.807654][T12006] name failslab, interval 1, probability 0, space 0, times 0 [ 382.834692][T12006] CPU: 1 PID: 12006 Comm: syz-executor.4 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 382.844619][T12006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 382.855117][T12006] Call Trace: [ 382.858430][T12006] dump_stack+0x197/0x210 [ 382.862765][T12006] should_fail.cold+0xa/0x10 [ 382.867361][T12006] ? setup_fault_attr+0x220/0x220 [ 382.872399][T12006] ? ___might_sleep+0x163/0x2c0 [ 382.877267][T12006] __should_failslab+0x121/0x190 [ 382.882224][T12006] should_failslab+0x9/0x14 [ 382.886758][T12006] kmem_cache_alloc+0x2aa/0x710 [ 382.891617][T12006] ? __do_munmap+0x922/0x10f0 [ 382.896316][T12006] vm_area_alloc+0x20/0x110 [ 382.900842][T12006] mmap_region+0x8f3/0x1760 09:06:02 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) r2 = dup2(r0, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="8042aa1f0700", @ANYRES16=r4, @ANYBLOB="090200000000000000000100000006000a004e24000008000600e000000108000800e0000000"], 0x2c}}, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20}, 0x4040000) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:02 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc004743e, 0x0) [ 382.905367][T12006] ? __x64_sys_brk+0x760/0x760 [ 382.910151][T12006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 382.916400][T12006] ? get_unmapped_area+0x2ad/0x3d0 [ 382.921534][T12006] do_mmap+0x837/0x1150 [ 382.925715][T12006] vm_mmap_pgoff+0x1c5/0x230 [ 382.930330][T12006] ? randomize_stack_top+0x110/0x110 [ 382.935625][T12006] ? do_dup2+0x4f0/0x4f0 [ 382.939896][T12006] ksys_mmap_pgoff+0x4aa/0x630 [ 382.944680][T12006] ? find_mergeable_anon_vma+0x2d0/0x2d0 [ 382.950329][T12006] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 382.955801][T12006] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 382.961270][T12006] ? do_syscall_64+0x26/0x790 [ 382.965951][T12006] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 382.972035][T12006] __x64_sys_mmap+0xe9/0x1b0 [ 382.976649][T12006] do_syscall_64+0xfa/0x790 [ 382.981166][T12006] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 382.987155][T12006] RIP: 0033:0x45af49 09:06:03 executing program 3: sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000080)="9693d3f23a9ebf0636e22af631d6f238b28f90eb6cd9aecd3ccffb71e5ed67af21cddfe3716609d0e9e8a102606c2eab97596ff5e4b5cdc7f9f395638167d87d3eff305cd57b20ef3a75282d875e2b0dc7d56572f895957731aec5ad307c0cafd23fbc1d5da06a0bce29c51a0a7414563b33e84641f00d816887a2178e2704326ddb4421e0cb7d6cdc1c575f447f4836aa10b961aea006e0e5bd9f7895541be8361fab0594cbf959410f6127d79a2e2261431e1639b0a8f7aecb66e5cc6d9e37e52c19fc853a9b2f6dc291f52d1bca78e7f6ebb41c4239748c6ff87a95af2bf6e2b92d01ad96620e5c5304c5d89e270dac", 0xf1, 0x4004, 0x0, 0x0) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x11002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000011c0), &(0x7f0000001200)=0x4) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) ioctl$MON_IOCX_GET(r2, 0x40189206, &(0x7f0000001180)={&(0x7f0000000000), &(0x7f0000000180)=""/4096, 0x1000}) [ 382.991063][T12006] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 383.010679][T12006] RSP: 002b:00007f3b305d3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 383.019111][T12006] RAX: ffffffffffffffda RBX: 00007f3b305d3c90 RCX: 000000000045af49 [ 383.027101][T12006] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 383.035085][T12006] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 [ 383.043070][T12006] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f3b305d46d4 09:06:03 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfea1}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r4}]]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r5, 0xc0845658, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x10000, 0x7, 0x8, 0x88, 0xffffffffffffffff, 0x101, [], r4, r5, 0x1, 0x4}, 0x3c) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:03 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000000000000, 0x11, r2, 0x0) [ 383.051145][T12006] R13: 00000000004c843f R14: 00000000004e0620 R15: 0000000000000006 09:06:03 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc0096616, 0x0) [ 383.138681][T12023] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 09:06:03 executing program 5: openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x44) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:06:03 executing program 4 (fault-call:4 fault-nth:5): r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:06:03 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) [ 383.224681][T12023] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.287907][T12027] bond1: (slave gretap1): making interface the new active one 09:06:03 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x80010, r2, 0xf000) 09:06:03 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000000000000, 0x11, r2, 0x0) 09:06:03 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc0101282, 0x0) [ 383.393145][T12027] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 383.464787][ T9650] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 383.512482][T12023] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 09:06:03 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xffffffffffffffc1, 0x400000) accept$inet(r3, &(0x7f0000000180), &(0x7f0000000140)=0x10) 09:06:03 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:06:03 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa00000000000000, 0x11, r2, 0x0) 09:06:03 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r5, 0xc0845658, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000200)={0x18c, 0x2, 0x6, 0x80}, 0x8) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) read$eventfd(r2, &(0x7f0000000000), 0x8) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000100)={0x5, 0x0, [{}, {}, {}, {}, {}]}) 09:06:03 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc0184900, 0x0) 09:06:03 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x18b381, 0x0) write$P9_RWSTAT(r0, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) fcntl$dupfd(r2, 0x0, r1) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x40010, r3, 0x5000) 09:06:03 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1002, 0x0, 0x11, r2, 0x0) 09:06:03 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x0, 0x9, 0x4, 0x100, 0x80000001, {0x77359400}, {0x5, 0x9, 0x1, 0x21, 0x1f, 0x4, "259a89f7"}, 0xd3b, 0x2, @fd=r2, 0x10001, 0x0, 0xffffffffffffffff}) r4 = inotify_init() r5 = inotify_add_watch(r4, &(0x7f0000000240)='.\x00', 0xc0000080) inotify_rm_watch(r4, r5) inotify_rm_watch(r3, r5) 09:06:03 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1c00000000000000, 0x11, r2, 0x0) 09:06:03 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc0189436, 0x0) 09:06:04 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1004, 0x0, 0x11, r2, 0x0) 09:06:04 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000000)='/dev/watch_queue\x00', 0x800, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:04 executing program 3: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x107301, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) memfd_create(&(0x7f0000000000)='\'#wlan0\x00', 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000140)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x581400, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000100)=0xffffffff) 09:06:04 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) fcntl$dupfd(r1, 0x0, r0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x1b}, 0x400}}, 0x8, 0x0, 0x20, 0x6, 0x4, 0x3, 0x5}, &(0x7f0000000300)=0x9c) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000340)={r4, 0x459f}, &(0x7f0000000380)=0x8) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r5, 0xc0845658, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0xf000) 09:06:04 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1d00000000000000, 0x11, r2, 0x0) 09:06:04 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xc020660b, 0x0) 09:06:04 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x100a, 0x0, 0x11, r2, 0x0) 09:06:04 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@random={'user.', '/dev/watch_queue\x00'}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket$inet(0x2, 0x4, 0x53) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_tcp_int(r4, 0x6, 0x0, 0x0, 0x0) r5 = getpid() fcntl$setown(r4, 0x8, r5) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r6, &(0x7f0000000080), 0x0, 0x100000000) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) r8 = accept4(0xffffffffffffffff, &(0x7f0000000440)=@isdn, &(0x7f00000002c0)=0x80, 0x800) sendto$inet(r8, &(0x7f0000000300)="091aa5a14a5682b6a1ee7b69c7402b9b2164c3", 0x13, 0x10, &(0x7f0000000340)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x7d, &(0x7f0000000040)={r9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000380)={r9, 0x6a, 0x9e, 0x81, 0xaaf2, 0x4968}, &(0x7f0000000400)=0x14) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r10, 0x0, 0x42, &(0x7f00000001c0)={'icmp\x00'}, &(0x7f0000000200)=0x1e) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r11, 0x0, 0x481, &(0x7f0000000080), &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000580)={r9, 0x2}, &(0x7f00000005c0)=0x8) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:06:04 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2180091}, 0xc, &(0x7f00000003c0)={&(0x7f0000000080)=@getlink={0x308, 0x12, 0x2, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40808, 0x40010}, [@IFLA_PHYS_PORT_ID={0x16, 0x22, "68dcb32c31d8389e69e9479c2312281a5688"}, @IFLA_IF_NETNSID={0x8}, @IFLA_VF_PORTS={0x1dc, 0x18, [{0x20, 0x1, [@IFLA_PORT_PROFILE={0xa, 0x2, '^bdev\x00'}, @IFLA_PORT_PROFILE={0xf, 0x2, '/dev/hwrng\x00'}]}, {0x28, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "d47cbcdc5772931495f3e52742c024c8"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x3}]}, {0x28, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "ed05dc17f84b22d2a3dae77f23921821"}, @IFLA_PORT_PROFILE={0xf, 0x2, '/dev/hwrng\x00'}]}, {0x70, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_PROFILE={0xf, 0x2, '/dev/hwrng\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5fa8d482b5ddc17e6c376daa17d5c541"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6c449365b29ab013d10a97e988b486ff"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "e70b04f20bce96e76f3dc02f14645a20"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xff}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x5}, @IFLA_PORT_VF={0x8, 0x1, 0x3}]}, {0x88, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_REQUEST={0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_PROFILE={0x20, 0x2, 'self@keyringeth0trusted(GPL\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "312ddc36aec2273f3a1123e8b22a9339"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "b8edafa242059b906ee30d1d62d182fb"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x40}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c3189cc665d8966204d78cf520b1d9ed"}]}, {0x34, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6e859ddb85bd367f80cfeca160d8a8c4"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "db53fe4a37bc3a0c1b5123e9f373fb72"}, @IFLA_PORT_VF={0x8, 0x1, 0x8000}]}, {0x18, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6586658adc2c000a0ddde415d782b35a"}]}, {0x18, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "dfe13828cfca05bcda9ab677a2585e2b"}]}, {0xc, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x80}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'vxcan1\x00'}, @IFLA_VF_PORTS={0xa4, 0x18, [{0x18, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d7c72626ce808f3411d90b731f25634d"}]}, {0x4}, {0x70, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x40}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9c31b0a3372602bfdf7623dc693f594b"}, @IFLA_PORT_PROFILE={0x10, 0x2, 'vboxnet0*^#\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "c4a15f987a25be384ad8fc36d087d7b0"}, @IFLA_PORT_PROFILE={0xf, 0x2, '/dev/hwrng\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "6921e7a7ef9b02031ff2b7ee3f2b3262"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}]}, {0x14, 0x1, [@IFLA_PORT_PROFILE={0xf, 0x2, '/dev/hwrng\x00'}]}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x3}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xc5}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x1f}, @IFLA_LINKINFO={0x14, 0x12, @macvtap={{0xc, 0x1, 'macvtap\x00'}, {0x4}}}]}, 0x308}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:04 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) r2 = dup3(0xffffffffffffffff, r0, 0x80000) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000340)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000500)={r4}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x804, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x4, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x1}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x4, &(0x7f00000001c0)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, @generic={0x0, 0x1, 0x0, 0x2000, 0x5d1}], &(0x7f0000000200)='syzkaller\x00', 0x3ff, 0xcc, &(0x7f0000000540)=""/204, 0x0, 0x10, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f0000000300)={0x0, 0x6}, 0x10, r5, r6}, 0x78) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r7, 0xc0845658, 0x0) ioctl$VIDIOC_QUERYSTD(r7, 0x8008563f, &(0x7f00000002c0)) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r8, 0xc0845658, 0x0) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_tcp_int(r9, 0x6, 0x0, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000001840)={@remote, @multicast1, 0x0}, &(0x7f0000001880)=0xc) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r11) stat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r13, 0xc0845658, 0x0) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000000780)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000e00)=0xfffffffffffffec1) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file1\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r16) stat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000a40)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@initdev}}, &(0x7f0000000b40)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000b80)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000c80)=0xe8) r20 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r23 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r23, 0x202002) keyctl$chown(0x4, r23, r21, r22) lstat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000680)='system.posix_acl_default\x00', &(0x7f0000000d80)={{}, {0x1, 0x6}, [{0x2, 0x0, r11}, {0x2, 0x6, r12}, {0x2, 0x2, r14}, {0x2, 0x1, r15}, {0x2, 0x4, r16}, {0x2, 0x0, r17}, {0x2, 0x0, r18}, {0x2, 0xefeaef309b524c10, r19}], {}, [{0x8, 0x4, r22}, {0x8, 0x5}, {0x8, 0x4, r24}], {0x10, 0x1}, {0x20, 0x1}}, 0x7c, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r9], &(0x7f0000000080)='GPL\x00', 0x7, 0x99, &(0x7f00000000c0)=""/153, 0x40f00, 0x8, [], r10, 0x8, r1, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0x9, 0x56d, 0x5d2}, 0x10, r5, r8}, 0x78) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:04 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0xffffffbd, 0x0) 09:06:04 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000000000000000, 0x11, r2, 0x0) 09:06:04 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x101c, 0x0, 0x11, r2, 0x0) 09:06:04 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x2) 09:06:04 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2040, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)={0x6, 0xb}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x9, &(0x7f0000000140)=""/4096) ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x2) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) signalfd(r2, &(0x7f0000000080)={0x8}, 0x8) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:04 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x101d, 0x0, 0x11, r2, 0x0) 09:06:04 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8000000000000000, 0x11, r2, 0x0) 09:06:04 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x3) 09:06:05 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xfeffffffffff0f00, 0x11, r2, 0x0) 09:06:05 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0xa000, 0x0) r2 = accept(0xffffffffffffffff, &(0x7f0000000080)=@nfc_llcp, &(0x7f0000000000)=0x80) getpeername$l2tp6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, &(0x7f0000000140)=0x20) r3 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xc, 0x50, r3, 0xf000) 09:06:05 executing program 0: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000000)='/dev/watch_queue\x00', 0x100000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x711201, 0x54) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000440)={0x2, 0xb, 0x4, 0x80000000, 0x7fff, {0x77359400}, {0x1, 0x1, 0x6, 0x2d, 0x2, 0x9, "c2945e2c"}, 0x8, 0x1, @userptr=0x2, 0x7c, 0x0, 0xffffffffffffffff}) r4 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r4, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) accept(r4, &(0x7f00000003c0)=@x25, &(0x7f0000000540)=0x80) ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000840)=0x0) getpgid(r5) write$cgroup_pid(r3, &(0x7f00000004c0)=r5, 0x12) preadv(r2, &(0x7f0000000080), 0x0, 0x100000000) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="21000000c11bb82e4a2e02186d806ed03633cd49ea31d9032640cc0f700e37ab41a1a8fcc27357b3ecbce438d59710ccbf27ca12234ac3807f56b975f87ffc508f7db09ac7b4e244dd98b804edd1d350a3fb700a96a937e8c36f778ea0db480c4547f4fff11b5df668deb0f733ea3dc81adcc371a3b49de6bdc2e89097cc82ae8213245a5a30c1f36d8863f9a0002fd84d5ba575afb3b90ac55a9f389a1468a4d70b9d13d025371220cdcb1c76938c48c7a0e6a80e9c9546d1adc5526f9004", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7d, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000380)={r7, 0x6a, 0x9e, 0x81, 0xaaf2, 0x4968}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000340)={r7, 0x5}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0)={r8, 0xfffc0000}, &(0x7f0000000400)=0x8) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r9, 0xc0845658, 0x0) r10 = syz_open_dev$mouse(&(0x7f0000000500)='/dev/input/mouse#\x00', 0xf4, 0x0) r11 = openat(r10, &(0x7f00000000c0)='./file0\x00', 0x1, 0x40) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r11, 0xc0845658, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r12, 0xc0845658, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r11, 0xc0205647, &(0x7f0000000080)={0xa30000, 0x8000, 0x0, r12, 0x0, &(0x7f0000000040)={0x1e61cc0, 0x400, [], @ptr=0x7fffffff}}) sendmsg$TIPC_NL_MEDIA_SET(r13, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf8, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x95}, @TIPC_NLA_NODE_UP, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xc0, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_MTU={0x2, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x0, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9eca}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xaa}, 0x1, 0x0, 0x0, 0x40000}, 0x40) getdents64(r0, &(0x7f0000000100)=""/71, 0x47) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r9, 0x5760, 0x1) 09:06:05 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x20ffc000, 0x0, 0x11, r2, 0x0) 09:06:05 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x4) 09:06:05 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x2) 09:06:05 executing program 3: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/nvme-fabrics\x00', 0x20100, 0x0) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001b00)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000001c40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x40, r3, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, '*\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr="3cd2f6fa2cdac9e9ac294b958936ab21"}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x6004000) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80020800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r3, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0x5800) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:05 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x4) 09:06:05 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x7fffdf003000, 0x0, 0x11, r2, 0x0) 09:06:05 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x5) 09:06:05 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000080)={0x5, 0x1}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000200)="79c0c749135d142ba6dea94bee91c151", 0x10) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="510000000104000226bd7000fcdbdf250e0000050800054000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x805d}, 0x81) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000000)=""/62) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:06:05 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xa) 09:06:05 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x7ffffffff000, 0x0, 0x11, r2, 0x0) 09:06:05 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1c) 09:06:06 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0xc7b994f417159d17) 09:06:06 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x6) 09:06:06 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x11, r2, 0x0) 09:06:06 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mlock2(&(0x7f0000001000/0x400000)=nil, 0x400000, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xf000) 09:06:06 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1d) 09:06:06 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x7) 09:06:06 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) 09:06:06 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xa00) 09:06:06 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x300) 09:06:06 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x11, r2, 0x0) 09:06:06 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1c00) 09:06:06 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1c, 0x11, r2, 0x0) 09:06:06 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x500) 09:06:07 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1d00) 09:06:07 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xfffffffffffffffe, 0xdf8d4eac64f81efd) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000000140)={0x5, "96aaf2fba834534c74414c78c07492b76df03614717851dd2a2e0d01d5ab33ba", 0x3, 0x80, 0x20, 0x115ed00, 0x1, 0x1, 0x5, 0x1ff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000100)) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f00000000c0)={0x3, [0x0, 0x0, 0x0]}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000880)={0x0, {}, 0x0, {}, 0x4, 0x9, 0x18, 0x19, "5e09363eeebf384f538d081233fd447ae8fd521f620fd5eaf4c2f833ddc6f2d3a31deead663f765455c46ded238de471dd995ed9512121d8d0da3989fd20cf57", "f59349665a844a480892d83ac20898468afba4f775765076ac150c43e4c15958", [0x2, 0x90]}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000080)={0x3, 0x1}) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyprintk\x00', 0x2000, 0x0) write$binfmt_aout(r5, &(0x7f0000000200)={{0x107, 0x34, 0x6, 0x37d, 0x224, 0x9, 0x47, 0x1}, "e26a56c24e84c4666bf4f7c0f602e452004b75b3740ec8c5c39a7cd00c20b57eaa18a8720c1751d06d0225a97b8a1c8ff380b68e7166e8170feab2e28568ed8315f173", [[], [], [], [], [], []]}, 0x663) r6 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r7 = shmget$private(0x0, 0x3000, 0x800, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_STAT_ANY(r7, 0xf, &(0x7f0000000940)=""/51) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x8) 09:06:08 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0xf000) 09:06:08 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1d, 0x11, r2, 0x0) 09:06:08 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x600) 09:06:08 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x4000) 09:06:08 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000080)='/dev/watch_queue\x00', 0xe4ee568f972ad0b9, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:08 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x400000) 09:06:08 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x440100, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f00000000c0)={0x2e, 0x40}) open(&(0x7f0000000000)='./file0\x00', 0x82061, 0x80) rt_sigaction(0x40, &(0x7f00000001c0)={&(0x7f0000000100)="26660f3837dd67664e0f3a2278000ff30f1efd66450ff5d0c4a379168f4600000004c483816b4143d20f0f20b766430fe5ffc1d00067440f42ec", {0x8}, 0x2, &(0x7f0000000140)="66420fe8b93524cd22c4c28dab32c483b5686cb95c00660f0f64251ba60fae830000000066410faef5640f1f00f0470970cdc423cd5c6bfe74660f6ea10f000000"}, 0x0, 0x8, &(0x7f0000000200)) 09:06:08 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa00, 0x11, r2, 0x0) 09:06:08 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x700) 09:06:08 executing program 5: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = inotify_init() syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x2, 0x2) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="6057677aabf493c0961fb8ee32dc2c84fd26704f0858482884ccacd8bee9350d97fbd95d84447f58f480b6a2cb20f63f1fea946f3465de41dda5dcc9acc245989c06353a1e415ca94687fd138f608c7ea2aa0c8c0332893474af24eaca1d8d4b9191f343e811bed793854f1dce8dff54eeb3a592d6d1", 0x76, 0x4008000, &(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000bc0)={{0x6, 0xbb6c6e93bbccb976, 0x2d9bfb9f, 0x5, '\x00', 0x10001}, 0x0, [0x100, 0x1, 0x5, 0x22, 0x8, 0x2, 0x5, 0x9, 0x1, 0x7, 0x54ba, 0x5, 0x186, 0x8, 0x7ff, 0x7, 0x1, 0x7, 0x3ff, 0x7, 0x6, 0x3f, 0x3, 0x100000000, 0x9, 0x8, 0x0, 0x6, 0x4, 0x10001, 0x293, 0x4, 0x726, 0x5, 0x1, 0x100, 0x4, 0xfff, 0x6, 0x4, 0x100, 0x800, 0x2, 0x401, 0xfa, 0x3ff, 0x9aee, 0x7, 0x3, 0xce0, 0x5, 0x4, 0x6, 0x5, 0x5, 0xd000000000000000, 0xfffffffffffffffa, 0x2, 0x8000, 0x1, 0xd5, 0x0, 0x10000, 0x7, 0x200, 0x5, 0x1, 0x4, 0xd87, 0xffffffffffffffff, 0x1a7, 0xaab, 0x7000000000000000, 0x0, 0x3, 0xfffffffffffffff9, 0x7fa45c2c, 0x1f, 0x0, 0x309400000000, 0x8, 0x9, 0x6, 0x7, 0x8, 0x20, 0x6, 0xb849, 0x0, 0x2, 0x8, 0x0, 0xc17a, 0x6, 0xc1b, 0x5, 0x8, 0x200, 0x7, 0xfffffffffffffffb, 0x100000001, 0x401, 0xff, 0x80, 0x3, 0x7, 0x3, 0xd2, 0x8001, 0x9, 0x10000, 0x41ac6689, 0xfffffffffffffffa, 0x1fa, 0x2, 0x0, 0x1, 0x7, 0x40, 0x400, 0x9, 0x6, 0x3, 0x401, 0x9, 0x6, 0x7fffffff, 0x9]}) socket$inet(0x2, 0x4000000805, 0x0) r5 = dup3(r2, r3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000280)=0x6) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) pselect6(0x40, &(0x7f00000000c0)={0x5, 0x1}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r7 = fcntl$dupfd(r0, 0x0, r1) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r7, 0xf000) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000000)=0x8) r8 = request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000240)='kfyring&-\x00', 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="31dd4716685defc91faf1b23c88eda517a62f85a360a5d947e75bb898f3e44e1c6fdd147162406b0cf9cfce97e6d223d52b02bc57ef9ce3a68cb44d820614f5434374e722a8244916e6d2a8a7c568d3e101d6da45a23b07f4036cccc437625f7d6396d8c1208aa01cdbfd75389c41f014df1bb910a6581e2406ed1e0733d5c411972231947f0885ede1093b24e760e782d0b96a36a106dc17fb58c39fe4e691cccf756316e58ac379f8a394953412716246c5c7a00cd8323cf42a5e5be20d2b0ebdaa554baa2c6d189a7ac03e9d80c6d6fc7cbdee992e85880abb0a5a522d3ff341c60e1861fb4", 0xffffffffffffff3d}], 0x1, r8) r9 = request_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='\x00', r8) add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r9) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x5, 0x1, 0x0, 'queue1\x00', 0xffff}) 09:06:08 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x800000) 09:06:08 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1c00, 0x11, r2, 0x0) 09:06:08 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) 09:06:08 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x4000) 09:06:08 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1000000) 09:06:08 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1d00, 0x11, r2, 0x0) 09:06:08 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x1000000) 09:06:09 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x100) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x20004044}, 0x8928e505c45bef8e) r3 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0xf000) 09:06:09 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = request_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000240)='kfyring&-\x00', 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="31dd4716685defc91faf1b23c88eda517a62f85a360a5d947e75bb898f3e44e1c6fdd147162406b0cf9cfce97e6d223d52b02bc57ef9ce3a68cb44d820614f5434374e722a8244916e6d2a8a7c568d3e101d6da45a23b07f4036cccc437625f7d6396d8c1208aa01cdbfd75389c41f014df1bb910a6581e2406ed1e0733d5c411972231947f0885ede1093b24e760e782d0b96a36a106dc17fb58c39fe4e691cccf756316e58ac379f8a394953412716246c5c7a00cd8323cf42a5e5be20d2b0ebdaa554baa2c6d189a7ac03e9d80c6d6fc7cbdee992e85880abb0a5a522d3ff341c60e1861fb4", 0xffffffffffffff3d}], 0x1, r2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000002c0)={r2, 0xf2, 0xc}, &(0x7f0000000300)={'enc=', 'pkcs1', ' hash=', {'sha384-avx\x00'}}, &(0x7f0000000380)="8fc57875ecbabf335aa3982ece9bf21495a6bcc71e123a2fed4bede03b46f65ce0748fa08bfd32977d8d7af2fb75ef4efcffd6b6c5bd3f7110c7636287543a8832794a3615f75d84df18cd2f3cc35ee13a5ccb245468f16f4bf67ad37351817940f9c903816634c4d7127646cb388d563ca03e6845fbc48b5f26e1ad1cc5fe7b3e3a9311adf32dc0d145eb74f79b616c179b592263a57f98dfe1a195b7e9908dfc7fcfc2bf69e514337f66c2869f6737f17b53c953fab04f552a638132c3a286af50105e5f4de4f551639d19762c182afb0abf8fe19e3233b32dfb5a7c97fb7e85391ee7d2424c3ef90aea5685f323d60d27", &(0x7f0000000480)="1957ea04a4c0231234aa2e4f") r3 = accept$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000080)=0x6e) getsockname(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000200)=0x80) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000004c0)={0x8, 0x0, 0x7, 0x40, 0x69, 0x5}) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r5, 0x4020565b, &(0x7f0000000280)={0x6, 0x20, 0x2}) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000000)={0x0, 0x3}) 09:06:09 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x2000000) 09:06:09 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x11, r2, 0x0) 09:06:09 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x2000000) 09:06:09 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) write$vhci(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034e4aef0efb12b2df84cf4390a421250628135788051dd873c2e2d410983e61efef3378b9a5a74bf7e736c2277979478ce85dcc3a41484559ccf1a0c53e648970b6bf108dd6244da6e5f967c95929e010029bc96f36c55f1baf4ecf6b9443dfd776f70a2ee49d8c2909a392d64709eeea02e59343d959cb58af5266008955a376ad01659c9937d0b8b12af4395450ed687235d34aa87afdac4720e0d2de899af8feaf1ddd2d46cb4a306f992028f397"], 0xb4) r2 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0xf000) 09:06:09 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000200)="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", 0x7df}], 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:09 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x4000000) 09:06:09 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000, 0x11, r2, 0x0) 09:06:09 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x3000000) 09:06:09 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xa000000) 09:06:09 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x4000000) 09:06:09 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x800000, 0x11, r2, 0x0) 09:06:09 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, {0x2, 0x4e23, @local}, {0x2, 0x4e23, @loopback}, 0x2, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)='macvlan0\x00', 0x3b, 0x6, 0x7e1}) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000180)=0xf64) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0xa3fe5b112e99919f) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_tcp_int(r3, 0x6, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) mmap$watch_queue(&(0x7f0000feb000/0x14000)=nil, 0x14000, 0x0, 0x11, r4, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000100)={0x0, @hci, @l2={0x1f, 0x3, {0x8, 0x3f, 0xf9, 0x1, 0xf9, 0x40}, 0x2, 0x1e}, @can={0x1d, r5}, 0x8, 0x0, 0x0, 0x0, 0x3ff, &(0x7f00000000c0)='gre0\x00', 0x2, 0x8001, 0x5}) 09:06:09 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1c000000) 09:06:09 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x5000000) 09:06:09 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r2, 0x0) 09:06:10 executing program 0: socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x240200, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000080)={0xff80, [[0xff, 0xcbe, 0x1ff, 0x0, 0x3, 0xbd8, 0x101, 0x200], [0x3, 0x9, 0x0, 0x1, 0x7f, 0x8, 0x4, 0xffff], [0x94b, 0x7, 0xfff, 0x1000, 0x71a63d33, 0x6, 0x5, 0x7f]], [], [{0x9, 0x5, 0x1}, {0x68f3, 0xfffff582, 0x1}, {0x8, 0xfffffbff, 0x0, 0x1, 0x0, 0x1}, {0x6, 0x68, 0x1, 0x1, 0x0, 0x1}, {0x6, 0xc59, 0x0, 0x1, 0x1, 0x1}, {0x8, 0x8, 0x1, 0x0, 0x1, 0x1}, {0xffffff7f, 0x9, 0x1, 0x1}, {0x8001, 0x3, 0x1, 0x1, 0x1, 0x1}, {0x8001, 0x8, 0x1, 0x1, 0x0, 0x1}, {0x4, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x1}, {0x10000, 0xe5ca}], [], 0x5}) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000540)={0xa20000, 0x0, 0x6, r2, 0x0, &(0x7f0000000500)={0x990a65, 0x14, [], @string=&(0x7f00000004c0)=0xe0}}) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) accept4$packet(r4, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14, 0x80000) connect$packet(r3, &(0x7f0000000600)={0x11, 0x5, r5, 0x1, 0x6, 0x6, @dev={[], 0x1f}}, 0x14) 09:06:10 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x6000000) 09:06:10 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1d000000) 09:06:10 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r2, 0x0) 09:06:10 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x24502) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000180)='memory.events\x00', 0x0, 0x0) ioctl$RTC_PIE_ON(r3, 0x7005) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000100)={r4, 0x400}, &(0x7f0000000140)=0x8) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:10 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x40000000) 09:06:10 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x7000000) 09:06:10 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000000, 0x11, r2, 0x0) 09:06:10 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, &(0x7f0000000000)) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/exec\x00', 0x2, 0x0) 09:06:10 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x40000000) 09:06:10 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa000000, 0x11, r2, 0x0) 09:06:10 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x400000000000) 09:06:10 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000080)={0x4, 0x10, [0x1, 0x8, 0x200, 0x100]}) fsync(r0) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000000)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) 09:06:10 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1c000000, 0x11, r2, 0x0) 09:06:10 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xffffffffffffe) 09:06:10 executing program 0: clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000080)={0x2}, &(0x7f00000000c0), &(0x7f0000000180)={r0, r1+30000000}, 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0xc000, 0x0) getpid() ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000040)=0x9) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) 09:06:10 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x100000000000000) 09:06:11 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1d000000, 0x11, r2, 0x0) 09:06:11 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x200000000000000) 09:06:11 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x80000000000000) 09:06:11 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x40000000, 0x11, r2, 0x0) 09:06:11 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x300000000000000) 09:06:11 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x100000000000000) 09:06:11 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000000000, 0x11, r2, 0x0) 09:06:11 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x400000000000000) 09:06:11 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xffffffffffffe, 0x11, r2, 0x0) 09:06:11 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x500000000000000) 09:06:11 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0xf2b2, 0x8}) 09:06:12 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x200000000000000) 09:06:12 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x80000000000000, 0x11, r2, 0x0) 09:06:12 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x600000000000000) 09:06:12 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x400000000000000) 09:06:12 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x700000000000000) 09:06:12 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000000000000, 0x11, r2, 0x0) 09:06:12 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xa00000000000000) 09:06:12 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x4000000000000000) 09:06:12 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000000000000, 0x11, r2, 0x0) 09:06:12 executing program 0: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000010000d0400"/20, @ANYRES32=r5, @ANYBLOB="7d77138245eaa3dc"], 0x20}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={@loopback, 0x54, r5}) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x0, 0x7e, 0x9, r1, 0x0, &(0x7f0000000000)={0x9c0901, 0x1ff, [], @value=0x5}}) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x12000, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r10, &(0x7f0000000080), 0x0, 0x100000000) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r11, 0x84, 0x7d, &(0x7f0000000040)={r12}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000000380)={r12, 0x6a, 0x9e, 0x81, 0xaaf2, 0x4968}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000440)={r12, 0x5, 0x7, 0x9b73}, &(0x7f0000000480)=0x10) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f00000004c0)={r13, 0x3, 0x9, [0xb330, 0x7, 0xc76, 0x200, 0x7f, 0x1000, 0x20, 0x1, 0xfff]}, 0x1a) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r8, 0xc0845658, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r8, 0x4020565b, &(0x7f00000003c0)={0xf7ee83bf8ef08b1b, 0x1}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r7, 0xc0845658, 0x0) getsockopt$packet_int(r7, 0x107, 0x10, &(0x7f00000001c0), &(0x7f0000000240)=0x4) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="e73b04d40ce7c5152a640b9502000cbef3e818ed1d9a5752c9d22f31a9407def50f8c6b0d1dd56e6b336e93fa9dea09f98b28981f85935ca18a1881a00a4498a10a5e43c3bc1c9e565953dd2eaf8151c1aaea212da38be32a9f660c9e4fc2d5e9c442fd92c7358929e51665ced3d9e66723d53fe7d679e00"/130]) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, 0x0) write$P9_RMKDIR(r0, &(0x7f0000000380)={0x14, 0x49, 0x1, {0x2a, 0x2, 0x6}}, 0x14) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x8) 09:06:12 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1c00000000000000) 09:06:12 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000000000000, 0x11, r2, 0x0) 09:06:12 executing program 1: socket$l2tp(0x18, 0x1, 0x1) remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4, 0x100) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:06:12 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa00000000000000, 0x11, r2, 0x0) 09:06:12 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1d00000000000000) 09:06:12 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:06:13 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x4000000000000000) 09:06:13 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1c00000000000000, 0x11, r2, 0x0) 09:06:13 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000000000000000) 09:06:13 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x26201) getsockopt$inet6_dccp_int(r0, 0x21, 0x5, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=0x0) ioprio_get$pid(0x0, r3) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000100)={'tunl0\x00', {0x2, 0x4e20, @loopback}}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) 09:06:13 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1d00000000000000, 0x11, r2, 0x0) 09:06:13 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000000000000000, 0x11, r2, 0x0) 09:06:13 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000080)={0x8, 0x8000, [{0x5, 0x0, 0xfffffffffffffffd}, {0x9, 0x0, 0x1}, {0xfff, 0x0, 0xb7}, {0x400, 0x0, 0x1}, {0x8001, 0x0, 0x40000}, {0xfffffff9, 0x0, 0x6}, {0x800, 0x0, 0x7fffffff}, {0x5, 0x0, 0x3}]}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:06:13 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xfeffffffffff0f00) 09:06:13 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1467a8a0", @ANYRES16=r3, @ANYBLOB="0100000000000000000018000000"], 0x200}, 0x1, 0xffffff7f}, 0x0) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000200)=0x4, 0x4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x12c02ce6574aaedc}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x68}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}]}, @TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x18, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7e7}]}, @TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb61}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) 09:06:13 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8000000000000000, 0x11, r2, 0x0) 09:06:13 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x291800, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x6) 09:06:13 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xfeffffffffff0f00, 0x11, r2, 0x0) 09:06:13 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r3 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) 09:06:14 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) pipe(&(0x7f0000002240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r2, &(0x7f0000000080), 0x0, 0x100000000) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7d, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000380)={r4, 0x6a, 0x9e, 0x81, 0xaaf2, 0x4968}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000002280)={r5, 0x2}, &(0x7f00000022c0)=0x248) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(r6, 0x0, 0x484, &(0x7f0000000000)={0x6c, @rand_addr=0x5, 0x4e22, 0x2, 'lc\x00', 0x32, 0xc152, 0x6f}, 0x2c) 09:06:14 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x2) 09:06:14 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) [ 394.224230][T12681] IPVS: set_ctl: invalid protocol: 108 0.0.0.5:20002 09:06:14 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x4) 09:06:14 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xa) 09:06:14 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1c) 09:06:14 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x20040) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xa6, "9728792fdb03569cf44617a177e8c9673ffa2311b031180e93ff27d687757e7a10b76e60fd4c9083d7db4569d528331b405e235995b1fc2069c56628e29f582e87fc6f41d443692db504916404ade087e8b96411a13f4c2a7860be8b7abbac49c6b1a52bdba435b794da51b88b60196a1d927403a8ac06ecab6505a1dd6959e73425bc0ae5787238aa872b35f8543dc31fd50ab42fb2b2bd5146cde3d1c9999ef281717a6584"}, &(0x7f0000000140)=0xae) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r2}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r2}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={r2}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, r1, 0x0, 0x5, &(0x7f0000000380)='proc\x00', r2}, 0x30) r3 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r3, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) accept(r3, &(0x7f00000003c0)=@x25, &(0x7f0000000540)=0x80) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000840)=0x0) getpgid(r4) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r5, 0xc0845658, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000080)='\x00', r6}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)={r6}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740)={r6}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={r4, r5, 0x0, 0x2, &(0x7f0000000440)='*\x00', r6}, 0x30) r8 = syz_open_procfs(r7, &(0x7f00000004c0)='net/psched\x00') r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200)='l2tp\x00') r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r10, 0xc0845658, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r9, 0x538, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r10}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x14) socket$l2tp(0x18, 0x1, 0x1) r11 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r11, 0x5760, 0x0) 09:06:14 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = inotify_init() r2 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x8) r3 = fcntl$dupfd(r2, 0x0, r0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x10000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000010000d0400"/20, @ANYRES32=r7, @ANYBLOB="7d77f382450700dc"], 0x20}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f00000002c0)={0x0, @aes128}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @ldst={0x1, 0x3, 0x6, 0x5, 0x8, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xd6, &(0x7f00000000c0)=""/214, 0x41000, 0xb, [], r7, 0xa, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x1, 0x3a3, 0x8}, 0x10, 0x0, r3}, 0x78) 09:06:14 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1d) 09:06:14 executing program 1: r0 = epoll_create1(0x0) r1 = io_uring_setup(0xcc, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80480, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='rdma.max\x00', 0x2, 0x0) r3 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x0) 09:06:14 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xa00) 09:06:14 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_tcp_int(r3, 0x6, 0x0, 0x0, 0x0) finit_module(r3, &(0x7f0000000000)='ppp1@+eth0proc&vmnet1vmnet1cpusetvboxnet0-%},ppp1\x00', 0x7) 09:06:15 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000000)='/dev/watch_queue\x00', 0x301ab5b6bd086571, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:15 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1c00) 09:06:15 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x679bffc5bfd623d1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000180), &(0x7f00000001c0)=0xe, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r3 = fcntl$dupfd(r1, 0x0, r0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80, 0x0) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x5, 0x6, 0x400, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x1) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) 09:06:15 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:06:15 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x200000, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000001080)='/dev/nvme-fabrics\x00', 0x200, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, &(0x7f0000000080)=""/4096) rt_sigsuspend(&(0x7f0000000000)={0x7}, 0x8) 09:06:15 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1d00) 09:06:15 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000200)="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", 0xfffffffffffffdfe}], 0x100000000000000d) ioctl$KDFONTOP_COPY(r1, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x4, 0x18, 0xa4, &(0x7f0000000080)}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/null\x00', 0x8000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000a80)) r4 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r4, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) accept(r4, &(0x7f00000003c0)=@x25, &(0x7f0000000540)=0x80) ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000840)=0x0) getpgid(r5) r6 = getpgrp(r5) write$cgroup_pid(r2, &(0x7f0000000a40)=r6, 0x12) 09:06:15 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000000)='/dev/watch_queue\x00', 0x381880, 0x0) ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, &(0x7f0000000080)=""/153) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) geteuid() 09:06:15 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x4000) 09:06:15 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x80200) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4420}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, r2, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @empty}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2e, 0x10}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x28}}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x14, 0x11}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x55}, 0x4000) 09:06:15 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video36\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, &(0x7f0000000600)={0x0, &(0x7f00000005c0)=[r2]}, 0x1) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000480)) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) pivot_root(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)='\x00') ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000006c0)={0x1, 0x0, [{0x4, 0xa5dd, 0x6, [0x3, 0x100, 0x80, 0xdd, 0x6, 0x3, 0x9, 0xed]}]}) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x1c, 0x199, &(0x7f0000000080)="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"}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:15 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x400000) 09:06:15 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$USBDEVFS_GETDRIVER(r1, 0x41045508, &(0x7f0000000080)={0x585, "4accb0d5d4a22d098e2a7f8497b760d00afd0be5050328c84563a2920e0dc5cf3b478bb2a7acae956614c370471fd80070e742c98e76877c4730d92f0577e3a460a06b2ff4dfe242c079728870c583f0f5656adb995d3a6f6b8ceb36686a5f5e224c3d72d672ec210e564abe235cbbe830c208e8e37c09a731025fbf144ac6a40d79553ae9ad583fc7629180f2f154e90ac5da7f9f91baa9cca4cef9aecb6d8e6149bdcca40f36a9feed9f2c167851af8eff809dedf9082d5e460306e52f4e0e2285c939267755ac9a201c958842abe6801accef880fde764867cc59b78d990fb9f8928b107aeb950979853741f73797675686eccf8560f42b28a84c1050df65"}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:06:15 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x800000) 09:06:15 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x2000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80000, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000080)=0x7) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:16 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x300900, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:06:16 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x6efb36a3395bec7b, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x1, 0x0) prctl$PR_GET_SECCOMP(0x15) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000080)={0x6, 0x2, 0x6f, 0xb528, '\x00', 0x40}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) 09:06:16 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r2, &(0x7f0000000080), 0x0, 0x100000000) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x7d, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000380)={r4, 0x6a, 0x9e, 0x81, 0xaaf2, 0x4968}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={r4, 0x90, "443c7082edeef6987b1ff3c46421790782980aea0807cecd05f4ea81e663cd02ea061dceccb4fb94bc111afa535d3edfd35cafefd53ceec66a9eb6420edeb7193527e0f78b6f348a617bbbaa993b6b055d0cff145019ce6f199946a2f76ade61b22ce1a31300e247361907b5f211e55ab292b65389dbacd426ecd0ce992d761793eaf0a5f4feeeac42e79212d7cfaf79"}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r5, 0x4}, &(0x7f00000001c0)=0x8) r6 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x8) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2) r7 = fcntl$dupfd(r6, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r7, 0x0) 09:06:16 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000100)={0xee800000, 0x4, 0x4, 0x400000, 0x9, {}, {0x0, 0x8, 0x2, 0x8, 0x2, 0x81, "dba2822a"}, 0x8, 0x4, @offset=0x80000000, 0x80, 0x0, r1}) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000001c0)={0x6, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}]}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f00000000c0)={0x1300000, 0x8, 0xbb52b3e, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x200c7, 0x4, [], @value=0xffff}}) 09:06:16 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1000000) 09:06:16 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000100)='/dev/watch_queue\x00', 0x1c000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/dev/watch_queue\x00', 0xffffffffffffffff}, 0x30) r1 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r1, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) accept(r2, &(0x7f00000003c0)=@x25, &(0x7f0000000540)=0xfffffffffffffcb9) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000840)=0x0) getpgid(r3) sched_setparam(r3, &(0x7f0000000040)=0x6) r4 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x2) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000140)={0x1, 0xfffffffffffffff7}) 09:06:16 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000000)='/dev/watch_queue\x00', 0x40000, 0x0) 09:06:16 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x2000000) 09:06:16 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x4, 0x100) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x22, 0x0, 0x0) getpid() ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000016c0)=ANY=[@ANYBLOB="01007b00bb407f30ef0873164f43ddcf0112cf1453bdaf4de1b7d0fe5b99ca23b578a0a9933caaf4edfe07654309009308a0be29f350afdb080a97a8e7d139830f9986b0eca2ffe9e16ad5c2be7bb5552501b057e916b70e38b50abadfa802d858944d017d92634c5c16c378f57982fdc0eb7a15b489f376a3f718d7b45323df7dc1"]) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10000, 0x0) sendmsg$unix(r4, &(0x7f0000001680)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001600)=[{&(0x7f0000000180)="6d1fdf0fa2b02ca5503ed775b6e382f7a3e625f2758ba1e7c2d7ab0ad954761f78a6fd6a4ef062398f10282cdd0c4974f178e6501cd151825b095dc3a31e0b00b3ce7dab6bc9a3096b6084691aa87ee612d82122254871e1df5807af29bca8204a8080361c4345a3dfe551d29f0fcd6ceac59181c28cb2478dce", 0x7a}, {&(0x7f0000000200)="141b59076f996d6528c070229bc7893cc3c681547bb991058d4b4773d58b4199aa4326ac3176c0fcf9f27b3b49cdb21da49e272045534fc67eff4847b7080632fa03405d79baa08acdeb64d4900cfdce4f8e87c84910a2b4a0c26a013341b0fdb4c3fb18aee0346c0b8114bb18264997a1f8eb0458b3d2d7c476742d18c1423aaab30eecc04b2206c6df4dce9f74ca70fdd0e8764ffe4603db751135", 0x9c}, {&(0x7f00000002c0)="4a6e5900491c643ff288a025b85120ed62d087f35e27435e74d979e5422c57d8f3c3385fd316abc9a0e033f51c1ef7f81b634a7ea8cd9e8f7f013426861ea17f9ca22f6a8f77ebbae46d0033d5efbd4c3d4a957ab7e1ff0aaf3d6dc8767a60046b557a3bbf20a8f5b25f82c51669305268", 0x71}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001780)="af30815a6fbbbf9c2f52b7a728e2a35847397e4e1574a17d7cafdb5f04e3edd0d65c8d66957c07f5f24242cf84be1d8de60ece10ccb051716552ed711ce4def660cee9d85489ff8f6edf381b51e333aa85520aa537151fb77de4c7c4e2be910422a9aa4ed7c330435cbc9830eac12fa0114e43965f6de75e480d6120bda242346eb8bfa2424dea5fb24bf7ae7a4709df", 0xfffffffffffffebc}, {&(0x7f0000001400)="11b07c22b90ed72c7a3a92d9766f3f0984f14f1fb06494c94545498fd5e7d849d400f9aa3ddb72609ce2f4e8b11c0d7d0055e755159c3201caf240bdd05db0596c97dde56238a0ab51a983f690cfa85f70b9dee0c783ec76e29a3be14dfdc9915f9a76a7826039f1dd886c1a328b69ab2936c4c70e2cbbf8a27ee52e7f", 0x7d}, {&(0x7f0000001480)="44574d9291750e9c1fa8d78ef36022764a622c669e583c90f469df819e0a19a9cf1c7df7d9eaf2ee0fae4b3f5e3f7cc1a1f8bf813a65426a3c54cea9559a8511b056822488f7649dbd38fa5c13dec892178ee701459d23f9ddfd8d821a380df85ceb5ade670104a32bba81ee3ecbcf57378ece00e7721bf99efcb18d55d3a26f49bc7d8286649084ed109c0c011b3c08b168076753299585ce049240f5ddb00944221fc5528576cfe48f007e570685c081f8bf487be890771b12d99a5fb24afa4a6b40d6ba2c7dfdc016eabc433736db7524ab3722b935db94400b2bcadf1c8697256efc7544", 0xe6}, {&(0x7f0000001580)="f325628acfc4af17ba7efed7ddd37b08c5c9422f3c65c27d1c63ba21b4f9edf73db6de69220d7449a9f65c0929f24705e2b78fd8c528d3defc523fb00b2f5b8265393bc7126ee38d64d687b19a29351179a5443e75", 0x55}], 0x8, 0x0, 0x0, 0x400084a}, 0x800) 09:06:16 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x4000000) 09:06:16 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000100)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x94) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) getsockname$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x20) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:16 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "94dbca815f710381", "851996876339beddf4823740b3a33f65", "15ac4f4b", "00095099e61c873c"}, 0x28) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:06:16 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000000)) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:16 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xa000000) 09:06:17 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0xa0800, 0x0) unlinkat(r2, &(0x7f0000000140)='./file0/file0\x00', 0x0) r3 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$SG_SET_COMMAND_Q(r4, 0x2271, &(0x7f0000000000)=0x1) 09:06:17 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000200)="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", 0x7df}], 0x1) ioctl$VT_RELDISP(r1, 0x5605) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r3, &(0x7f0000000080), 0x0, 0x100000000) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x7, 0x4, 0x410, 0x0, 0x108, 0x0, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000100), {[{{@arp={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x0, 0xc, 0x6, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff, 0x0, 0x1fe]}}, 0x1f, 0x0, 0x7, 0x4, 0xa8, 0xed, 'ip6gretap0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x51}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xfffffff9, 'syz1\x00', {0x1f}}}}, {{@arp={@remote, @broadcast, 0xff, 0xff000000, 0x3, 0x10, {@empty, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@random="e6554f74c953", {[0x0, 0x712b558b818898c2, 0x0, 0xff, 0xff, 0xff]}}, 0xa12, 0x3, 0xd9f, 0xadb, 0x4, 0x7, 'bond0\x00', 'vlan0\x00', {0x1fe}, {0xff}, 0x0, 0x134}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@random="71275342156b", @dev={0xac, 0x14, 0x14, 0x2}, @multicast2, 0x8}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, 0x0, 0xff0000ff, 0x7, 0x5, {@empty, {[0x1fe, 0x0, 0xff, 0xff, 0x1fe, 0xff]}}, {@mac=@link_local, {[0xc3b721ed41b08c8d, 0xff, 0x0, 0x181, 0x0, 0xff]}}, 0x0, 0x8001, 0x5, 0x9, 0x9, 0x3, 'bridge_slave_0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @empty, @local, 0xf, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x460) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7d, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000380)={r5, 0x6a, 0x9e, 0x81, 0xaaf2, 0x4968}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={r5, 0x20}, &(0x7f0000000080)=0x8) 09:06:17 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) 09:06:17 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1c000000) 09:06:17 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000000)='/dev/watch_queue\x00', 0x686100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:06:17 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1d000000) 09:06:17 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x2) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:06:17 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x40000000) 09:06:17 executing program 1: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r2, 0x0, 0x1, &(0x7f0000000140)='\x00', 0xffffffffffffffff}, 0x30) ptrace$peekuser(0x3, r3, 0xffffffffffffff81) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000080)={0x7fffffff, 0x3, 0x4, 0x1000000, 0x91, {0x0, 0x7530}, {0x5, 0xc, 0x4, 0x2, 0x4, 0x0, "834bdbf9"}, 0x5, 0x2, @fd, 0x70, 0x0, r0}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) 09:06:17 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x400000000000) 09:06:18 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x60, 0x2b8, 0x69b7a3c58a6db844, 0x360, 0x3, 0x8, 0x2, 0x2, {0x1, 0x7f, 0x1}, {0x3, 0x2}, {0x800, 0x100, 0x1}, {0x3, 0x1, 0x1}, 0x0, 0x142, 0x6, 0x1, 0x2, 0x9, 0x0, 0x3, 0x1, 0xa6, 0x7fff, 0xfffffff8, 0x4, 0x100, 0x0, 0x2}) r2 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, &(0x7f0000000000)={0x8000, 0x9, 0x2, 0x4}) shmctl$SHM_STAT(r2, 0xd, 0x0) shmctl$SHM_INFO(r2, 0xe, &(0x7f0000000080)=""/98) 09:06:18 executing program 2: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r3, &(0x7f0000000080), 0x0, 0x100000000) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01003c85", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7d, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000b00)={0x0, 0xff, 0x5, r3, 0x0, &(0x7f0000000ac0)={0x9909f4, 0x5, [], @p_u16=&(0x7f0000000a80)=0x4}}) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000b40)={0x3, 0x1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000080)={r5, 0x94, "fcb208f678def26b3bcb871bdd55a14f6a670b960d5775354f9adf8652ec90565c57c3383f11f6aa6a6bcb4742527d2f5e5ca8f8c286ff8d7453226d9c545784fa9667da62eca6c9e75f8f1452dbe445e8099ff2298efc036616d7cc1b26059c2567563be66d34afc27e777e6453e5787b620746c2e846cc89f7a7492c6f4278cf765dab4ac6004910003bfe28a69abda5ddd475"}, &(0x7f0000000000)=0x9c) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000140)={r7, @in={{0x2, 0x4e23, @multicast2}}}, 0x84) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) clock_nanosleep(0x2, 0x0, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r8, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) accept$ax25(r1, &(0x7f0000000440)={{0x3, @bcast}, [@default, @null, @rose, @null, @null, @rose, @bcast]}, &(0x7f0000000240)=0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_tcp_int(r9, 0x6, 0x0, 0x0, 0x0) r10 = fcntl$dupfd(r0, 0x0, r9) fsetxattr$security_evm(r1, &(0x7f0000000a00)='security.evm\x00', &(0x7f0000000a40)=@sha1={0x1, "f33d0ceea81d3e6b7c4d626d49571e08f3bcc9a1"}, 0x15, 0x6f1e6f72a7b669d2) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r10, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r11, 0xc0845658, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r11, 0x84, 0x1a, &(0x7f0000000b80)={r7, 0xb6, "cbcf9e39e14c8123eea4d7c2715a08c6992ef78367a4df09a374685c03c057d146314c3b6156d8600a95177d837f024f25fce379221d4947239cb6fcd3764976a3f999bed96b5646ed9c5e3665dc2bf72fa7c23ffecf1ddad544c8928d5712f627896418e5210f58fc4583393638a075c4ec53ef719e53cdb5c7f0fc891becfd804bf0b404a9771cbfbec87e8ca45cfd364714a3e7311b8942c58878efefe6fd9e0eee8974443c5ac6ee2fea31e71accd402bdb2decc"}, &(0x7f0000000c40)=0xbe) syz_open_dev$tty1(0xc, 0x4, 0x3) 09:06:18 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xffffffffffffe) 09:06:18 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x109000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x303, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x38, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4058090}, 0x4818) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:18 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) fcntl$addseals(r1, 0x409, 0x2) 09:06:18 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x80000000000000) 09:06:18 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x82, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f0000000080)) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000000)='/dev/watch_queue\x00', 0x309583, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) 09:06:18 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000000c0)=0x1000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x1, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x260, 0x0) write$P9_RLINK(r3, &(0x7f0000000140)={0x7, 0x47, 0x1}, 0x7) 09:06:18 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x100000000000000) 09:06:18 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x800, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x48401, 0x0) mq_timedsend(r0, &(0x7f0000000080)="96eec2294bfca1f5a2fa9046d729537d5587426db006f2e381cb83fd364336daf01fb091cfecdf7547574f6a77a0abc0a76ad65fb2f5d22d25b27c82788427e6a362b6d411a842e369d8500925d7f93c1707ecb48ed2fb178449a677f15761ca91cac30163e3a6174847b1f18f4899ee6774ea492085f8444cc09dd9af5df493d51885a37410a35ae5656d1fbe6113b3a7a0a95de0838f7d5ea5cb03cd16e844a81e331e484d04b7ea5d75d042e9e37cbd16e6e6efcb6835fdd7db6dfe5b8cd15a2248754b300177", 0xc8, 0x80, &(0x7f0000000180)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000040)={0x4cb, 0xfffffffd}) r2 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000300)='/dev/watch_queue\x00', 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x101002, 0x0) ioctl$VIDIOC_DQEVENT(r3, 0x80885659, &(0x7f0000000240)={0x0, @data}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x0) 09:06:18 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000000)='/dev/watch_queue\x00', 0x181000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:18 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x200000000000000) 09:06:19 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x400000000000000) 09:06:19 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x2, 0x8000, 0x1}) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000080)='/dev/watch_queue\x00', 0x200000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) 09:06:19 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) socket$l2tp(0x18, 0x1, 0x1) openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x200, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x2) 09:06:19 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xa00000000000000) 09:06:19 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x4, 0x8}, 0x8) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) 09:06:19 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1c00000000000000) 09:06:19 executing program 2: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x20000, 0x0) r2 = openat(r1, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) r3 = ioctl$TIOCGPTPEER(r2, 0x5441, 0x100000001) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x402801, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r5, 0xc0845658, 0x0) r6 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r6, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_tcp_int(r7, 0x6, 0x0, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r8, 0xc0845658, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80000, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r9, 0xc0845658, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r10, 0xc0845658, 0x0) accept(r2, &(0x7f00000003c0)=@x25, &(0x7f00000001c0)=0x1d3) ioctl$sock_SIOCGPGRP(r6, 0x8904, 0x0) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000840)=0x0) getpgid(r11) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r12) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000080)={0x8, 0x400, {r11}, {r12}, 0x800, 0x1}) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000000)=0x1, 0x4) r13 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r13, &(0x7f0000001300)=[{&(0x7f0000000200)="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", 0x7df}], 0x1) r14 = fcntl$dupfd(r3, 0xc0a, r13) pipe(&(0x7f0000000a00)={0xffffffffffffffff}) bind$tipc(r15, 0x0, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r14, 0x0) 09:06:19 executing program 0: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000000)='/dev/watch_queue\x00', 0xc00, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x39, "fe36072302e8fe944ddae077488680e4d97eb966a1ac0f64f30a4183eda8c561b4ad93bc13bebc6899bcc5a90712e1f4d2b0266882572d0715"}, &(0x7f0000000080)=0x41) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xa4116345cd71311f, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x19) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a1, &(0x7f0000000180)='syzkaller1\x00') ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x8) 09:06:19 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1d00000000000000) 09:06:19 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000080)='/dev/watch_queue\x00', 0x200, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4800) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f00000001c0)={0x9, 0x1}) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000000c0)={0x4, 0x4, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa00965, 0x6, [], @p_u16=&(0x7f0000000000)=0x1f}}) r4 = syz_open_dev$usbmon(0x0, 0x45, 0x0) recvfrom$inet(r4, 0x0, 0xfffffffffffffed0, 0x10000000, 0x0, 0xc0) accept(r4, &(0x7f00000003c0)=@x25, &(0x7f0000000540)=0x80) ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000840)=0x0) getpgid(r5) r6 = syz_open_procfs(r5, &(0x7f0000000200)='attr/prev\x00') fstat(r6, &(0x7f0000000240)) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000100)=0x8000, &(0x7f0000000140)=0x2) 09:06:19 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x20, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={'nr', 0x0}, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r3, &(0x7f0000000080), 0x0, 0x100000000) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7d, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000380)={r5, 0x6a, 0x9e, 0x81, 0xaaf2, 0x4968}, &(0x7f0000000400)=0x14) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000100)={r5, 0x7f, 0x8000}, 0x8) 09:06:19 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x4000000000000000) 09:06:19 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x4000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:06:19 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x8000000000000000) 09:06:20 executing program 1: syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) 09:06:20 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0xfeffffffffff0f00) 09:06:20 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000080)={0x7, 0x2, 0x4, 0x5000, 0x5, {0x0, 0x2710}, {0x2, 0xc, 0x5, 0x2, 0x4, 0x2, "fbe8e4a0"}, 0x0, 0x4, @offset=0x4, 0x1, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:06:20 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x1000) 09:06:20 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x100000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfea1}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006000000"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, [@gre_common_policy=[@IFLA_GRE_LINK={0x8, 0x1, r5}]]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000000)={r5, 0x1, 0x6, @remote}, 0x10) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:06:20 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f00000000c0)=0x3, 0x1) [ 400.436659][T13014] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 09:06:20 executing program 4: prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) fcntl$setstatus(r2, 0x4, 0xab0bb18d2b4bec2f) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r3 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) [ 400.534673][T13014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.572455][T13019] bond1: (slave gretap1): making interface the new active one [ 400.609429][T13019] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 400.627955][ T2807] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 400.677593][T13014] netlink: 'syz-executor.1': attribute type 1 has an invalid length. 09:06:20 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x4, @local, 0x9}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x2, @local, 0x9}, @in6={0xa, 0x4e22, 0x5, @rand_addr="f71061c86b48da8f1ca5b8dfe7ca93a0"}, @in={0x2, 0x4e21, @multicast1}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}], 0xff16) 09:06:20 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0xd, 0x4}) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000080)=0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_void(r2, 0x1, 0x3f, 0x0, 0x0) 09:06:20 executing program 4: r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000080)) r1 = socket$l2tp(0x18, 0x1, 0x1) openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000180)='/dev/watch_queue\x00', 0x8000, 0x0) r2 = msgget$private(0x0, 0x4) msgctl$MSG_INFO(r2, 0xc, &(0x7f0000000100)=""/7) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x4) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r1) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x3}) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x202000, 0x0) 09:06:20 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x400800, 0x0) getrlimit(0x5, &(0x7f00000000c0)) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:21 executing program 0: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) 09:06:21 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r2, &(0x7f0000000080), 0x0, 0x100000000) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000380)={r4, 0x6a, 0x9e, 0x81, 0xaaf2, 0x4968}, &(0x7f0000000400)=0x14) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r5, &(0x7f0000000080), 0x0, 0x100000000) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="ac743650ee693dbf28b56acdc36bf529aa58f6627ecacb9cd392544672c8a79405858110836d328888329914a7e7b086e8cccab7221e213d94", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x7d, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000380)={r7, 0x6a, 0x9e, 0x81, 0xaaf2, 0x4968}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={r4, 0x3, 0x4, 0x1, 0xa4aa, 0x5, 0x0, 0x9, {r7, @in6={{0xa, 0x4e22, 0xffffffff, @loopback, 0x4fef}}, 0x10000, 0x3, 0x80, 0x9, 0x7}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0xcd2d, 0x0, 0xffff8001, 0x5, r8}, &(0x7f0000000180)=0x10) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r9, 0xc0845658, 0x0) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvram\x00', 0x8800, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x77, 0x5, 0x7f, 0x6, 0x0, 0x0, 0x809, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_bp={&(0x7f00000001c0), 0x4}, 0x4039, 0x9, 0x80, 0x2, 0xffffffff, 0x8000, 0x2}, r9, 0x1, r10, 0x0) 09:06:21 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) fcntl$dupfd(r1, 0x0, r0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x8010, r3, 0xf000) 09:06:21 executing program 0: symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000000)='/dev/watch_queue\x00', 0x10000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:21 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x8002, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = accept(r2, 0x0, &(0x7f0000000000)) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) fstat(r4, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r3, &(0x7f00000007c0)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000100)="2964a3af37bdd9bd210126179b732a3a299a5d1a4d8144362b0d9c71c7641a08719b2ec05dfb1f6b03c8796b5ef29955b481d055a5c7183de2db45259859155183a60769d9c67474c86c95c0c6f3f10e4cd33dab8fb1578ce010d8d89b6a354dde6101182c", 0x65}, {&(0x7f0000000180)="ca468169b2228a91eabc35eed8f3d0e45dcfede12614eb2f625b3854f25b9b7070c1f78f3fb4e1255b53cefc243132bbbda91bedf629812e2d6ae45f47f366317d71e3f7448809a420f1199ce4b7804f70d2a10575994b31b93494c158a5", 0x5e}, {&(0x7f0000000200)="5e9faae85c4de16f32c6728ec56a44fb0fb922716dbf99404e4c6b63f3678dc69d5df2c2fe29bfb7034485d9e3913ca996a5362c8b39b3732a5a37022d1ad9c2d73ece3d31f375b05681cbdd10f766361143ce1f7012561dedc92bf57b27acd686a6627a2698f2433cfa094c43540949494f", 0x72}, {&(0x7f0000000280)="c93ffbf7941a7631390c4a788e2c0f84515bdc184ab8fffcdd9f292f4cd521eba2db84c8388af9382b93cd4aa9a6fa66b1d3da9e8fdb9ef90e706e7cdfbac798331d988fa12a166e0263812a1dd8c07bb7", 0x51}, {&(0x7f0000000300)="234d50639727f82c3b54923e472f5baff761f2958305d2b2b3a8230ef44483a66a661e416f9c81ddc795dbd52d8103f285245e963b2c9f4fffc8a2b9b788dd28d8e386b4823a30e3317f5aa857adde7fc6935e5991cbd3ddce4065c62ecc6749", 0x60}, {&(0x7f0000000380)="c741c5f0789c28f05317503a8d17e388674fd8f2617c5c19a7d3fc53f1c7dc3ce8fa85815b6f57aa326160ab66f5325c62b32a87168f5b69addc9edb874fd39263af3d2d799f86a30bdfbb80", 0x4c}, {&(0x7f0000000400)="2d2672f07b4d228b43bc932d6a298fffd1cbcaf028170b17ef1fea7ac080c88276d9bafea15047e7494c25cc75e2e2850b3e6e57a06abb710b146f23", 0x3c}, {&(0x7f0000000440)="ecd7be641238e8e73dad61ede79e68e447f22face53fc650b631d5cc3b214dcafc14c4d760948dec0248834d9403985a871249216315aa8a4f12585bd3a584bf964e049f3ae302477ab76567183e39e05e172e7b99fc8d3025dd8de919e4", 0x5e}, {&(0x7f00000004c0)="3f2225f3fc287270343bceb301ad7beac491144f74efcac56ae7f45b374ca8c6f6b3f8bf36d370e0b1f9f73742542afc9a08b7bfaa9366f2f564d88c30e7b21f81e3fa6ce3210657b3f814d09371d883f8c6a6ae39403800c829471cec28f2b2c6f9f176da8a6b6284cdcb96bec5f4ad20be631c8721844e167c6f0657c560922ceca48cc767e54849e3959ad1424ba5936d3ff10fe41f66575ca342b93e0ed80032ea44de47cc3598a407b2606912aa302bc7ae5b8886428f76a1e8df33835b792b3cf65ecdf35f3a83", 0xca}, {&(0x7f00000005c0)="6c06c9f9f2640190e0630eedea5ed15c3b2254bf3edcefadbf5185b5c42c367134605e8f5d750eb6c3bd0e12eb82ffa8e064f7cd1a92fcc31966f1a09409307a0863cd2ed7491d1f377d05af7b6b2962f80e6d7f", 0x54}], 0xa, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r5}}}], 0x20, 0x14}, 0x40000) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x2) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x11, r2, 0x0) 09:06:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000080)={0x4, 0x5, 0x4, 0x40000000, 0x6, {}, {0x1, 0x2, 0x5, 0x9, 0x8, 0x1, "6b7ad47f"}, 0xe, 0x2, @planes=&(0x7f0000000000)={0x3, 0x9, @userptr=0x3, 0x4}, 0x46d1, 0x0, 0xffffffffffffffff}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000140)=""/114) signalfd(r1, &(0x7f0000000100)={0xbbcf9fc}, 0x8) r2 = socket$l2tp(0x18, 0x1, 0x1) r3 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x8) r4 = fcntl$dupfd(r3, 0x0, r2) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) 09:06:21 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000200)="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", 0x7df}], 0x1) r2 = socket$inet(0x2, 0x802, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000001940)=0x10) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) write$evdev(r3, &(0x7f0000001980)=[{{0x77359400}, 0x3, 0x300, 0x3}], 0x18) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) process_vm_readv(r4, &(0x7f0000000440)=[{&(0x7f0000000080)=""/195, 0xc3}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/127, 0x7f}, {&(0x7f0000000240)=""/38, 0x26}, {&(0x7f0000000280)=""/108, 0x6c}, {&(0x7f0000000300)=""/95, 0x5f}, {&(0x7f0000000380)=""/143, 0x8f}], 0x7, &(0x7f00000018c0)=[{&(0x7f00000004c0)=""/32, 0x20}, {&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000000600)=""/9, 0x9}, {&(0x7f0000000640)=""/171, 0xab}, {&(0x7f0000000700)=""/35, 0x23}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/194, 0xc2}, {&(0x7f0000001840)=""/97, 0x61}], 0x8, 0x0) 09:06:21 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x10040, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000001180)={0x10001, 0x400, 0xffffffff, 0x4, 0x1f, "70ad753d8dfd0bb8b8a3e254148243ef7dbd66", 0x0, 0x3}) r3 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) preadv(r3, &(0x7f0000002340)=[{&(0x7f0000000080)=""/132, 0x84}, {}, {&(0x7f0000000140)=""/52, 0x34}, {0xfffffffffffffffe}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/239, 0xef}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/173, 0xad}], 0x8, 0x9) 09:06:21 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x200100, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = perf_event_open(&(0x7f0000000240)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r3, &(0x7f0000001300)=[{&(0x7f0000000200)="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", 0x7df}], 0x1) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000000)) 09:06:21 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x38}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001200)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000001240), &(0x7f0000001280)=0x4) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x2042) dup2(r3, r1) r4 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) 09:06:21 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000080)=0x63, 0x4) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x0, @local, 'bridge0\x00'}}) 09:06:22 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) getrlimit(0xb, &(0x7f0000000000)) r1 = syz_open_dev$mice(&(0x7f0000000480)='/dev/input/mice\x00', 0x0, 0x6400) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000004c0), &(0x7f0000000500)=0x4) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) sendmmsg$alg(r1, &(0x7f0000004a80)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000540)="0ed0d4bccd222cc2926532424d6662a1024bd11b544d6ce943bb936453d04b624e240985a116b68039134e93ed9e05a17aa44cd39199034262a365d08e1b5d2ddda7aef9cb0eb3ff4615c57fe7bae006f61599474362beebdf81f2a5b087c838f8a493a7481ce9eaf2c1fb906abb40927c5e84912c53782386879fc49162d97abce964483f4cc4a1f68d23fcc7b1ca20960d3bb40796f5927cff7937b5e7eacec360e6a00e390a40873a6623188e4af48aed318d4c2038e2d138390b7f2ee1fefdf73a8973c7550e5e2468deeb8d82168ee9515a856a3ea9ed3debaff9fcd0e0add015a2c07b0d24645a5dbbd601af3d44793cec7bdea6f491a91d3283e44472a18fba6eb3d01897586db7f18e1a75b342d40fdc2002e26a54f4afefb0a2f72f0fa45b3547531a85257268325b04f443f86c4b90b7204ea1c7fbceedeb2fab19d83f53a677a37cc52ff46bb84814322d0f00bbc86775b66cd11b4774b4c93741cabcca9d03abecc9c27b8fd06862f54eb9e6e1af98e33f1b4ccb7dbf7fe07581fa8630ae94cc4efa11e3bf8180fd36f2b655b51d9c085132621f21456ea106f5197d4b32820d2e5674f72d2ae3e878c9415361fae52d4116802450852245761ee2715ce338b8e55d5baceb93c8e3696e6aac82dea6a571380fff59a9b88c468a59f16d11a1f2c7c781b7d2b9dc5230a3f5b3c052a2f57ab4b7ff10e8f7026bcdf6c730ebb20c98903e594f62bed8b0c55c9ad89fc7fedcd9a62469509a05b3c511650e052c897255008d8b9280d0937dab3567565eb73974f3d2a70358aca22f4e7d8edecc5eaa7c61e00cfa1d45616fe88131221eb7ae3edc38bb174acea340fee3bd88eb943848d2045d94da176b3a8c9bd71feb7095308455dfe3a1b4c54373c26c82c54e63782f9a5e6b5d8481ef26475ac147970fb09d76b44d9cdd2a149a654e812b50089748279f09004ea7fd0ab3c58f9541f90dd7679dddb2ab21716ed5faa916ce1834d87cb4bb4162d8f37d66028837b0db6be5fb717cf6a25e2557cff5c22a6b4668c632fc205a82addc9795a674a8968443c7fbee88a1c721f403dc54cf8cac3601ee1e22287741f7f6bb27557c0ceaef6ac87765ce91a0d7adbc96234c661c0c3bfd0e0254dd1d1b41af62bf94706a336093ec3d858f51b1404ec0d728d16bdb9ece508e7d0408eae6a98a690abd73523b257e1290df62b803ffa3efe4f2364e07ac93294932c081e5150dc0de8bcefe8c3d81f40e37d1467adee8d11f7206f5bba2ed883ae795f7bdb0be5224a314ef2b74fd884a9a099e5a2e79edd164c45d3ea5092efc61ce0b3a15552eb6f6e2bcdab28f9c53d3388f71b9d551c93a810abb8867380540a7fadb584f84928d55ea64ff553b339bb6e4d279ad14965585aaed4ea57cf17a2d95147a0cec92cb7c9da887e8786ac26178c75ae3c82882d6edf93bf425d2701990624765d63afccdc3b6253fa3456dee60d968170b8d35f1484a17b30b2eb2fb0e415a3f74caf1d8551b3b56b7bae124a775331c7460863732b41765a51ad8c0f5a7f40e13791d4c20929dde39858070d6e1aeda751b165503909575e1d1689028149ed843b6e3cf10f42b15e4c34fe585934a2413ec67fd23ff1ac91375decb4ef2b0453e2fd6ac7ae98e4af0e0e789c5463a3f9d1f824d90510b81f8a68ffc7886db609b0b8813023976602179ca050f0a1ed2dd1a4a2e2b8fde1024766a3e721b0d91f53c39d0b18f11684ad9ba05eb6d9dc4d24ae1f0ce19ff5ec098b81da60a19d36f5b2e6436486302f218cea4422f7ac98d18e2d313e6d026f178b9695e837a20725d697be3c461d8d2d77d918bfe38410eec0814029b32dafbe4a845e1dd3f6aa0433d115c2e46883001d01020651150029f3537401c4e3777123d8e013e0ad9911cf70b7bfab005ed46e1fab4f98349de9f26534d0fb0c006b0c7776792090357810606bfcb08fa4472713f3ee4aac224a9d3ef0a0d032d6ac2e06a2635f60ab883579a5db6eb574fa3c7900c9db3886e109bb14a49391cc7f4e9d2706fd0a4495a93d589b6cf1e11d7094700782aca448e42d61aafcd9faa53394cea2417deb169e849bb6810d31e5b48b1b95004deb067422f8b547c99a3326fb2c29b2cf0e9765ed11b421787a95ba15677d48406a5d41f8ba3dc5192fe54e7dadf5784a87f84fb9fadc6756c7ac4b048da1858cce9addf74376c2b9ade127f786ce34ebdd49c41f37901f16d0e979b8c175b8a5401f6c8e8feaad3c279aa2f65259b72fee2cd1bd3e0c704c6a23a73b5555c22d20213f3e405b6efd6d75e60725cfb5e5983da6dea0a724e5406749e2751cfa914908c724e51d77f1328f66e7f8199241f8c1581290b4564bbe74ce687df59516b6b3eba8a4f741c91712763bc3701acc7028c5cbc44e82773a14865c0b31e4946c060b096661f2bb1f07a67315c9e506d81275e53cb46c5b163fa38bfdf35482bcb18660b49d6322448fd2697a36996420e8714bd18199e6d7a8bbc35f8fddac9106bc4ef2327c40f2d38571add533520122ee722c5193d730bc959f6e4fd2a62c2c9b3262e8cd799e3e4032264e8aa4e08237d900448d5757499186ae60aa82107b68c0f0c7860b106c6b44196312ffaaf2f5bff3061adc6da484f71949f640017c5a12fb9b1eef63e5ba3d238d07d94306b8fd7a8668fc2ae55efec71953d6d468cef6f853c4d4939aeba800591394a57ce9dcf7d975faf15f9068ee593e926bfc24cc245597ddccd25dae8c6ea33e288634a3584ff7a0ad8532217b5ba4a8a6628dfaacbf5a92e2369bfcc52bc21a0c8c66670626e1a702462b9a6150760741755176860cf732f7344645ff4d64000ae23b3c3c2352d81c70f8e333457f10452aa395f0652366662635d2ca4c9a12324a3404ea6f246d6e636805893071e79ae550502d293b9e8c64415441bfcdcdbcbaa136e8f3f5ff6f52b96bc7369c65bb54b5308e581e178a7e34bda0612fb91976588a85223ff090ca81c2c161a37d4cecfbbfedc82f3ab1ac2222ec91947e38512644ff62f1d68bbefa47eea919c67410fe0c743d4006ed42dce5ccfc0521209877f687176aa5be1d43ad2db90e53b4020b69b7a5059d85a445e2c2a5891cbf4db962d8a4a201f1641da3045e9bd35f67b474fec73d6526939c67e131414ce65d412ea1d194aafa3c291119bfcd1b22c3b15b747e181436692e23b3f3a26ed8a997e22aec58a5b7b5acc44b94641ab3f69ae0238dfc69fa92accc534e01ef390af667e472ec5d7aec724114bed106184d43aa66dd2a436504e67dcf6e3759fa10ca8d04897451ce2ff04f57a6427a8f432b65c44c164a8f31cc23a2609abd5e2ca086c2283ee5b04631843d7e1dc0bfd5b55abd017322d4264c3f9804b3b4a02b5f2811719f5ff7574b8072cf37c0aad383893dbcdc9014dbe11096694dfa58bbe9fe50f18497407ec98b46678e159c896978be0d128b0219516d1030a8a956a9b20e6fd27173421aab6f3cb8f59a890950a50de78405f7bb9131301c27deda18652f0b57c3584a85825371450815a5a544498266a63835e5d4296a2d5462980c90b924fa691973c6d21c8ce2861e5afd75bc47c2ba157805643932fec28c90e899f3202b3ea9ef3cb4281807e6b851c70593173f15de9416e9376ce6d8dd828ea449c158742c8990af47de357588df4b975099fbbc6b961475ef8cbba65d5cba7f5799172422bb7814ff691180efe7f1c290ebf58ea50bf6290bd0d790500af3ea9fb9e17ed1963c2bd56019ec5e99f08b7c415d002bc448bb9d40309cf48b5c1a7c7d33bc3be2ce47b84722def95f0dec78567f191f15852c79ec6610a79bf503feaaee0db35593dc22dec3bde5864269afc68f0d332f643d97f0c1372dfbaf5e4007ffce1fb4e1f38fda59e29bffc824d96c5b6ea0ab276b4f5f866638be2d9bdb50fd1c54458992f1d268710874a366585e3a87fecdb9a994b2160f455c04604e50f9c4bb7985b87897cec221f4456d98ba6d80553d8b94a5595944cd05a2f5b764bbda000acd27f2f729f1fba143ea28b7e96caa85b7b4534b80a44e22673db24ce2a1742142d8b173e0d66a53e79a92e595812ec56834783d7b00c9fade69a713d84309818e373dbaa1dda89d4e9e417cd424e3e68cb9fb43a773e67f648d9ff5b5aede4bb488034382ab1c37a6c1deb8937e3b7dbee1ea28e1e02d25ff94bea08554d965571969e7fa26d07d514fc0f02e10d1d9a1c3743782785e10e56a8b1165eef48a6af4b0573891d2017f389c0ce49fd2fba60299e928443b47e9c675cae0f2bf2f74a2a1b6ddac02b217a659d873882e6da6f6a3328b01c7b236b1d62acfadda096928e65da7b0984ebcb96e35e4ffbc671ac6e884bfad9c3a597468f08dc5caeacfdf15ea617efa7249ec882e0af41ff5eee692204b9c8a0841fd0f1310f2e06167c43145d19f0f4ba8237574f6f82989957c0ba0467d7742eddacabe143f705b79805c7024236291006180d629a6e7106ac5a414938f503731885fa9e100be7485c49830b920433206c5179bb22144e2b19414cee9e007d6a70e6af5ecb629b392ae5b0ba9d1c82ee89080a42f3a60cf8e52ea31884a21d457f109a26f0fa71e0577239e13e1125eac51abe82181a33d360834e0e42d1d3e1bfbb5cfb9107291335e59bcc821a34934621ce4e40008444bfe9f17d78537f7c6065147e626ddb249d9c576e070981a2bd678553802cd3e46f129b784d5ac47acfcc16df404b4ae5a9a9132775b9d545f22d0c45f3e70f2461f2e9c509a2d180e154d753a5f49a988e0c8fa9144013d7e9a4b49ab1fc0aa1afc86474516eb03bbe6846f49b271af320e13da626871bcb07695384e697cfbe01ee9b5c4f1290586b7d63cb039b1a4486dbcde168f30a4116a3049169b966628e91018e50752ba6fb901fa3d364287cb731805a55433ff7139e3f0770b8b91e80aebc60c73dca6888fa458f738bbef06cc1d9c0f20d77062a96dedd752e623d7f0badb020a5086dc3c5751870fdd57c5494bc79c0054c3fffab4493de49e31832d773b9ce54792dde302a249bd755f5db5e6893eb7f2994787067f58b7f07f75ce0147ff4e917d84a6e7ee443c9d3822f758524966e72b703909a5fdc6f06aa0e483c986a293772ad4fdc1b71e5df594e7c60c38535c34ce67fdb0fd58ccf0902c13440c690637ef44c51ae7751929c3014a3df7dd65a7cd1a1c796ef6198c762a92c3780ea2cb312967230e19443ccb06095b24bf6372e20ed5d130d02f909ada8e086aa0977291208d513bf6fcfe3a6a2ee1a7e452faede53e08e256bfe803d7135e731ca721da4bf7f83fe766f522448b0fe96f04ed180965cdffde4926b4aae0a11b6f6818f8c2435eee85c77bf8603163fb553c574be3c81982cbf28efbda1835b7a3d6fbc25ae0910f679820dfde29211d650420235e8721dcba7cf3b237e76ed3608c5a8a4129757f0fd605e6a95c2529019d3ddf208f197fe769d33067d84c7f6694f31725f8b2c6706833c8faa14beb29ebc7d937c9d1c1bf52a9e4240f9d81704b124b1fafd3e7cb0b16da55a303c4a483220e67a9fd1db4b3502aecb8df03a41502948e78007e23a47427076d1a1f0562f1fe01edc6518f0b9a5bf9a259f541d771882f8410308a79a87153d52f4c7bde061cec7a28610c9117eab0b173f892f80ee1724477bb5405e1f617a185c6f4d957a86f843661bcd357140bfa400102748ba4ee462607a1829184617907304", 0x1000}, {&(0x7f0000000080)="3390b59ea74fbf0551889166b5e1fac104dddf54fc553ce0203dfbd99eb934835a65b57ac8af9802bcb943594fa0b9cbfd7a77e5a88a983cfcfd3f69fbae0ef03f83f00c85533adf691746e2f7998696a268216294d4f3f1c8c3f744cd42a84edcb7f26a764a1eb5140364e3122ccc9badbea038f471ea05fcabd4e55840982a9418f089be84a80d4db9d9242561207d8f655ee29baece", 0x97}, {&(0x7f0000000140)="ef235eacf953bae3465d77e8e4558bac0e3bcb28c8dd6ebc394e4bf8490821205eaad418695e985e071690d8b09d494a7e1885", 0x33}, {&(0x7f0000000180)="ad1f761ad7a36541934eeb9415e3ab518fdebb37dc4e07c1c98eb199469b00a711f92824fb5f9ae5d2d671f0f7475569a8acf86f627421d7c0269e3a7c7cea4b9f09a4750e763265a83fa20face58fd814e46c05c0fbd5795156252ca310d6d843dae8b4f03801bd4b6db7da499d7239625a5a75ca3bf5e3ea060ef55f7d3d9a147471d868fd12c1e38057fc36bd0d45d224004e21bdc3b0934c1f71823dfecefde5c7e9e3f8571b97a6153a34552f018320db6be0c3ad0e8472990bed1de93d3d2b70e0871ee213a3100c6a3ef83e128581fc5d", 0xd4}, {&(0x7f0000000280)="d5e2fcfbe68daedd6bb24510ad63fa257300a06bc1da88a65c590bd9554376968c481bf876af863c1a58969c84c7414555f77a87c861b74b224e4df151660da5140d213e25d6660df43910e69d71239078379a2fa1ef76bbe0c5ed5f4115b4045a80f775c60d6f60d861e9b00017fdfc3715121b65f85cddb812428fb43e20f5dd71bf7f2c3e2cd3a6fd5c5f21451e1a36f36ab2947a388b5dd08740038225aa427cef6dc8019258c01ec4bad48df4533bfb7a7913b69714712aca1219272702644974e70ddd307e1223b279fda35d9de4ed8e25bd2bb6c15933b26090997cfb14d4", 0xe2}, {&(0x7f0000000380)="dbed212c7cfb0684f57800a90bc3db95b9fb0d28c02d37f633c2fd4c2beaf30403c58ee17ba7e391314c2aab99d940c92835fdba22a5af86f782af397764837deea623541afa44cdc62e7c93381c0050b647b0d133481f5a09704f930fd19eac2a8134db", 0x64}], 0x6}, {0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001540)="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", 0xfd}, {&(0x7f0000001640)="3cdca46894ba5c840a89c5e30a531944e3d24caf3a6c0de72dd258", 0x1b}, {&(0x7f0000001680)="bc9007b0837013ad3577547f21d0eb0541725451cf1a91258fd4eec8821d1d92c0095c8c58db577fd8cadac375fcb86fab6a8129fa1ddeb7746c56056000c5177df446f26feb5ba689b53bc1f066778b748eb4ecd470305eea1d164c1944e6e1267dfead526d58f5f70a837e418637fe692218c2bfc61306ef56", 0x7a}], 0x3, &(0x7f0000001740)=[@iv={0xe0, 0x117, 0x2, 0xca, "5aeea73601595f608b731fe97572ddb536ef55b7dc5a0e454841abfdc613265766292e6fd32768c0ecaf4c2dc8f5aacd55b38fc35a40232d137f7a9963eddaea4c1d767679c78037ad007a280f7a637223dff07ba5f44a25a27b7a5b9d911d48c4e266e0e97bc8461a34995c687638aedd962040a2334a0f6140153cd6ef8ea32d5a0d0b0849695d12bc6e255408e540de3f0ef657a7c42da77a441bad9d64232142c30b997febc46eae2ff738d1b12c635eb5860e8cb6de2c0757daf8e61a016cf00852f8b4e5b537e3"}, @assoc={0x18, 0x117, 0x4, 0x400}, @iv={0x28, 0x117, 0x2, 0x11, "aac314f8a5c560751fad8df16916d79263"}, @iv={0x80, 0x117, 0x2, 0x67, "c8ea5def13b48a6874521e8ee283f8317e5572da22a310635abdb728ad3d2999bf8393204a38f6756e5de7d7b0e1f6b65a37af820680eff6a41554650ed95b7b5b7d5ef4ac922788f01b20be0fb6dbe28f2cd1dd8855a04db9d946823063d31abccab872123adc"}, @op={0x18, 0x117, 0x3, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0x1d0}, {0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001940)="1e79d77f9e657920d48ca3ec580431c4c0e251ac94508c57456531d2ac865c781d14320c440948a150ed75f250c5cd7ef7e113ff4e39230d9fd68fea9e6bf5493032ab1e6ce8689755a8e3bcc554489f3b5aefa246136237911cbd033a344550c254023320f29d65b522892553d97a65037481bd704a70f94581450bb2ce", 0x7e}, {&(0x7f00000019c0)="a7adf5c7f93bb6b2df0d30464a71d1df766a3903d0fb5818e7d7db13bbcddbe7b2468bf49e051688f3210f50736ab55057c20c87806b95f8a0e97e0c6384580228d63f37459872c9783992734e06efc9722b68acd3ed12aa1263bf540a70d29c0648446ac2716dc7", 0x68}, {&(0x7f0000001a40)="043703a43ee79fd76a572772fec6b5a1fff7d45490064ed711c013a710134d6c51e3f791edf1a040408b15c54e9c824db9adb8c1871a2275daa7cf06f0a8520cbdf9a4d2ee97dbb243f109c2ca6067d96473a4bef99cd55e24f0b59e683c67ac33634e5c2a1aad7465871d01f4be1f1b6ba2eb68e0dd8d39b2a8537873670c4ca6688e535bcb9e6b9133af0c8b0a2a6f663219885b5a1b46eb17c4b414f21faa2ed41127c9012799ba35a86baeebb1be5daaa92657ed02211730d8533311cef1dc7f", 0xc2}, {&(0x7f0000001b40)="e0662b412c81cff3e3cc3ef9adc75ac6fa1ad7052c45cc0a184d766f757a5cea66c940a6ff30f661dd2cc4fae8a0", 0x2e}, {&(0x7f0000001b80)="f623992a2860ecccb67422aec827fb494372dd2945048e12497c377394eb7befc9958dc48fd7f50547a498a30c28b99ee0a9536d3e719cbca675f542fe1750fda87c22cfb7e6a2d6f2239b7387ff43b87ef6909672887903e22e21ba018a1766a0a76697065a068da929be634cceb1c2684e30200303d8af36e47997e16cd5019a4cdadea7f18e97ab77209c66ab4b318a218a3eff99dda53ab8d302e0ac678ed7e274d9d4fff901fc7b34", 0xab}], 0x5, &(0x7f0000001cc0)=[@op={0x18, 0x117, 0x3, 0x2}], 0x18, 0x34048094}, {0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000001d00)="9237f27d0920177413cace48b88b2175268b4e5023ff45d333e204985b9139e2b6e3d66e0e720e6cb9809ae9e4faf395834147c4a8c92ff08aafd941d53810e340cef7af2199f0a128e5423efb5015f95a8777de8353081dfb0f508fde17efecdf08e9d54f19c3fb31c78a7b65554f10e262f90695462e0c4524068cfce8b901043a99ffc5e766255f4071b63d0aff8d0a0420bc2fa82093b8dcd5ff997a0e43c81317261c88c77129cf5e7541dad7f0a4f58e11e56424d95eeec66ea764c95945f0412fb1f7b277d4ce4342411bd37d9c9f5f61da60eed8f1a9ad40ce7f", 0xde}, {&(0x7f0000001e00)="8ea0f2501121637f475c07ea851b9e24c0bc32ad131afe0e29c30e8142f288f3dad17b3ebb71b4752c3ac99ca5bacdea1d411cec6f5230fd6f25ea8ea3a2e62a3b7d6dfb52d456fbfde32b3116c6e14d64ce882c6b1cb893116d9d0afc2acce8b75316b68449dcc6b9903f6c166592b234b2c4ed1b47b7fcefe05c15007d5bc565a0c554f2c98279e6761ad084171fe241e515994a016420b073819fff807870cf2faf7ab8f5f633406d4afeda", 0xad}, {&(0x7f0000001ec0)="924ce27bfd", 0x5}, {&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000002f00)="d84f83321c71ea838cf6c58cd4395d17705a807ad364e06eac51c1a8a6f7f41a2276f52124b878f9ccaf", 0x2a}], 0x5, &(0x7f0000002fc0)=[@assoc={0x18, 0x117, 0x4, 0x401}], 0x18, 0x2000000}, {0x0, 0x0, &(0x7f0000004200)=[{&(0x7f0000003000)="3cadd8d4e363299b5a84c0d5fea00a7041482dcb07b4f58ba17be108433e8843be8b954b904823b97ee99a83f9775f2bd508b127ddaa5295c0012f75a4f6ae9c899415ecc61b54d4315e7fb674b7ddd2d1c19577fbc09579dbefe5de8e195b3b32a75ca3930cfdd49a3463db4c48ea0fe44fabd6a9106d7860714af41dcc5452e786b2ccbb84b3da296858b65d878ba7f329ed687529ab8fb6ebb2bb54468fc807b253f34afb224cdc58d0f672b16fb6ea5e3ccd789c410f9fe55e9a9cc128bcb22bd5b29d3a8baf249f32fbb30386d1e912742d14b321caa3a73805a111aae8e7ad364d712c24", 0xe7}, {&(0x7f0000003100)="fe0c0e6710af1ba445cc006d92b632c930eb26866b91f49a00f5fb64f753a9426714eb25e651188c4324bec2e1b7736ad854be6db3e29a537499b73d202924606e2f0ce2ebfb689ce8d42725b10b927c6c1cfa53c824416c41d32f5ff94bccc43d1ada7cee3e80a3a9b741ff59cce3ba722d901e758d88b5ebb1d51817e319fa73103a56ecde30d985f564516d5e50182d0102bdee3a8550337541daf364c2d3f57e52e830b456a3ea436c852e26310a2ac59878210408851ed12b1797dace8936b9b439ccdbd2c06cf934b95317c502063b29a98e9ff9", 0xd7}, {&(0x7f0000003200)="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", 0x1000}], 0x3, &(0x7f0000004240)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x10}, {0x0, 0x0, &(0x7f0000004480)=[{&(0x7f0000004280)="ee59a5c0ca83c67f693faeb6771f92a2f46863b18620686458a39614e8971cf60357086828fe9e07d9f471cb7149ea708cdda2ef195366ba331982e2df3580828868629def2b1e889c0d9ab39b56c91d4bee867d07390f074d56fd3e57118d819c950baf23eec51308b10dca6b48722d0965bb2b807489168a847c8452730e4edf83c7019f4d6376dc32599ed27b4f271b77f6227b76c4ec3e0bb32f5a8a9f28b5e97c126aa169e2ae8fabc3039bcba419f73a864e46661be303c4154f00", 0xbe}, {&(0x7f0000004340)="67cbec4367f112da11c84d072165f5811a16678cee64b2a1d8ed163dc74f59ec76c90276be2640e2f2f19cfbf377da9530214d0373147ffbe5a62ee871a7c1ea1c18b46016257bc5ddc616fe3bb4096a3ff411182e66fcba3e3c60456da5f15b757f097123a4703428a3dc85e003a5bcba4f7ff488afbeaa3b93b7221339fbd1e5c3f998c6703ed3ddefcc449a601288a8d269110868d2deb3bcecc98c6b205f9d1a11cd25b38960e9be6a09cd2655e1b2f0d9089156be6ce1212fadf39a8873a0d90996dc0c3105f49c7cb7f615107a4e5e087a70ec2428ebd0ecf9f6", 0xdd}, {&(0x7f0000004440)="f3ff7299cb3ad0baef30f43fc3c1a70b83df8681b1c55447f4f3e1a420d1bbc46d69d24eb2c3e490e422698c81c4cb8f573e028e8461253b69", 0x39}], 0x3, &(0x7f00000044c0)=[@iv={0xb0, 0x117, 0x2, 0x99, "681c61c3ebd09376117da96856a3540edcda4cac1095b11aae5ab660d6f2c6e0a10bc15459a2b9dfba46317a000f7445a101ffbc36d6bf91879e46b57383e0602dc15ba1134360634e7cddef729f182e86ef899baf55284476febb006c7775e27fc2ee13c599f58bb129bdf8ce681c905e4f74762737f31c9ec96155de74584e6c2d689dedd787d1128c69340b5c2e5f89c34ea032368a0b2d"}, @assoc={0x18}, @op={0x18, 0x117, 0x3, 0x3}, @op={0x18}], 0xf8, 0x4040040}, {0x0, 0x0, &(0x7f00000048c0)=[{&(0x7f00000045c0)="50f2fa3e579407e63c1a24e6115e3edc3aafbcd182c5ad04f2f5cb09f758ecb74e797860a95a1db9fca296e0d7db91109bc0be9ce27e5b807aa0e351ac6dee422328e999a250eb4ed7d979627a4428e88f77f6023c3c931ab6c1f804a450f2ff59d6950b37689bb6f4e3510b12a10ff286da19f1715857a669752906ac7704d48c4db2b9f964df5f91937dc38d613f80cb53d442104eecafa1b14e89d408cdbfc3d7a6be33d1d3828604cb80e5fc680fa08765436a4594d0a6b293340c290f27bacc3b6b1e3b541b16124a01464b46fe559c6cd73ceeaf68f8aee3731a", 0xdd}, {&(0x7f00000046c0)="2d5f323371e52137552c2126112df03c93cb0530af27836c51c49fc17bfb892fc65309ce41068a206bf2ac4af2ac5fd34d3d162329288100dd6d635dda11", 0x3e}, {&(0x7f0000004700)="748076c1b3b9ecc8b49dd78cd6df6e6813cebf559c3bc2dacd5e5b4d41addfc35ea54f8104e8e8013e6b72a9eb6f7dc7854d2402b611b64ba273e17edc0713b823ee0880e6a4e9be0bd0d5def1fc02950bf14465edc871a9bac3f316d4f5699440b9d338a2d358b5ddbbcb08ab333aab4bde3a57401a53e372f4ab84e90253c42cb622bfee3e5f4eb9dfd5795ea47d15ec1b1cbdefd23ffafce74b42d30f2ea99613166c283e6338", 0xa8}, {&(0x7f00000047c0)="84809f375fade9da347f9032906f60b72eaee833d6dd6e7e63a622bbc5260e6d3668f30474b76b602a6e8c235e1956ce102d46c9e22cfab80e5dbafc05b4eb05d70beee62c5e93555618823c58e4902527defa936c47c648e6c894c4c3f1eb9c1c4b187e807afca72eef3cbfb80e13d9eec0d955b62ce2d41414fb65da28a97fdbe62bf4b88cab0e5dea7ac584d1e2bac801c8bf70c2c4a5b9099d4dd06f898440bdb941c375f471cd2dea97de8914c72ecba94a7c0e6b9a9e83a7c413409a9bcfa8e5902a53dd9c5294224ef8982f6838f6ee576294e4808a438ef12c5cd46fefadd192caba2ff35f5209f52047bd83256b", 0xf2}], 0x4, &(0x7f0000004900)=[@assoc={0x18, 0x117, 0x4, 0x1ff}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x30, 0x4000000}, {0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f0000004940)="cea7d862c8ee6a88542b841166e33e14df22c60e32ee186d2eb487aa207ecd5056c36c13b0e3760428b6db1b769f32fdf1132829993cca793ce650476f65fea22d60ae99e9f72fe733a8b368c9b190aa34984fa2e5d6706edc502fd81e033695318c73a66405eeee8946ddb3ae6e8d502791ebda352407defc6d20bb5d92fb97814d2a79e9257a6515f247c15bec15e70ae5b7301cd46728d416fc86e5eecd3a0a7abb34cc6396119561b543ecb5248719b24b7b60a19e0d3a115e4acdc037da45819271", 0xc4}], 0x1, 0x0, 0x0, 0x40000}], 0x8, 0x5) acct(0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:06:22 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000480)) r2 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000000)='/dev/watch_queue\x00', 0x10200, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x8) r3 = fcntl$dupfd(r2, 0x0, r0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000080)={0x16, 0x350, &(0x7f0000000040)="a2560dd52ae59722d25b7acb1ca4280b1d181f12d58cbbe10dbd4d27f383"}) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r5, 0xc0845658, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000640)={0x5, 0x5}) r6 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) write$FUSE_DIRENT(r6, &(0x7f0000000240)=ANY=[@ANYPTR], 0x8) ioctl$EVIOCGBITKEY(r6, 0x80404521, &(0x7f0000000400)=""/7) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20020020}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r7, 0x0, 0x70bd27, 0x7, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xfdef11d9a5dbda37}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x7c, r7, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, [], 0x24}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_lock_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x18181}, 0x800) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x200200, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r9, 0xc0845658, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r10, 0x82f5509e0015595d}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)={0x110, r10, 0x12, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x6, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@dev={0xfe, 0x80, [], 0x33}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa25}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffffff}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x15}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x8010}, 0xa20670ffdf7fb393) ioctl$DRM_IOCTL_RM_CTX(r8, 0xc0086421, &(0x7f0000000380)={0x0, 0x1}) r11 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r11, 0xc0845658, 0x0) write$P9_RAUTH(r11, &(0x7f0000000280)={0x14, 0x67, 0x1, {0x8, 0x2, 0x5}}, 0x14) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x5000) 09:06:22 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x800, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0xa, 0x15, 0x6, 0x6, 0x5, 0x1f, 0x3, 0x60, 0xffffffffffffffff}}) openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x0) 09:06:22 executing program 0: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x1) 09:06:22 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r2, 0x9000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) getpeername$l2tp(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f00000000c0)=0x10) [ 402.322583][T13109] Unknown ioctl 1076391951 09:06:22 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x2801, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvfrom(r1, &(0x7f0000000080)=""/4096, 0x1000, 0x12040, &(0x7f0000001080)=@tipc=@name={0x1e, 0x2, 0x2, {{0x1}}}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000001100)='./file0\x00') 09:06:22 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r5, 0xc0845658, 0x0) ioctl$KVM_GET_REGS(r5, 0x8090ae81, &(0x7f0000000540)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000010000d0400"/20, @ANYRES32=r4, @ANYBLOB="7d77138245eaa3dc"], 0x20}}, 0x0) ioctl$sock_bt_hci(r1, 0xa0066ca6, &(0x7f0000000400)="e3dd43908758ca7d56fe03af9348ef249cea663c6eea1dd5302208140f3f08ac010bad428b25a60bc51838a05df6dc406412aec1f7f67f87d640ba86c8d73c48505f83cd93ba3627c4ea847beb287128ac1a0ec05a9f7c78d8e98da753a7e5ffc694df4382027f9b29c41c525c836420848bd9d6433c4849a9f5cd6015d48b206b2b1f08aa09e216e7cc601af1ba4eefb8e26750d20bbb6c3fe0dd7f5682c5c8b7d903ef0a687a") getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast2, @dev}, &(0x7f0000000280)=0xc) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x90, 0x0, 0x29e12962b30d369d, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x18}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x7}]}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8, 0xb, 0x9}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x80}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x3}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffd5}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x0, 0x3}}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x4d}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x800, 0x3}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x4000400) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000000c0), &(0x7f0000000180)=0x10) r7 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x8) r8 = fcntl$dupfd(r7, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, r8, 0x0) 09:06:22 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000080)={0x101, 0x8, 0x4, 0x4000000, 0x6, {0x77359400}, {0x5, 0x2, 0x80, 0x0, 0x0, 0x60, "3605c890"}, 0x77, 0x4, @userptr=0x1, 0x9, 0x0, 0xffffffffffffffff}) socketpair$tipc(0x1e, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @broadcast}, 0x1, 0x3, 0x4, 0x4}}, 0x26) 09:06:22 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x1) 09:06:22 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x1042001) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) ioctl$VIDIOC_G_EDID(r2, 0xc0285628, &(0x7f0000000100)={0x0, 0x50, 0x1ff, [], &(0x7f0000000080)=0x40}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:22 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) r2 = accept4$tipc(r1, &(0x7f0000000000)=@id, &(0x7f0000000080)=0x10, 0x80000) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 09:06:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001180)=@broute={'broute\x00', 0x20, 0x5, 0x10d6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000000), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x9, 0x4d, 0x0, 'veth1_to_bond\x00', 'erspan0\x00', 'erspan0\x00', 'erspan0\x00', @local, [0xff, 0x0, 0x0, 0x0, 0x0, 0x6ff506e5cfac74da], @broadcast, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0xf6, 0x15e, 0x1a6, [@helper={{'helper\x00', 0x0, 0x28}, {{0x1, 'netbios-ns\x00'}}}, @realm={{'realm\x00', 0x0, 0x10}, {{0x5, 0x400}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xffff}}}, @common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xfffffffffffffffc}}}], @common=@ERROR={'ERROR\x00', 0x20, {"dbf39d72db982c302069622deab707a3b0dfe4854451faecb0a58178ca01"}}}]}, {0x0, '\x00', 0x1, 0x0, 0x1, [{0x5, 0x21, 0x4, 'ipvlan0\x00', 'syzkaller1\x00', 'gretap0\x00', 'veth1_to_team\x00', @local, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[], 0xa}, [0xff, 0x1fe, 0xa7797786cd8ef352, 0xff, 0x1fe], 0x1c6, 0x1f6, 0x246, [@comment={{'comment\x00', 0x0, 0x100}}, @m802_3={{'802_3\x00', 0x0, 0x8}, {{0xfe, 0x0, 0x6}}}], [@common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}], @common=@log={'log\x00', 0x28, {{0x6, "5ad3480012341d8640532136721238444943b765396e3946046bfaae1a9d", 0x2}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffff9, 0x1, [{0x9, 0xb, 0x80f3, 'syz_tun\x00', 'veth0_to_hsr\x00', 'veth0_to_bridge\x00', 'veth0_vlan\x00', @dev={[], 0x32}, [0xff, 0x7f, 0xff, 0x0, 0x101, 0xff], @remote, [0x0, 0x0, 0x74e257dfaed0e2ee, 0x0, 0x0, 0xff], 0x856, 0x906, 0x956, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x9, 0x1}, {0xfffffffd, 0x2}, {0x1, 0x3}, {0x0, 0x2}, {0x5e5d, 0x2}, {0x4}, {0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x4}, {0xffff, 0x3}], [{0x1dc, 0x9}, {0x8, 0x5d7a}, {0x9, 0x4}, {0x4e, 0x400}, {0xffffffff, 0xb0}, {0x4, 0x79}, {0x400, 0x9}, {0x5}, {0x7, 0xffffff00}, {0x81, 0x8}, {0x0, 0x80}], 0x5, 0x9}, {[{0x9d}, {0x2, 0x1}, {0x7, 0x6}, {0x3f, 0x2}, {0x0, 0x1}, {0x6, 0x2}, {0xfffffffb, 0x3}, {0x2d1, 0x3}, {0x9}, {0x2, 0x3}, {0x5}], [{0xffffffff, 0x1}, {0x8001, 0x80}, {0x7, 0x9}, {0x3, 0xfffffffe}, {0x8, 0xfffffffa}, {0x0, 0x7}, {0x0, 0x1}, {0x6, 0xad}, {0x6, 0x7}, {0x4, 0x3}, {0x6, 0x9}], 0xb, 0x5}, {[{0xff, 0x2}, {0x7cf, 0x2}, {0x7ff}, {0x200, 0x1}, {0x401, 0x3}, {0x8001}, {0x5, 0x3ca706687077ae16}, {0x1, 0x3}, {0x7}, {0x1f}, {0x49, 0x3}], [{0x9, 0xcea}, {0x1, 0xef7}, {0x80000001, 0x7}, {0xffffffad, 0x18afadfe}, {0xffffffff, 0x7f}, {0x10001, 0xbca3}, {0x4, 0x4}, {0xfffffc01, 0xb1}, {0x1, 0xfd}, {0x5, 0xfffff001}, {0xfffffffb, 0x401}], 0x4}, {[{0x9}, {0x3f, 0x3}, {0xb}, {0xfffffffa, 0x6ad808daab53172f}, {0x1, 0x2}, {0x7f}, {0x7}, {0xcd, 0x2}, {0x6, 0x3}, {0x20, 0x3}, {0x80000001, 0x3}], [{0x60e, 0x5}, {0x23, 0x5}, {0x2, 0xd2a}, {0x8, 0x2}, {0x101, 0xffff0000}, {0x5, 0xffffffff}, {0x9, 0x8}, {0x40, 0xcc35}, {0x9, 0x80000001}, {0xffffffff, 0x20}, {0x4, 0x3f}], 0x4, 0xa}, {[{0xaf, 0x2353059ca0e8d594}, {0x1000, 0x2}, {0x7, 0x3}, {0x1, 0x2}, {0x2, 0x3}, {0x1ff, 0x2babe0520956bee}, {0xffff}, {0x80, 0x1}, {0x3ff, 0x3}, {}, {0x8000, 0x1f0b57059e11803a}], [{0x7f, 0x81}, {0x8ea0, 0x401}, {0xfffe0000, 0xe410f648}, {0x6, 0x5}, {0x8, 0x6}, {0x45e, 0x6}, {0x1}, {0x2, 0x4}, {0x5, 0x2}, {0x3, 0x1}, {0xfa, 0x1}], 0x9, 0x8}, {[{0xffffffff}, {0xff, 0x6}, {0x400, 0x3}, {0x81, 0x4}, {0x6, 0x1}, {0x0, 0x3}, {0x10001, 0x1}, {0x6}, {0x3}, {0x6, 0x2}, {0x4}], [{0x81f, 0x100}, {0x6, 0x20}, {0x1, 0x7ff}, {0x14, 0x4}, {0xfff, 0x5}, {0x4, 0x401}, {0x7f, 0x6}, {0x2, 0xfff}, {0x82, 0x10000}, {0x8001, 0x7}, {0x9, 0xfffff800}], 0x0, 0x7}, {[{0xc04, 0x3}, {0x8000, 0x1}, {}, {0x40, 0x1}, {0x8000, 0x1}, {0x4}, {0xfffffe00, 0x1}, {0x0, 0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x81, 0x3}], [{0x3f, 0x1}, {0x400, 0x10000}, {0x8, 0xfffffffa}, {0x8001, 0x1}, {0x3f, 0xffffff80}, {0x4, 0xec1}, {0x80000001, 0xfffffffe}, {0x995, 0x3}, {0x8, 0x6}, {0x3, 0x16ec}, {0xcd, 0x3f}], 0x5, 0x3}, {[{0x3f6, 0x1}, {0x3ff}, {0x2, 0x1}, {0x7, 0x1}, {0x4, 0x7}, {0x9}, {0x3, 0x1}, {0x4}, {0x5}, {0x1}, {0xd3, 0x1}], [{0x2db5}, {0x8000}, {0x3, 0x9}, {0x71a, 0x3}, {0x1f, 0xfff}, {0x7, 0x10000000}, {0x4, 0x3}, {0xaa4, 0xffffff52}, {0x1, 0x1}, {0x8, 0x7}, {0x2, 0x7}], 0x1, 0x2}, {[{0x3, 0x2}, {0x1, 0x2}, {0x8e32, 0x2}, {0x7, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x2}, {0x7f, 0x2}, {0x80000001}, {0x9}, {0x4, 0x3}], [{0x9, 0x33e}, {0x0, 0x10a3}, {0x5, 0x3}, {0x7fff, 0x1}, {0x7ff, 0x3}, {0x101, 0x40}, {0x8c, 0xf3}, {0x80000000, 0xfffeffff}, {0x80000000, 0x2}, {0x1f, 0x2}, {0x9, 0x4}], 0x3, 0x5}, {[{0x4}, {0x4, 0x1}, {0x9, 0x2}, {0x6}, {0x10001}, {0x8001, 0x3}, {0x10001, 0x2}, {0x7330155d, 0x4680172ad03e2c2}, {0xffffffff, 0x3}, {0x9, 0x3}, {0x60000000, 0x1}], [{0x200, 0x3}, {0x3f, 0xc15}, {0xfffffff9, 0x800}, {0x775, 0xffffffff}, {0x5, 0x2}, {0x800, 0x5}, {0x1, 0xe3}, {0x482b, 0x7f}, {0x9, 0x68a}, {0xfffffffe, 0xfffffff9}, {0x10000, 0x100}], 0x0, 0x3}, {[{0x6, 0x1}, {0x0, 0x3}, {0x9, 0x1}, {0x0, 0x6}, {0xffffffff, 0x2}, {0x0, 0x1}, {0x4e16, 0x3}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x24, 0x3}], [{0x7ff, 0x9}, {0x6, 0x4}, {0x4, 0x4}, {0x5, 0x7}, {0x2, 0x2085}, {0x0, 0xfffffffe}, {0x5, 0x10001}, {0x0, 0x40}, {0x2, 0x6}, {0x3, 0x4}, {0x8001, 0x3f}], 0x3, 0x8}], 0x9, 0x1}}}], [@common=@dnat={'dnat\x00', 0x10, {{@empty, 0x11}}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x5, 0x6, 0x3, 0x1, 0x0, "a0c6a6748db067bc477dd125b73ff1b59fd881d0429857e6f4fa1838a5705d4f74bfb314a88e5e339aa8a700192deeed5f155d7f6693381e2a6f8d17890f2223"}}}], @common=@log={'log\x00', 0x28, {{0xcf, "13597d5ef3a8c55c965fba69ba78fe25d127c4c4ece312414548afb12290", 0x8}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x1, 0x0, 0xd, 'xfrm0\x00', 'gretap0\x00', 'netdevsim0\x00', 'bridge_slave_0\x00', @local, [0xff, 0x0, 0x0, 0x1fe, 0x0, 0xff], @random="d8ee5f6bed5e", [0xff, 0x0, 0x101, 0xff, 0x0, 0xff], 0x146, 0x196, 0x1e6, [@ip6={{'ip6\x00', 0x0, 0x50}, {{@rand_addr="68e6d89ac905efdb24c384377ccb9fc3", @ipv4={[], [], @rand_addr=0x1f}, [0x0, 0x0, 0x7fffffff, 0xffff00], [0xff, 0xffffff00, 0xff, 0xff], 0x6, 0x0, 0x2, 0x30, 0x4e21, 0x4e24, 0x4e21, 0x4e22}}}, @arp={{'arp\x00', 0x0, 0x38}, {{0x301, 0x8864, 0x4, @multicast2, 0x0, @local, 0xffffff00, @local, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @remote, [0xff, 0x0, 0x27bbe27a999dae70, 0xff, 0xff], 0x86, 0xd769ca57d610582}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xcd, 'syz0\x00', {0x9}}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz0\x00', {0xaaa}}}}}, {0x0, 0x82, 0x88e7, 'bridge_slave_1\x00', 'gre0\x00', 'batadv0\x00', 'macvlan0\x00', @remote, [0x80, 0xff, 0x0, 0x101, 0xff, 0xff], @empty, [0xff, 0x0, 0xff, 0x0, 0x1fe], 0xbe, 0xbe, 0xee, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0x0, 0x7fffff80, 0x0, 0xffffffff], 0x4e24, 0xb4971dedf3eed9c6, 0x1, 0x4e21}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}]}, 0x114e) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x8) r3 = fcntl$dupfd(r2, 0x0, r1) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) 09:06:22 executing program 0: openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x20080, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x12) 09:06:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000180)={0xa30000, 0x1ff, 0xffffffff, r0, 0x0, &(0x7f0000000140)={0x990a79, 0x6, [], @value64=0x1ff}}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e24, 0x4, @ipv4={[], [], @multicast1}, 0x2}}, 0x1, 0x1}, &(0x7f00000001c0)=0x90) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000ac0)=@assoc_value={r3}, &(0x7f0000000b00)=0x8) r4 = socket$l2tp(0x18, 0x1, 0x1) r5 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000080), 0x800) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r6, &(0x7f0000001300)=[{&(0x7f0000000200)="892e0d597945aa09489d3633157a5ab0d5254093f1f5d2c04b61b47aa992582e98934ecd898478226498007f639a6a27e4e0bb8ffdf9f6b6557506dae083edf66c65dfcfb615cc2d3a997a25bacaa646f453eb7535f9f46cc1ff4916e1e53cfde3afd96db47e0337cf70ab5c391ca751fe9a6a09c3adb4c770986c904d14e65cc497298ed30547b7f324ace26e6eb91d07aa3a152db9f07877f78ea42959d9c02e14f7ecd761e7a4399504d9573d2525139cf9af8299b005a4be310df4e3dedcb062a3a8e0417aaf23d69b4b6909d1d2bb8dd4988a5c044cc950142bdc5f6f17ee6bde8dfcc3f598578a2ab2a465ec4e20bb348bf41bb81bc5bf455cafacb2a9b422cbace11a6036e322ebdde41ca9ba2b5862aa63f4a2fca45714a5d2cac8ef1c9a8565c494b1bf610d78d2ae0e10cf51607b6eeec158a79db847d8d302f10a76f0139f61d5f08bd08cf2f799cf663f78773163510447bf1aa5cb7716367b353d9b162b68c02af1e905c6b258f3516b11702fbdd533f88d503a3beb68a17342a1c79c6175c3c83e89729d9c3f69f12c2daab0dc88d82ecbb8b44eeff51645b32da9a587792c5958ab75b25d3bbf7ff0a98d2cedfb6132296db4c844f56b0858abacffe29e22e931121d31d50f38bc2277b5aaef46cc03ab7af7caca6be14ab48d217f5c11734d2cd541406265c42289c05b013e04472e8114ed662c7a20ff248a53e9219edd13b15f8eb9a88b66fe36d02c48ac5f3321fbe6fb1cda4a0b39fe2b6800800557d1b965174daec6fc71477ae563fd755bd60516aace2271e2c6d1d6617a231b60d765a373c003daa91c5bd5bfab4c5d08548fa281e936060eccef6e86d1aba8fb0d905c51d9e0f270e6515a7e2f08203b8175539e7f6f44b022e9ff5f3db8414d555c2551b99f85d3c858225d56995b6b7a1eb48f4c7e1f2c5f5e910d7966f15405696432da09ba9c5d3907181fdb806e991b58f48c944377bc629f83fae16bfe980199181002609dbd06f216b6c28f52ea5aca7eae7fe9f59581b9a1447ef58e83f6d027d9383824fe515ec736ac1601ecc42463e56abc3f85519db848d89febeb671719c6bd69a04612c083026bba4fe2b86f909cae8b6942ae9873d528edd9e344d2814785e41cdef48bff018adc09a39a0a7a432a0d351460b3587260c16af42d90415c72875e30e68d0bed6e3fd37b9d24e9cf70b08d53d17da16c8d66be3f37b18e5ecd52b0c8f748d031349f4bf7b2e871f7acaaba5f02ece0e3f39cd1fbe283cb712e7d5580734a7acd2c7a9af5f3156c298da177dd3f4935fcb76f4bf64aaaa687e64e866cd8d5c370cb6a3913200f30aaf03f35d19bd51d43879bab6083201fa7e48795e3ced2cf40cf14638be93bd50479a4d4df5fcd8f782c86589173cc671aeee8db21c22b697dcc5624593cab1e17cf4f7dd72cfb044fb0d96f5a973ad7c1212a3c2f2fdecaa5433ad115591bdf5dbb2972f8f2bfbf66a08da480f5d6a165abe6478cba6443631bf5f1855e3c9c4bb2662fd06b160a5c12fe293678dc4bdca8ef30bfd5bbb49777a7efec081af76dd7938682ba39762c8c4b5285da2cde915ad6aec323fdc64dccc088ba2533ce69a9d98baef3604850368b70055dc9351fbda91c02dae750dd584f72d7118d52ede310442756d5c49ee88c52009866d6700437bed3b3fff5825ac0c3da99cc94dd8ef41a75da5ea66e19c678ca7071e9109c6125872c19052664c21c21b321a08fec95aa7fe22d1088821d6ac0b13af4758a4d6d2d02bc2429d3970077450218e53a1a4739b3cfa5d06f205c8ebe6f8627d16badb7df451adfd01e728bb38cc66b0498e79fceb2d8ab1042d3d3af712ce2be58e778eb087682f6f377fe4a7484204fa07bc9455ba8c258a979e8558515d584d765812e334db77214eaee5bdcc2b599e774815d8d038d366393560322e1b4d677d999433e3ce1e7db2e0bf46bc88c1cc3195c5c97d2ef3ba6a3cd8ca77b534dc6b7803af361d32d402f0b10d70c602df3be7cb5335ab19ec244a06752eac47441402ab461c333ddbc07f02481364620918a9050556b82e919fffb8c282b612f3ebd11bdaa90db0d65be2ab2e16995bb57c128730cfcf8c235bdffa57e92ce0d42151dc95cfb3c021c125dd51e648117022aac7637b9db991f8e4a21eb8aff33c086200e7640703aa9347d9dee197767073c488dfd88a27a7b7ff5abd333abf39a7cb5729ef3a8c074cebc0e8576a686933847467a81a2084f84ebcab28f72092ac23ef5afd974197d03b594739ce42502ae917c3282fd90e26e8129329de3dfd617a35f273347c70878ec72e37f9cde4870cc5903a5dc6f8b5c24e195d173736450d4c1a0faeee42d2b010929f32eba7c962297455074d15777a7e85cb4b54f5db293386acad1588eae4cbb5ebfc157fbc4fb642b8e4f7e3042e21c0312901dcf55ae8d17a2374271d3252f5a91d43bbbedb17206fbc6667e6b1bf4e801263fd8599b0fc4ea5448350ccf8df76c75de51696bf38efbe4c8551caac4ac8e68b9d5d5ddac6bba149c5cf92817b6c818f34e36617eb5e45937b274a5ef87ffb6d88c8e69629223ed64979d32164b6220409d195ee2822675c52a347ff603fa00f3f3c03a036aa4553a08c6c9ede398c98d5064760e9a7f4995760bc1241a9b6d50d2ba8ed69612521c036d210df09da27cc675e65638d343899adb275e9fc53ef5c6c15bd5cf869bd0e789a79866b62014ef2d962f696353985d1580871efe78051ffec556e4fdc288bb45d284aa114d9cc4de0f203cf70134ece4b26e9c13963931940839a00c752bad3b364de5902f54362cb2", 0x7df}], 0x1) ioctl$int_in(r6, 0x5421, &(0x7f0000000100)=0x1f) ioctl$VIDIOC_STREAMOFF(r5, 0x40045613, &(0x7f0000000000)) fcntl$dupfd(r5, 0x0, r4) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r7, 0xc0845658, 0x0) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x50, r7, 0x0) 09:06:23 executing program 1: socket$l2tp(0x18, 0x1, 0x1) openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1d4a01, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1c) 09:06:23 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r3, 0xc0106407, &(0x7f0000000000)={0x1, 0x96b, 0x2}) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:06:23 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x200604, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:23 executing program 1: socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, 0x2}, 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001fc0)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)="5ae07c856ca2818fe34abc833492436e4ab159c39d3a5081dcff9c2e7aa5e5c0916fcab433e0095574a0efce73e2400a4af415b54d3a038426f2a96c7aa4195907a946b2234ef6570895c1e2cbd11db558a4311102d323c0a005bab11b27a36096e4068caafd48a04277a469139d9537463fd2d3be8eedb3245f9519ccb3522a0790d68e22784e1effbb558c410f77002cbe56f4614ba0181f572c85aac789a80c5c1e29cc344badd79b9843effa2f35bf3103ae786124af0e1250bc5acca9f5a535092f8cfaa1174f", 0xc9}, {&(0x7f0000000140)="a85956a7cad434f54a2bd7a984bf13da33bbdd13ca0cb3181e122de9eb165d8dad92da4ca39620469305dbda77b2187dc4aa1c872f22eac000c185c84b457b8f6b8efe186f0b1da378e3725b61bcaaabf4f5", 0x52}, {&(0x7f00000001c0)="f19f04fa7f52a45ebf7b326d864fd7ca60a0b8eb85d6e4f05d1e8688acd060920e22230a20a12338cf5d20e0d8afcdb6b1a090031e8ab155a44637d008bb69736e49f7280bb0e03ab7b63ab05e990c0ae1094c07c766f1cddf25a8bf949537d009ef9b8b36a5a4e4a3258958637f992855d3868f7f0eefb90a5b920fb1d6de157eab436dc31afcf5c49df3cb4fae6616218f512036d8c9acb4dd998ba444e70c3f0284a72412c8946bbebc9601d6faa052757092d1eed25edc97ee40140dec034c30e006e50889db294d2fecdcbd1718be453ae821859c159f9339eda86668b479b0222b2a1867a1ec231624e3ce0a2c71e4d3", 0xf3}, {&(0x7f00000002c0)="f92a635b0615547a340287c25d143a32ef0613b2c4c80c4deb75488e0000b687147d9bc54187fbe93f9ffed2213f1b7214269ec90d46b88c7f26a26dca345ed317b290f44463ffa209ae32360d3384ae6dfb11277aca1477061bcc32e632798c8ce0d6e630df961e2a7bd5953d2d101ddb92bdae998b009ee02ce6bf3cd68fbbcb978d0f9f2d71bd86436f07f7d485d617857bec27632c662f82468fad169084bb01b076b8", 0xfffffffb}, {&(0x7f0000000380)="444b1cae394e69d61a40511df03721dc8b26de13c11395d8362729858b6fe82cdd8a76e097e9e0efee8db468d9fdb8153aaa5a41912ba7fd28e107aef7f67684c97337e8126e34ce5d38aee282331cdd259ab727288350d92779f2a97de2cdd9733f35a170ce32f7f51580b5045f6cfc4508377d0d89ece3b7af1aeee67fa61f17f72860ac132d9f732bda2972d362488cd5c04566261af6e9c63f1c8db76340bba211636d8cb9271e5c2e2060d36217", 0x53}, {&(0x7f0000000440)}, {&(0x7f0000000480)="a5e00f2aa6bd1c6f0b866af7bad12c66841eeb4c5b0954b72f6de98a1c8d80c303f50e39b14337465c6131ee4f09ca5c77b3f39bf4adf078dd3f7338e3000a155e372cbbcbb3bd2f1f96da9dcc3eb8b8c671be73b8ea2616b37bbb265469b500b55ba4fa66fadc84cd58ac95157a9ff8b839bcd94db2ddeeee8255325efc7017f8d0a9f9e946778ad3962ab8559eae5446a3f3ec7efa7a47a4dc9aea0388094846fd7b1115486e267803e9659d3ccf4d96186e9338af3f7fb9c879c5b5a63342bd0456d1ad6ef6186c580092381884f29276bfe0fd49dac33cbd38d63c6249ce99cab513be13161a39cafc0686e37190", 0xfffffffffffffe79}], 0x7, &(0x7f0000000600), 0x0, 0x80}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000640)="87e4f44d31b35282b83435b54e961a99d729eaea2395e623dc6b8528bc1afbb385bbd2e2ee999b87119d904fa1", 0x2d}], 0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000006c0)="ad02be8aefd3dc87d45b193d28308e6584903911ef1ae6eda56ef1", 0x1b}, {&(0x7f0000000700)="cc323de3457dd2a625b1a7d0b37032455351955ae8cabc35ddf690bb9196c61e91ee61a80086dc23ad84935452512eb384d14ae9ece04fac75c5c43a55d1f6ee0f5625e510aaa4f10219714703b43fd801a5a3623715e9f8e927b7983cd7721f613dcc2e057f8f02042ac8795e4f6525cd409718c31e28ab9652f0a64d8f1432ab920a3a876bae2ea6035ad3ca442befba57c78ff440504706316fbe4ed17d9df60263f6414733f85f65b42eaf67c16967fb8a7f67380e4af9ada2cef8b3264426c9d237", 0xc4}, {&(0x7f0000000800)="b1939e5216e4b2d6cddb450111c3ea2c48d412231332cf008262c475b08470f2982e45cd2dc364e7931fde5ac99076ed308e7f9838c9a5f7504eeb93a4f00c73072cfbb87b1ee2d96fd4f6d9fa00b5ac58111c6c78fc19f550309fad9eaea0fa291e68131e3c5599bb2cca9fa5e046e23e559cd39c1eaec9e2a61fc5f7da65bd8e1fada9c4456b2f2d1bcb21d8a33fc93acba0e5afffbb7bb197755d8e894ec864b3", 0xa2}, {&(0x7f00000008c0)="4d3d8dcec35ca3c60b894ce8af9940431856089fe1a68d4af6b20daa00c8b1ed", 0x20}, {&(0x7f0000000900)="e4dca47b50b2113f45585f58f9811f8acee2a6d6c2093ce52de2f035f8c797187b180717ab6467bf37e1c502f1fefcfddad8fb3339bee6f1d6c4bf6249013a702b9af876402ed500fbb225d76b9bd7444c8dbb424aeb8627e980aa4e865d0068ca37758289c79faabd9534cbb19e53a4692bf5c8b00a01fc5a9cbc077c2c16d7aaa2d1a4c7daa5", 0x87}], 0x5, &(0x7f0000000a40), 0xf8, 0x4}, {0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000002200)="95d5ad792d32c0f89082d3fb86d7dba9be32c8ec4b52e1410e95e6744ac83767a38daf986dd2840b88a784a7b774fe6d151f07bc24cb76ef95f9331bcee609afe4c9af55ae8fa33ddfec5d1498224b524db71135364e81a6f8963f5bd3ed991133bd520f83b34aa8eeff85e88bea2724c0be8dc622d80502fb8e80a18025faf5ece649671ae245d2ceea7e9d5e793b499bef26f4cec8dc00"/167, 0xa}, {&(0x7f0000000b80)="184cf6083f8bff30535bfd747408615b7c57eea89de8fa08dfe64aa3525b77747ed875dcb7943cd6e1b45708962ead7146d877d8d4f74b616a53616835bb229770af043488b5d36ca99032a35ed41cffa83f5d62c093d1972d44dbcfa00b7dd1ac9f34403a7dd14404f23853af1c01cef70b58eb6db21582326eb0cb7de6536fa20f6e62076351cf88e95bcae4ea2f26019641df0d415e29b0ac36236adfe8d37d301a894872ee396f635cda2ecbc491cee34479a61729728f01d114925b9f58e7ded0bbd6af5e087bd65caa41a677dd1a5ea2ee57b749020371a8ba0aa866929251dba27c1561fa49", 0xffffff89}, {&(0x7f0000002100)="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", 0xa5}, {&(0x7f0000000d40)="8d2eb95520b770db5c352d34608d4f424cb5811ca2e999c812c330a3b2b37d4154dd99d818f875bcd1186d", 0x2b}, {&(0x7f0000000d80)="b32baade72eb0c7dc4a0da00f72952714a5d4d35839ec1d6732e0222e54f07e9025754e2618969f8354b4bc4f03b132e8127adb3b43cb8c7092fae88ed48a73fbe4ba7c2b96a", 0x46}], 0x5, &(0x7f0000000e80)=[@op={0x18}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1030, 0x8008000}, {0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001ec0)="391f2e3ea1c60d92d5f2854bbd9e5f7485d90e8658a5264b78246ca7907beb77e5c5296588294f3f83c3b49f328ca89f2454f505201d080ef3a3c3989869f140d0f3eca1ee0200ad42766d98dd0e18061aec046c81d50fbfe5e6fe0c43a406b87dfef615a71e5fa3db62576607414bb9ebb4f8977c32dc215a4a4e0e", 0x7c}], 0x1, &(0x7f0000001f80)=[@op={0xef}, @assoc={0x18, 0x117, 0x4, 0x52f}], 0x30, 0x4}], 0x5, 0x4000000) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000000)='/dev/watch_queue\x00', 0xe384aec5b65d0024, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:06:23 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000000)={0x0, 0x0, 0x1005}) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:06:23 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f0000000000)={0x5, 0x297}) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:06:23 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x400000000000072, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xa, &(0x7f00000000c0), 0x2) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) 09:06:23 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x101000) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0) mmap$snddsp(&(0x7f0000feb000/0x12000)=nil, 0x12000, 0x0, 0x3010, r2, 0x9000) 09:06:23 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:06:23 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)=0x3) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ppoll(&(0x7f0000000000)=[{r2}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:23 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000100)=0x8, 0x4) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{}, {}]}) mmap$snddsp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x10, r3, 0xc000) 09:06:23 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:06:23 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000100)='/dev/watch_queue\x00', 0x615981, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x2) 09:06:23 executing program 2: setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000000)={0x8}, 0x4) r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x0) 09:06:23 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) write$P9_RCLUNK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x79, 0x1}, 0x7) 09:06:23 executing program 1: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/watch_queue\x00', 0x100, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x12335b584117e820, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000080)={0x10000, 0x8000, 0x0, 0x3, 0x8}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) ioctl$sock_netdev_private(r2, 0x89f2, &(0x7f0000000100)="15652475d247756f76b20689726fa136133334d0feccdf4faf95ea89e0cbdf8562ac813a0646add5fbc7cb4e77f44323bcbbf7c15350e516b64207ca5493af096680ce5347000489d9870e744840f98a21fe302ee5d4f51643f069281d1a9274f3b28105c7bc24d737b5a979b0aa635fe9a2e9ac") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='-cgroup+\x00', &(0x7f0000000180)='/dev/watch_queue\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000001c0)=""/11) 09:06:24 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) getsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000100), 0x2) ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000080)) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) fremovexattr(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="747275731ba36b035ab4851a7465642efc"]) r5 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) 09:06:24 executing program 4: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = fcntl$dupfd(r3, 0x0, r1) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) 09:06:24 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000000)='/dev/watch_queue\x00', 0x214541, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x3, 0x6, 0x200, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x3000c8a1}, 0x200000e5) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) fallocate(r2, 0x4, 0x9, 0x1) 09:06:24 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x11d000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) 09:06:24 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x4010, r2, 0x0) 09:06:24 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x82000, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:24 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000040)=0x7f, 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local, @multicast2}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') preadv(r2, &(0x7f0000000480), 0x10000000000002a1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x8) r4 = fcntl$dupfd(r3, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r5, 0xc0845658, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r6, 0x82f5509e0015595d}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="00012cbd7000ffdbdf250e0000000800060003000000080005003f00000008000600703e16d7040003005400010008000600776c6301080009003b000000060001000bb10000080008000600000014000300fe80000000000000000000000000000300fe80000000140000000000000000003000"/126], 0x84}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 09:06:24 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101000, 0x0) stat(&(0x7f0000000640)='./file0/file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r1) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r1}) openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x400000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) fstat(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r5) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r6) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) r11 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r11, 0x202002) keyctl$chown(0x4, r11, r9, r10) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000002c0)={{}, {0x1, 0x2}, [{0x2, 0x3, r4}, {0x2, 0x4, 0xffffffffffffffff}, {0x2, 0xa4c65cbaf5fadc58, r5}, {0x2, 0x1, r6}, {0x2, 0x2, r7}], {0x4, 0x3}, [{0x8, 0x4, r10}, {0x8, 0x4, r2}], {0x10, 0x7}, {0x20, 0x6}}, 0x5c, 0x1) 09:06:24 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="0371576e524099470d1a6a4e1a2ba6ee21f4152fad5925090e1cc4d78f7ddcc2fdd591c3e3a1ebc52df8aae5d3af444e6d63b4cc7160b9638dfdcc2cd926e30f431eabebeed657c3f1d5011f6aaffd83608a3ba205847294a167f774ff7641655808aafa5011ba19446c370f3892cbd6858bf4974ef578174bec5e048374e3bcfcca3b55e6a0c56e43c0f63313f0f810106bb23b52754b74a55200c1145f0e3668c86662071a80c13434daab85bc4df94f122f1166340a3707f2a9e086ee2d57948307", 0xc3, 0xfffffffffffffffc) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f00000001c0)={r2, 0x1a, 0x50}, &(0x7f0000000200)=ANY=[@ANYBLOB="656e633d706b6373312028be98823d636d61632d6165732d6e656f6e00"/79], &(0x7f0000000280)="e2a4e7f8b25e04edee9477e094e29146b2c608919f1aa193d95c", &(0x7f00000002c0)="60d6808c5a4242bf8c14626f8d76c2d2ee4501e173f2cb09c8046d234d1dacfc7e27fa8ce9a87612b777554a0629571e6239b1029818af53d8643e1a47a5d74c609187c1048f48f8475bc1b93ef5918c") r3 = fcntl$dupfd(r1, 0x0, r0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000440)={&(0x7f0000000340), 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x6c, 0xd, 0x6, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0xff48}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x4, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x21f, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0xfffffe59}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:net,net\x00'}]}, 0xff6d}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x0) 09:06:24 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x5, 0x2, 0x7, 0x200, 0xab2}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) 09:06:24 executing program 2: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r1, 0x0) 09:06:24 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$P9_RVERSION(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ff040000f8ff08003950323030302e4c"], 0x15) socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x249000, 0x0) watch_devices(r2, 0x78, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r3, &(0x7f0000001300)=[{&(0x7f0000000200)="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", 0x7df}], 0x1) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000100)='\x04!md5sum\x00', 0x0, r3) 09:06:24 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x200200, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) recvfrom$packet(r3, &(0x7f00000001c0)=""/199, 0xc7, 0xa3, 0x0, 0x0) preadv(r2, &(0x7f0000000080), 0x0, 0x100000000) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0x8, @mcast1, 0x884a}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8001}, @in={0x2, 0x4e22, @local}], 0x1df) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x7d, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r6, 0xc0845658, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r7, 0xc0845658, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r7, 0xc040563d, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x4, {0x4, 0x1000, 0x3, 0x5}}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000180)=0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000380)={r5, 0x6a, 0x9e, 0x81, 0xaaf2, 0x4968}, &(0x7f0000000400)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x4}, &(0x7f00000000c0)=0x8) 09:06:24 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = fcntl$dupfd(r1, 0x0, r0) getpeername$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f0000000080)=0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r3, &(0x7f0000001300)=[{&(0x7f0000000200)="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", 0x7df}], 0x1) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000100)) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 09:06:25 executing program 1: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-monitor\x00', 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000200)) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000000000)=0x5) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x74) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) 09:06:25 executing program 0: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x7, &(0x7f0000000080)=0x4) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) 09:06:25 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) r2 = inotify_init() r3 = dup2(r1, r2) fcntl$dupfd(r1, 0x0, r0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, r4, 0x82f5509e0015595d}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r4, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x5020}, 0x4000000) 09:06:25 executing program 1: socket$l2tp(0x18, 0x1, 0x1) openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) 09:06:25 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000080)={[0x8, 0x3ff, 0x6, 0x9, 0x597, 0x1, 0x5c4, 0xff, 0x6, 0x4, 0x4, 0xd4d, 0x4, 0x0, 0x7ca, 0xffff], 0x2000, 0xa2810}) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000000)) 09:06:25 executing program 1: socket$l2tp(0x18, 0x1, 0x1) openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, 0x0) r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x240400, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r3, 0xc0845658, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r5, 0xc0845658, 0x0) socket$inet(0x2, 0x5, 0x1f) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0xc) 09:06:25 executing program 0: r0 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x8) syz_mount_image$erofs(&(0x7f0000000000)='erofs\x00', &(0x7f0000000080)='./file0\x00', 0x3, 0x3, &(0x7f0000000240)=[{&(0x7f00000000c0)="64cf102f9435282110b300788be24af76d5e38a480703dbf76754297482052cede252c1f69828fb568e8654ab3f56c8c02dc2944a560bfe7c96eea274e0fa2a6970b4b1dd3055f407dac9c611269c9019fa42f3d30b31e30ed46388da607f5b7e06a44de8373737d856ad7db30e8aee9f2e77cc45aa7fe9a8463caf8efa4acf437c2aa0a7a75440786ae678f65198451836fa8572ac849fb9827a253bd02d3ec68d8f130ec07a65bec83dc07b354ce83c8f854cda0ad7022636f282e985f9e357f89429f8fdbf9f62e7667dd3691c7261868f653bdc15440516f7cc117d413ba6a72517ded3ac105", 0xe8, 0x5}, {&(0x7f00000001c0)="0f4128d1", 0x4, 0x5}, {&(0x7f0000000200)="58a6368ab0726e37d7793e6fe311a04d47b143231bdbb7", 0x17, 0x5}], 0x1, &(0x7f00000002c0)={[{@fault_injection={'fault_injection', 0x3d, 0x9}}], [{@dont_hash='dont_hash'}, {@audit='audit'}, {@context={'context', 0x3d, 'unconfined_u'}}]}) [ 405.601132][T13303] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock [ 405.692323][T13311] erofs: (device loop0): erofs_read_superblock: cannot find valid erofs superblock 09:06:25 executing program 2: r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = openat$watch_queue(0xffffffffffffff9c, &(0x7f0000000040)='/dev/watch_queue\x00', 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x8) watch_devices(r1, 0x9b, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) mmap$snddsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) r3 = request_key(&(0x7f00000001c0)='.request_key_auth\x00', &(0x7f0000000600)={'syz', 0x2}, &(0x7f0000000240)='kfyr\x00\x00g&-\x00', 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="31dd4716685defc91faf1b23c88eda517a62f85a360a5d947e75bb898f3e44e1c6fdd147162406b0cf9cfce97e6d223d52b02bc57ef9ce3a68cb44d820614f5434374e722a8244916e6d2a8a7c568d3e101d6da45a23b07f4036cccc437625f7d6396d8c1208aa01cdbfd75389c41f014df1bb910a6581e2406ed1e0733d5c411972231947f0885ede1093b24e760e782d0b96a36a106dc17fb58c39fe4e691cccf756316e58ac379f8a394953412716246c5c7a00cd8323cf42a5e5be20d2b0ebdaa554baa2c6d189a7ac03e9d80c6d6fc7cbdee992e85880abb0a5a522d3ff341c60e1861fb4", 0xffffffffffffff3d}], 0x1, r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x54) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x100, 0x0) utimensat(r5, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={{}, {0x0, 0x7530}}, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r4, 0xc0845658, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x14, r7, 0x1, 0x0, 0x0, {0x18}}, 0x200}, 0x1, 0xffffff7f}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4184001}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r7, @ANYBLOB="080012bd7000ffdbdf2516000000640005001c0002000800020006000000080002000100000008000300080000001c00020008000200dc0b0000080001000b000000080002000400000014000200080001000b000000080001000d00000014000200080001000f000000080002000600000010000680040002000400020004000200180007000c00030000ffffffffffffff0800020004000000240002000800020029bb000008000200030000000400040004000400080002000002000024000700080002003f0000000c00040006000000000000000c0003000100000000000000"], 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x20000840) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000080)='/dev/watch_queue\x00') [ 405.804308][T13315] tipc: All keys are flushed! [ 405.814924][T13315] ------------[ cut here ]------------ [ 405.822626][T13315] refcount_t: underflow; use-after-free. [ 405.831566][T13317] tipc: All keys are flushed! [ 405.836912][T13315] WARNING: CPU: 0 PID: 13315 at lib/refcount.c:28 refcount_warn_saturate+0x1dc/0x1f0 [ 405.846379][T13315] Kernel panic - not syncing: panic_on_warn set ... [ 405.852977][T13315] CPU: 0 PID: 13315 Comm: syz-executor.2 Not tainted 5.5.0-rc5-next-20200110-syzkaller #0 [ 405.862860][T13315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 405.872922][T13315] Call Trace: [ 405.876229][T13315] dump_stack+0x197/0x210 [ 405.880575][T13315] ? refcount_warn_saturate+0x110/0x1f0 [ 405.886129][T13315] panic+0x2e3/0x75c [ 405.890035][T13315] ? add_taint.cold+0x16/0x16 [ 405.894716][T13315] ? __kasan_check_write+0x14/0x20 [ 405.899829][T13315] ? __warn.cold+0x14/0x3e [ 405.904249][T13315] ? refcount_warn_saturate+0x1dc/0x1f0 [ 405.909801][T13315] __warn.cold+0x2f/0x3e [ 405.914056][T13315] ? refcount_warn_saturate+0x1dc/0x1f0 [ 405.919613][T13315] report_bug+0x289/0x300 [ 405.926657][T13315] do_error_trap+0x11b/0x200 [ 405.931274][T13315] do_invalid_op+0x37/0x50 [ 405.935706][T13315] ? refcount_warn_saturate+0x1dc/0x1f0 [ 405.941261][T13315] invalid_op+0x23/0x30 [ 405.945423][T13315] RIP: 0010:refcount_warn_saturate+0x1dc/0x1f0 [ 405.951582][T13315] Code: e9 d8 fe ff ff 48 89 df e8 b1 a6 13 fe e9 85 fe ff ff e8 47 6e d5 fd 48 c7 c7 80 64 91 88 c6 05 4f 5b 00 07 01 e8 e3 f5 a5 fd <0f> 0b e9 ac fe ff ff 0f 1f 00 66 2e 0f 1f 84 00 00 00 00 00 55 48 [ 405.971187][T13315] RSP: 0018:ffffc9000f35fd40 EFLAGS: 00010282 [ 405.977257][T13315] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 405.985234][T13315] RDX: 000000000000af7d RSI: ffffffff815e8546 RDI: fffff52001e6bf9a [ 405.993213][T13315] RBP: ffffc9000f35fd50 R08: ffff888050bde4c0 R09: ffffed1015d06659 [ 406.001193][T13315] R10: ffffed1015d06658 R11: ffff8880ae8332c7 R12: 0000000000000003 [ 406.010736][T13315] R13: ffff88805dc54a58 R14: ffff88805dc54a00 R15: ffffffff8a246f00 [ 406.018796][T13315] ? vprintk_func+0x86/0x189 [ 406.023406][T13315] put_watch+0xa2/0xb0 [ 406.027488][T13315] watch_queue_release+0x34b/0xc40 [ 406.032627][T13315] __fput+0x2ff/0x890 [ 406.036719][T13315] ? __post_watch_notification+0x840/0x840 [ 406.042549][T13315] ____fput+0x16/0x20 [ 406.046545][T13315] task_work_run+0x145/0x1c0 [ 406.051158][T13315] exit_to_usermode_loop+0x316/0x380 [ 406.056454][T13315] do_syscall_64+0x676/0x790 [ 406.061050][T13315] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 406.066937][T13315] RIP: 0033:0x45af49 [ 406.070845][T13315] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 406.090481][T13315] RSP: 002b:00007f632e51ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 406.099078][T13315] RAX: 0000000020ffc000 RBX: 0000000000000006 RCX: 000000000045af49 [ 406.107057][T13315] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffc000 [ 406.115040][T13315] RBP: 000000000075bf20 R08: 0000000000000005 R09: 0000000000000000 [ 406.123906][T13315] R10: 0000000000000011 R11: 0000000000000246 R12: 00007f632e51b6d4 [ 406.131893][T13315] R13: 00000000004c843f R14: 00000000004e0620 R15: 00000000ffffffff [ 406.140892][T13315] Kernel Offset: disabled [ 406.145328][T13315] Rebooting in 86400 seconds..