tl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)=@builtin='builtin_trusted\x00') r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)=@builtin='builtin_trusted\x00') r5 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r4) keyctl$negate(0xd, r3, 0x8000, r5) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000140)={0x2, 0x13}) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:06 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x440500, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, r4, 0x400, 0x70bd27, 0x25dfdbf7, {{}, {}, {0x4c, 0x18, {0x8, @link='broadcast-link\x00'}}}, ["", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:06 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000240)=""/87, 0x57}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000080)=""/42, 0x2a}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/224, 0xe0}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/97, 0x61}, {&(0x7f0000000140)=""/60, 0x3c}], 0x8, &(0x7f0000001600)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000002600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002680)=""/23, 0x17}, {&(0x7f00000026c0)=""/59, 0x3b}], 0x2, &(0x7f0000002740)=""/14, 0xe}, 0x1}, {{&(0x7f0000002780)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002800)=""/131, 0x83}, {&(0x7f00000028c0)=""/143, 0x8f}, {&(0x7f0000002980)=""/108, 0x6c}], 0x3, &(0x7f0000002a40)=""/237, 0xed}}], 0x3, 0x63, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r1) 19:46:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000000)={0x8, '\x00', {'batadv_slave_1\x00'}, 0x40}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_DEASSIGN_PCI_DEVICE(r6, 0x4040ae72, &(0x7f0000000180)={0x1f, 0x4, 0x4a, 0x4, 0x9d}) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:07 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) prctl$PR_CAPBSET_READ(0x17, 0x18) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0x1, 0x7d60, "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", 0x1, 0x7f, 0x3, 0x81, 0x8, 0x9, 0x2}, r3}}, 0x120) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x802, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000200)=0x262e, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0xfe0f, 0x480680) fcntl$setlease(r9, 0x400, 0x1) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCX25GFACILITIES(r2, 0x89e2, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:07 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r8) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r10) fchownat(r6, &(0x7f0000000040)='./file0\x00', r8, r10, 0x100) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/243, 0xf3}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xdc}], 0x1, 0x0) close(r0) 19:46:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) accept4$unix(r1, 0x0, &(0x7f0000000000), 0x80000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:07 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)=@builtin='builtin_trusted\x00') keyctl$clear(0x7, r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400000002) sendmsg$NFT_MSG_GETGEN(r6, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x200080a9) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000000)=r7) r8 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_GET_LAPIC(r8, 0x8400ae8e, &(0x7f0000000280)={"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"}) r9 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:07 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:08 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x1404, 0x800, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x4040) r5 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r6 = gettid() process_vm_writev(r6, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f0000000040)=""/41, 0x29}], 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/220, 0xdc}], 0x1, 0x0) close(r0) 19:46:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = dup(r4) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000d14000829bd7000fedbdf210800e9000100000008000300020000000800030000000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000080)={0x0, 0x6, 0x7b, {0xa2, 0x3}, 0x9, 0xffff}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:08 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f0000000040)) r5 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f000085e000/0x8000)=nil, 0x8000}, 0x1}) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0xe9}], 0x1, &(0x7f0000000080)=[{&(0x7f0000217f28)=""/220, 0xdc}, {&(0x7f00000001c0)=""/119, 0x77}, {&(0x7f00000002c0)=""/240, 0xf0}], 0x3, 0x0) close(r0) [ 485.463121] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5133 sclass=netlink_audit_socket pig=22362 comm=syz-executor.3 19:46:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x46081, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000080)="75c2b89dee60d129fda25fd837f6a8af252aa9d669077816335513644e8598379d97748c16ee849ae8bc07fa31b04e97a6a00b9bb7b44a4450f74606e86bc31d88265ff92d92855f2af2") ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:08 executing program 4: r0 = userfaultfd(0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=[0x7f, 0xfffc]) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) alarm(0x9) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) 19:46:08 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}, 0x219) openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video0\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_udp_int(r4, 0x11, 0xa, &(0x7f0000000080), &(0x7f0000000140)=0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r1) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f00000000c0)={0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f0000000100)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r9) fsetxattr$security_ima(r9, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000080)=@ng={0x4, 0x11, "2f1fcf9e59ef691bb600c4f69dbf542e"}, 0x12, 0x5) 19:46:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000000)) 19:46:08 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x8, 0x2b}) fcntl$dupfd(r2, 0x0, r3) 19:46:08 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x3}) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:09 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x5, @loopback, 0xd41}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1000}, @in6={0xa, 0x4e22, 0x0, @mcast1, 0x1000}], 0x74) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000000)=0x4) r4 = dup(r3) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) connect$ax25(r6, &(0x7f00000001c0)={{0x3, @default, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000280)={{0x1f, 0x1}, {0x5, 0xaf}, 0xfffffffa, 0x2, 0x2}) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:09 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/schedstat\x00', 0x0, 0x0) dup2(r3, r0) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_STEREODEVS(r5, 0x80044dfb, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x2}) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, r6, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, r6, 0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000000)={0x1, r6}) 19:46:09 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x480200, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept$ax25(r4, &(0x7f0000000080)={{0x3, @default}, [@rose, @netrom, @null, @bcast, @bcast, @bcast, @remote, @rose]}, &(0x7f0000000000)=0x48) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x103000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:46:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) 19:46:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r3 = dup(r2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) 19:46:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x2, 0x2b, 0x0, r1}) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) 19:46:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) rt_sigaction(0x31, &(0x7f00000001c0)={&(0x7f0000000100)="6564460f01dac401437d845100000000c40345787cf4ff3af00fc0ab050000008fe978d1d3c4a2ad3b5c40008fe97c817574c4a253f781649cc7d8c401f96e64f800f3446f", 0x50000004, &(0x7f0000000080)="662667660ff58000800000c481f85a3ce0c4613dfd70158fc978d60ac42185555675d23e660f298a32000000c4a2559bf3c4a25539b30f000000410f9bdc", {[0x3ff]}}, &(0x7f0000000300)={&(0x7f0000000200)="c442118c288db59c3d0000f3440f1c80e70000009e26660f64d2f0317f340ff2ca8fc9489a3947343a43c1ee7b", 0x0, &(0x7f0000000280)="262e266464660f97bb4d000000c4217d292e8f486095050000000007c482fd1d5e1aafc482fd323dc6863a0d3e660f78c19d28c4c3f9630ef2c4a3a97ea63223333300c4e1765891ccaa0000"}, 0x8, &(0x7f0000000340)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:46:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f00000001c0)=0x4) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000100)={0x800000004, 0x3b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0xb}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)=@builtin='builtin_trusted\x00') keyctl$link(0x8, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r7, 0xc0206416, &(0x7f0000000140)={0x1, 0x9, 0x5, 0xffffff12, 0x0, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) 19:46:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f0000000140)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:46:15 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x1, 0xa, 0x700, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}]}, 0x3c}}, 0x40004001) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) 19:46:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x2, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xa4, 0x404100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r10) r11 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:46:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000080)={r7, &(0x7f0000000440)=""/233}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000080)={r7, &(0x7f0000000280)=""/199}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:46:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0\x00') ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000100)={0x5, 0x9, 0x10001, 0x7, 0xf4, "722f8b37c8fdb7eaaf4d7b6cfbf01fe9fa2a76", 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:46:15 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000280)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x200000) ioctl$BLKRRPART(r4, 0x125f, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000080)) r11 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x80000, 0x0) write$selinux_user(r11, &(0x7f00000001c0)={'system_u:object_r:semanage_store_t:s0', 0x20, 'system_u\x00'}, 0x2f) 19:46:15 executing program 4: r0 = userfaultfd(0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5afbe08b8c5236b93b9797b2f09f6e370d1515d2e1fa63259e6d4bd05752981", @ANYRES32=0x0, @ANYBLOB="b3ef461584d1f8f0"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r5, @ANYBLOB="0000001ff23fba8c010001000000000000415a5ba2b529018d8f00"/37], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r5}}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x12c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xfc, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1e}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup2(r7, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) [ 493.103595] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 19:46:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000080)=0x2, 0x4) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigreturn() dup(r4) write(r9, &(0x7f0000000280)="2f59d564650169dbebd51e9b998bca8feaeefe511c627d456a6f9a787f66549e82ab880c3ec4403edf26cba04b72f440c9a97f98c4c4efc8897c15e0313e8071b685e3c3302da6bb1fd6bdcf98289b9d7c7c49bff965bfe4e7ce5e104737cce416c259c3ec5d9eb1166b54df66b4dc56a1540a93248c8fdb1d37fe55b24f61e20365b56609fae4d614318dd746d2487ec380bbfc2a7b0e8cf04d4e9e5f057aed22d4241bdae2159541ea", 0xaa) r10 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) [ 493.160107] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 493.292536] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 493.322327] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 493.337999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22473 comm=syz-executor.4 19:46:16 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001600010000000000000000000a"], 0x1}}, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) write$binfmt_misc(r8, &(0x7f0000000000)=ANY=[], 0xfffffecc) socket(0x10, 0x3, 0x0) splice(r7, 0x0, r9, 0x0, 0x4ffe0, 0x0) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0), &(0x7f0000000280)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r6, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {0x0, @in={{0x2, 0x4e22, @local}}, 0x81, 0xcb80, 0x0, 0x0, 0xa}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3f}, 0x8) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$RTC_ALM_READ(r9, 0x80247008, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) [ 493.545495] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 493.565166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22483 comm=syz-executor.4 [ 493.598907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22483 comm=syz-executor.4 [ 493.651924] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22483 comm=syz-executor.4 [ 493.678238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22483 comm=syz-executor.4 19:46:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000080)={0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={r9, 0x0, r11}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) [ 493.691219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22483 comm=syz-executor.4 [ 493.703983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22483 comm=syz-executor.4 [ 493.717020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22483 comm=syz-executor.4 [ 493.730282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22483 comm=syz-executor.4 19:46:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) sendto(r2, &(0x7f0000000280)="ae76993853f562c51cce97da216abc4e4ce3d419a4a2e17b573caf7dfa83c2d75eb7f59832cb07289913404ba7d9972d75fa51a98f57988d8ef8f1d148aed46bc2c86fd4feb76649566b8c5df2dd98f05dfef8ec1713f8b5105cda2eb517132e7d5dc5ee9cd423ea0443b3baa605b1e8e2f510d4947c2bf5299e3f6cf7859d74bb843fcbd51f9a61ad4898f898c1f4a36112c0e44449544e98af5295e4424971582d9b3dc23d115abcdeacb68ad7d67af407a0a9c0a5a980d5a229b6bce94c18ac9a171481f67e361d5ee06504e4d5ca", 0xd0, 0x24040805, 0x0, 0x0) [ 493.746580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=22483 comm=syz-executor.4 19:46:17 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x4, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0xffffffe1, @remote, 0x8}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x102, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) 19:46:17 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$SNDCTL_DSP_STEREO(r3, 0xc0045003, &(0x7f0000000080)) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x28) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet6_MCAST_LEAVE_GROUP(r6, 0x29, 0x2d, &(0x7f00000001c0)={0x0, {{0xa, 0x4e22, 0x100, @loopback, 0x951c}}}, 0x88) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/242, 0xf2}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/220, 0xdc}], 0x1, 0x0) close(r0) 19:46:17 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x80040, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x22, &(0x7f0000000000), 0x20a154cc) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="08010000", @ANYRES16=r5, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x140, r5, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9a}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaaa5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x371a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff731f}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x53e332d7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5ce7}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = dup2(r2, r1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r7, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)={r7, 0x4, 0x5, [0xf7, 0x1, 0x4, 0x2, 0x401]}, 0x12) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:18 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000040)=""/41) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f0000000080)={0x6, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_G_SELECTION(r8, 0xc040565e, &(0x7f0000000140)={0x8, 0xd9cce2c084f0ea88, 0x6, {0x5, 0x1, 0x9}}) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/226, 0xe2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xdc}], 0x1, 0x0) close(r0) 19:46:18 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) setsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000040)=0x1, 0x4) 19:46:18 executing program 4: r0 = userfaultfd(0xc0000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) gettid() timer_create(0x3, 0x0, &(0x7f0000000240)=0x0) timer_settime(r4, 0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) timer_getoverrun(r4) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0xe9}], 0x1, &(0x7f0000000040)=[{&(0x7f0000217f28)=""/202, 0xca}], 0x1, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000140)={0x2, &(0x7f00000000c0)=[{0x84e3, 0x3, 0x4, 0x1f}, {0x5, 0x9, 0x63, 0x1}]}) close(r0) 19:46:18 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r6) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r6}) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:19 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r4, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r6, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000040)={r6, 0xfffffffe}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={r7, 0x4325, 0x101}, 0x8) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:19 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RTC_IRQP_READ(r5, 0x8008700b, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:19 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = dup3(r6, r8, 0x80000) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x490400, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x89e0, &(0x7f0000000140)={r3, r10}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r8, 0x0, 0xfb, 0xe3, &(0x7f00000002c0)="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", &(0x7f00000003c0)=""/227, 0x6d9, 0x0, 0xf9, 0xcc, &(0x7f00000004c0)="c7dff6c762c8825b039e141e6f2fb6c2bb3d81eb68077f0f299a3bbb2614dbfa40288e84ab8d87a463668d13561650fb60b8ab703a512a8c424fb0a55059e4820c00be66cfc00b1bd67c4ac9ba56d85fcebdb89fd961d29ccab3b99eeb75e377ba39b4f74b655f2a86321586afcf3865ec5e676d9a65a3a9d79a85ea477c3cad48a175886de95124da45cba9e58552e81a3dcc4b15f35834242c46e7cd2a3d8da1be75797adf77b6a329d999e572ef9972dd794fff3c662b2939daa3f1ac1d85bfb844c34787d3bb49be60c628abd5861f3dbc1245494540d78b38e70442861fe11abe79fd81e1b8b1d9c4e57ed0c077ac0feedad294341b22", &(0x7f00000005c0)="8237165367932fb3149b4a9bc29581639f69abdce1eb92165c88752cccfbe5fb7aeea6e727492c015afcc1d7ec91e2e4a3e7e49b99a1588af6bc0637dad162b36a6f9dab09aa5f757e3e0be849f149494697c21fae7678c549f1bc6077fbefbc2bf16c952bde99210ac61af1a7bedc6cf783bce6a0c69b4071c61c68ab0c204a8276be90f9ba2b339446cd76c31019a788844271fba749703b47e9812db30f74723a79f78da5a09f5d0eabfa579b2432c83e8894aa781103a81202dbee0a70c3d1a5f2a3db8f6398ff7b5b37"}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r11 = gettid() process_vm_writev(r11, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:19 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAN_RAW_LOOPBACK(r4, 0x65, 0x3, &(0x7f0000000040), 0x4) r5 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:20 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r5 = gettid() fchdir(r3) eventfd2(0x3, 0x800) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) close(r0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000040), 0x4) 19:46:20 executing program 4: r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) creat(&(0x7f0000000040)='./file0\x00', 0x108) 19:46:20 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$pptp(0x18, 0x1, 0x2) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r7, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0xc000) 19:46:21 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='Y', @ANYRES16=r8, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x48005) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c000500", @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf25060000000800080000000000080002000300000008000800e0000002"], 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x20000011) sendmsg$NLBL_MGMT_C_LISTALL(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x825, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr="591adaf42d21262f04d9837a054b2892"}, @NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr="7e3d37b79d1a0ff63d2cce3b795d57ba"}, @NLBL_MGMT_A_DOMAIN={0x10, 0x1, '#security#/\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x6c015}, 0x8010) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:21 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000080)='vboxnet0\x00', 0x9) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000040)=""/4) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r4) 19:46:21 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0xb, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) writev(r5, &(0x7f0000001480)=[{&(0x7f0000000040)="3f0211c041f0044f45a10167c52b447db20446b26c34937d8ada41651cd609cb8cb99b39b1da09067c0788f2fdeab7e51df03fa1e370445aaaf89392cfd7992e1aedbc19fb416804e01dacc71a1eee6e9e4f70286f53757ad703f51e91d7791c10bc883208e4bc480ae93135cbfab6dacd7f62c6bdbb", 0x76}, {&(0x7f0000000140)="a49cb4f95d340cb77b3fac", 0xb}, {&(0x7f00000001c0)="158e5fe808cea6ac1096cede0594885f6e1d2bd489e6f800498816800e03641014e8b45dd5883c2bec111f4317b5d9f832cfbb82f0726d91a6b4282194c9b278328fecbbceaacc13ec4f5294cf6b4c2fc8841e01269d4a7f459affd6d44bb1803e51146620e4648dbace1fc93154bcbd06aff067483b8040dd062f1f0bdc3a71d0f1b9343bad4ce7a87b2e6531b751c8", 0x90}, {&(0x7f00000002c0)="8002c88fa87e9c9c692c59646603d4b905175ca182f78fa1d0150d5c2a7379b265c1b15e96708ba97d5757a12fba21ff39c58740a91360f304fdbd55deefd99506713da1058e2db8cd3809be6e14a7f8f2001587627b5d61ac40169c8e1280724cb9084debf2dc8d09587844017469c039d3fcbb21474eefcf6b44b3e3cc567b4cb9f49f35eef81886aae57f9f065e1d", 0x90}, {&(0x7f0000000380)="45e6195dc0f7f6bdd8b9ce4e8d71e8e0f55878cdcecd01c0d5e63001f8aeab571d30a6f6f1175787ee7614fd410e93b2241bb5f985e8057e79f17864734e122b75b2fd0a8929dfede2e80e8248a10bf7d53e381478f36f54de4a4ef229fad38e6eaa4d087900cfb99c15f6bc105adaf01bfd063e1499812dcdceb5af95b2b41ae221f0ddd8b3ba76b4b0919a5a940573356b52f1099fba512d6bcad32ea8c9345b7d83a23bc825f298f42d2e9587072c03b7e81672b346edc1a42390dafdcc9d811fb792746a396c9d3cf9eee85d0fd71f52ef34f99b5d1b20a30b1a08644aa3c03309e21b2eedc9bd9eab6dfd5208aa96ea3c350a09cbadadb8c3ea024366d8e30dd43d6941f5fe5afa7709533c96bbe861f6d5e5f300da7a21c3b77fc33ce397cf26f730948abcd70df2d59eaca8098b2ae721359e73eb17040473e54add3a5f34b284d78a7c8ddde80fa438fc350b2cbe3a148a972d44fdf6d1c3df1d2a4723c150585890a9494d111a09741a6d401f155e76290dc98131cea5e378de05a704084c59d2e304cd5d9653d4b0bb50ff9928bbf0b3adff6cf6f301a6007b786901f03972ba3af4770e341aba3a76e349753984b3c146a55f6469e5e663d1345413ac32177ba46b98b62095b410ddc55c45ffbb54fba1c39ed2a110b2f4ffbab15917e291050fa8b945941dbe80ca16a83931beb35f73868ef878c0aba7c2da4954a94a2f3a07c6208b9c9159f1748108dd713b8c0aa14ab36d6fa26ffc54521d1e64bf5881260a9d698da1360438cc8ace89acb301890dcebe4b76b20f71a8642ad378d7f1a1e227cfe45a80bf9f3f7c6f4d2dcb0a8170fc2de4462ca81c6b7af1451cfa0b815506fdcc445e34c8fe1f9f9b8f1e2559507e2f7e1312b820718a70c60b508d8094b8f845cbe7f20c9129c3b901d241d7627dbfd6fbc622c3e7c5b19733451a929ae15405754a480c724ea83904b2652a8ed3c15d2644b50d0552f3c341fdb3910041745b25f5413dc250511aea46b0fdd238666ccf2a66c5f7a87d36dc9408b617784e643b6a47f972ef1cac09eb30bf60d62410674b6649fe7125bdd4f97c84661f8326a65532aeeedd003cbfbde280f587c5af2c6c56be1103279503b0f6440de8ef665e8acd0c2b71700d98b9f3de412a4075a8aa9b4edc8cbdd86cc8e2ee52ca6c69b97305171c3e4e670882e0bc4f8fdf92ce5cc42677228a448b960cff80cbf7a4ed9a683ed854dce81a02ee0b5ccf27c184c32170ac96efc592bfb3af16288c2153b1be6029fdb558e841ee016cabbcfcb8b132cf46f05e753dd85dbe653f66ce7a33c357ce1384ebacbedd48d798d725c855687254950ff8915c430f74dce4db669a5e224e256752396a0a7d1331101a3e9dd446e4c6589e74bd2ab4cb2fceba407fe6b6c591d13927904207220e6b500a3ce5c06374df561ec42625376f0a3fcaa2c24a9274aaa970964021e3ca88680c09276702018933543b614d18aca75a633d491c1a5703e3e9ff51b9e3e0890018528a87bd8489529e9ec89b9887be5d332874b1f616be7b8bcb3b687d4a422d146035df6170e89996428aa7ddda2b70ebc0d1452e5594c6d0963757b3ed3a9914eaeeba5cf6b89c409b28f8a8c65dc9f788fcedfb7a209b799449c07dd47403d3622266c554d02d30d9e2d0283b8f177d7850714cb63e8b40485acdba9224adfb23502fd2c058a0e6b73f324ed4641c84fd1e6691f4309f17b7b6948ea35af7ee1fbacfadbeeb72a2c7eb9e350b76db0130a96670a77f5970b5958c328a06c9816343cd7b7629047e4122dce97614e19a5349580e0bade40984efb5f8f9cc318480afc79d8637eba7242740635826ae5e4e47e9b7531c747a043933857f187784c90241c4988ee078f1b569313145c56b5f4cfd77da30923dcf5d2971bd9726a99a7173221cd392750750a1870071e983460e24bd61ada85679c3802ea28958dd417ee24856eb9876c7db4540a2539824e1f6192ccc035055347a6a23e93b057392d6d97ab8538c645b829b8bea3e2d77d87a3fa513bbd9b01196326007cd5e74429fc894d6fac9214d47da98b137114764612883aea873a3d4c39c027696e8dfa66ecafd81bac35fca66ccbc1ac5ada9ac80e4cd6217d4b490c8584af2082f8d3300f056ce1dbd32cd74facc985980fd44bb11e00062d5c35b89fa75c19cdd3602c59dee1e033f414d936391ddd533cbe2a3feed05d87056b1a13b727372644b32942caf10f29031a4b80463543a59f76b7fc7d396d1b570baf9d8789d8250025120b07157314f5664f495987cfd62c86ce504e7cdc64429b528346c10687df2aaae1126469501e4b8c6dc2cd6fcec95275d98394c3ad497c780be26c9a36cebaf68b39eb61ea2ee1ed012f2e2476f2ee744cdef3933de58a0c400e6cd18528eacb8dbaf8eac521c3ab8740d8c78b91f4588cd1e289cca5f59a5fac7d34b4bfb351ebe1f3b4be90ecbcc6c625f408d70dc9469451d1d3357a88be4a1311d9910cc1345399d9047ae9761f094da0986a8dea54ca694595e058c9b2f8df04554a44d748ed239a1488d028ed8ced9dd20da556957921fbd1af6f7e12206ebd4c35286b251bcd9787a374250d746e94f7495f59904d32f696246c631eb8e691dbbbd3a38fb3efd9a50f69397e24e8d7e1ca34ba92ebb1f3b3ad44519ed8e65ad81e37833838a1eb86d6851f68c8c92bec7cb3a93656542bb0f061dec4c5c454d81b698682230c72cb2c64d31b2f06c8f0ecb37acdf8ecf485c724c4742d08908f10aa05a67e9c2cba9e5a8424c0157b69b999cd1753d5d3603cbdfbbe71696e455fa9d28d12409c012923b9fe59d1a6b6f2cf24e4b8a238ca01e8936f0569e65b32047b50e2198a9818fda4316cfdf5e94728a0bb958f577405845c9c2f862387ec847a73923a05e7aab4d6734e0c4028db80676f73d7aac441d519e904f64c2bdc6492066d84ce21ce55dc49d3ccb997e6fd36b7fb4d3ad2c0b009b9bc94e19dca896e6f0d2f1ec9c30bac1fe83e8ea1a00784c19fca0d25dac7f8d0ca4eb6ab51f68e9974dbf5e7c8768a9aaca6398796386762088638f0f1e098c69fffff70afa6066437557d2ecb3bf2150a0969e44ec36603cb8027d9c6dbf25a95072bc915febe71e36bf1e9fc067e1e0becdecd15df0a44234af07f55f0edcae5c69d5a94547aef7bcd25e1bbc92bce7bd1383797d5836621d5fde58da13f9c5af4087561f95a6ed01a9c57bbfee9c28d29d0d939b6515a4475577012253db2ae3e732ec412a66bb470547937b10b9d64e701b57c35015c562bf6bbed451482e072c10fec2d7c495328864bb10eabe01f08ff233995ab26583f57f3ac4714165ce5a65a94a8318a41d441b5bc36df02f75d3d5c1bb4de28c852b4ff228cbe94eefc93c8e6874071e539de960603a585be6810b450a88bf7bb70ada5574688aaf969f26eb0015d833f900ddc6516fe1d2524e748d0093653a72dfb918b3e5aab0b9be525b7e25319e395352732f05a27436ce8f5fdd081aa33d72faf2e5da5470456c4ecf4a90732f60ec1c6f46559a69411b31a1e3d9ad133977e16439a9de182d0b953a12e57a672a4912a4a50bc5ea313e4f528ecb7534bc4a0638c807316cb2db8e1834f6ccfe6713fe5daa64a0dc819a82cc8912a0a4187e09137336f8d06d32c615f5eb2139cf22d2fdf97336e649739c3df011234eb8bf29824547da149f5643137a4f69d4fe2d770e15088710452deed734563c7199948473a08c2fe991ad519d086286062de3a6fb3f9000ca13f156f594df6c4499ffe206b2ffcba7c0a83ed28e2aef98c79927bfb23806c67b2f1d95be6b958c07a72ce9c7ed0aaa216b2b1c23e683372b5f7bead274e42d98a3d953d4cb3f2d3f0cb1fef3bc11465fa083aec8c7a067629cef815b8e841ed3dee5b255c1b1fb92effc3b79d2be9a6939262b014a1c236a0b6495235af97eaecb5082707222326aa7e57f64cab5165ceed0ae3e75eaabf3dbe9c69fa9e7ef3a9eadeb08d83800ae6f085d6b8613fd465643c814380a5c76769ac5a52f1eb5e3f1ac436e2b4d3e99ad7bad10f239e626d0cabbd296fe24f87e3ae871e170acb2ade9df788ff4b12a752e9962f0326bf7781a30019b118376e128ff8459627d5aad0515ed1e27e9c698a17a4c87be07f624ef19cd58759fccfdbbf2f07000bb37b3dbd82d4190738d47d4ec31f39ed521e0d96719d610b2d02202ef56b81c7f7df62ce669067308637a51a4b5bcc3d3f7d53241c7dbe992cb296d11394b18f7c76be68d37884357723df263eae53d1abdf9c9e6c82df4abfc70b64eaa5aa511e9ddc626be66848f022424187bcd0bb23c0127cfa8a1115c85bc1a1484063febe4eb4daeb75919281eedcecea1f31a2d5c886df77c7b0799edcbde4eb306f0541877f727a1c24b43d458dbd36e83474bc1792bbf29e8937787ab5220b8d6dc6b247623588747cabb6ffeb602efa24e228840c51ed5458e5cc529d2d9fd02ccb3067a44a443a13f29027ff49b367c29d0b021c3fa000e58f70b98969aee836d087a9361e02af0a72e5ef580003acb84a0127bc7552797158fa00555eaf4b804e30310b80dbe5547a9475596a37c85a1ae2dcf943548f00ca0eb0a769034b586d7c54ecbc62134208291ad301f1104f3d99f063e74b826200af199fda49bf1acb94ada8f87525dbafc5228597d3bb505c77c14f9ea0d419eb0ee7e0ff78d5ffba3561554fb9ae7cf516836bb0dd0964c9e8c6799167657c17cc50d6f295d2511ed0b413bc3b82e779a89ea07582172a1598d3ea2f971bee5b64f39eeff2d6802f61711fb9b314c1bfd1e6c2ab6eb6eec3959f52462ce71f3be9658c556acd79288c1352ccdf60e453dcbcd873e5f10ff130a494258dc4dfeb6a09c4599ca55320dc15d6431264e4df1a58746a78d276994d9444e347728159fac98def1e1aa78364dfc5a40e51c484005cf9eb8da2724fc5b1d40b9a9cfd9be8b6f541afddf03fb5b32e4815470d9d3388d85c317f3bd7dfbb567981f96d3ec7f4da0208f12c02b8c7bdf6bb54999ae52c6852e9839c7cd9a2342a85e62108a1e5518b036573483bda9fa63f1804a022b3f23c4b35032f37989571cd783799b7ad548f459e98e140a72f5d19eb9af33b9b7705a0e9a40cfe6d42803f1adda730a3f38b2b3c6838a375465605ff64de8db735169cd391b3ff73ee1a33d43a8a1ba3981afbc2a59d024a7a4dbbce79a12ab64276649c604ee112f2da949fea83309aa1c3a455065178a0271e41b2791d30e7c6fb41d12a0f387ec1c8e19bac6d59cf7a7ff7d69928e0afc9dd57b41e3849d639bce9430cd0077121a308574780d69d8a89cbaa7da2a769fc1835be8f8dc3e7f0b8b9727afb31d1e2de590ac68e56bcf27734685fb38105d959188c6c531e2ff4ddaeb13b2d2a654d10703cbd93ab3a8b07ae79c1dcadd523100fea60c57dfb4f99536d705615251df4353fe20350ca1d0577a3a28f841444f7950f7050a49aaf559f94cc22e1b48e7aef7bfc4a1ccb65b0c4bba548aaa765c7a60aca92d9c64bd7367b88d009e303e73a2fea63b66ea6bdec9c9dd71554c3a7b8b0d9411d77547524609c9e638bebd1a337d635f1f1b8e848b5bb310304cf3e5d8c198311d10023dade6a9f3562cfbe2a200dee00cfd7b9d1c1f08b70583884edb35b7e541c7ad936d6aa3eb842e5f6b476f007add62b948a526b88e36a4e0103fcbb244dbf01608adb9bae574b9f89dd15a9e997884", 0x1000}, {&(0x7f0000001380)="c9357010814f5334de9d0d6cb276b59ab019d47c5f910cba9d6572cac0f12f85644affce0094b6234b0bde0a52608ba10c9878e71d0cdad0d76497c734cff67439d3619436d333b42dd159c39264e74b38b824ada8dc6e1023e48557eacb846bb9784fa9fbb49df7916e166852e4f3451287eeaeed1fbadc7136c783b414f3cb9c3b4baa99932ff3ec00d17b8aaf1e2ffcbc56fbad6812ff04a80fe7206aa03bd41ed3592d8f5cd3e3b01c1690759c1fcc2a9ae4584fe593b234a37055c2b5043170e047bc8d5bd9efe8ba545e6748d6375f00f6e727c59183d6721fc3766abe", 0xe0}], 0x6) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TCSBRKP(r7, 0x5425, 0x1fffc0000000000) 19:46:22 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00005b2000/0x1000)=nil, 0x1000}, 0x2}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:22 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) connect$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000a2000/0x3000)=nil, 0x3000}}) ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f00000001c0)) close(r0) 19:46:22 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x52b77de1b8aa0d50, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:22 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup2(r3, r1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000040)={0x6, 'veth0\x00', {0xa}, 0x4c1}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r7 = gettid() ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000000c0)={0x4, 0x0, &(0x7f0000000080)=[@exit_looper], 0x74, 0x0, &(0x7f00000001c0)="ca9a301edf285d0aafcc6ac95704bd2539dbca9ac66d420aab142806974e37148b55b66cb76de5005511086341c6d6d88bd9d92510c7dc92bc9303ae9a69a0acf3cfd9a80702e2eb9d14ca6025bcc726bfec4cc1655446de6b3e9745698e8995630e1cb3fca2b0ccbdaa70bc4d4a0567383d4866"}) process_vm_writev(r7, &(0x7f0000000000), 0x0, &(0x7f0000000040), 0x0, 0x0) close(r0) 19:46:22 executing program 4: r0 = userfaultfd(0x0) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x400000, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x401}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff2b}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x70}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000091}, 0x8080) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x64, r4, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_SCAN_SSIDS={0x50, 0x2d, 0x0, 0x1, [{0x5, 0x0, [0x1f]}, {0x6, 0x0, [0xc, 0x16]}, {0xe, 0x0, [0x10, 0x8, 0x1, 0x1c, 0x7, 0x0, 0x1f, 0x13, 0x1b, 0x6]}, {0x7, 0x0, [0x18, 0xd, 0x5]}, {0xc, 0x0, [0x0, 0xa, 0x1b, 0x12, 0xc, 0x19, 0x2, 0x16]}, {0x9, 0x0, [0x17, 0x16, 0xc, 0x1b, 0x12]}, {0xa, 0x0, [0x11, 0x1d, 0x17, 0x7, 0x1c, 0x12]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x848}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) getpeername$netlink(r10, &(0x7f0000000040), &(0x7f0000000080)=0xc) 19:46:23 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r2, 0x8982, &(0x7f00000000c0)) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000000)={0x7f, 0x0, 0x10001, 0x10001}) ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f0000000080)={r7, 0x96e}) [ 500.357204] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:23 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000000)={0x0, 0x2, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x15, 0xa, 0x100) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000140)={'tunl0\x00', {0x2, 0x4e23, @empty}}) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x400, 0x5, 0x4, 0x20000, 0x10000, {r4, r5/1000+30000}, {0x1, 0x2, 0x1, 0x0, 0x9, 0x0, "ecf97472"}, 0x5, 0x2, @fd=r7, 0x7, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f00000001c0)=0x6) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:46:23 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@getchain={0x54, 0x66, 0x8, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xc, 0xfff1}, {0x8, 0x2}, {0x6, 0xfff2}}, [{0x8, 0xb, 0xffffff81}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x7}, {0x8}]}, 0x54}}, 0x4040000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) [ 500.471719] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:23 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$IMSETDEVNAME(r4, 0x80184947, &(0x7f0000000000)={0x1, 'syz1\x00'}) [ 500.586395] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:23 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r2, r1) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f00000002c0)={0x1, 0x8, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:23 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$VIDIOC_S_STD(0xffffffffffffffff, 0x40085618, &(0x7f0000000040)=0x7) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000000108010400000000000000000b0000070c00048008000140000000030900010073797a31000000000600024000f500000500030029000000"], 0x3c}}, 0x800) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x13, r1, 0xcf926000) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 500.749415] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:23 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCNOTTY(r2, 0x5422) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 500.856805] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:23 executing program 4: r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) r6 = accept4$inet6(r4, 0x0, &(0x7f0000000040), 0x80800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000"]}, 0x108) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f00000002c0)=ANY=[@ANYBLOB="010400000000000000040000000000000800000000000000", @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r3, @ANYBLOB="00000000000400"/28, @ANYRES32=r1, @ANYBLOB="000000001f00000000000000000000000000000000a70000000020084f1411b80fc32f9f9157a3000008", @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32=r9, @ANYRES16, @ANYRES32=r11, @ANYBLOB="000000000200"/28, @ANYRES32, @ANYBLOB="000000000300"/28]) close(r0) 19:46:23 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r4, 0x40184150, &(0x7f0000000080)={0x0, &(0x7f0000000040)="726fee3e92ee25887912ba", 0xb}) r5 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:24 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000000400)=0xe8) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x140, 0x2b, 0x620, 0x70bd2a, 0x25dfdbfb, {0x11}, [@nested={0x3e, 0x60, 0x0, 0x1, [@typed={0x8, 0x87, 0x0, 0x0, @uid}, @generic="d44f800260a34a17464018c229850288d1dff5d078f84a15b346802e5f8a6a937b843ebf20fe295d31c81b3fce15282b31f8"]}, @typed={0x4, 0x4b}, @typed={0x8, 0x16, 0x0, 0x0, @uid=r5}, @generic="18e02f9b0e000e46674cbdaffa615135c427919589db352afca348bb958467f202880e7e331bb3d3054b442a7cfc39ed3adbc20ee9d9bd181aa52db972b16a1c5dbfbbb842d84cea549583c540e7dcd0be3dbf58744dbcd3ba82a626a2b55ce8963504b0b375dabeab673011749c35e2e4b1daf6e7f0c61c409bd856f1018f6d73517d0868ee3313b96583a3f1b4e89c3f385284fead99147ab5eea83592246f388c79fe0add0e51a50e5c11429a767d193fcaf1c996c5824ded81ae4e7c74630c76147c7a7bb6", @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x45, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x14, 0x0, 0x0, @uid=r7}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$TCGETS2(r4, 0x802c542a, &(0x7f0000000580)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r8, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r10, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000500)={r10, 0x31, "666963b3c4cf7fce5285aa622adce35c8ca98d7241986df0a0c8f04c53c77da9a98f00142d07dbcd61fb09dd3edfd038a0"}, &(0x7f0000000540)=0x39) 19:46:24 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$ax25_int(r3, 0x101, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) [ 501.402621] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:24 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="050000002d5569a67e2c7533bd7975d9d3b5a149f3f12588a7aee7a9bdcf4139594ff1443cd5b77091d969777f67ac7c473937e4bb5cd92c473c63b9124ffc06bfa1aaf3e6fc0f5017999183e47a8700"/92, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r3, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r5, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={r5, 0x4}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000200)={r6, 0x9}, &(0x7f0000000240)=0x8) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000000c0)=0x8, 0x8) pipe2(&(0x7f0000000000), 0x80000) r7 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) openat(r9, &(0x7f0000000100)='./file0\x00', 0x0, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 501.899229] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:24 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f00000002c0)}}, 0x10) 19:46:24 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r4, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r6, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={r6, 0x8, 0x7, 0x89f}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:24 executing program 2: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x400, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000080)={0x73, @loopback, 0x4e23, 0x4, 'rr\x00', 0x38, 0x40, 0x39}, 0x2c) r1 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r1, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 502.049369] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 [ 502.114710] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:24 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) accept4(r1, &(0x7f0000000040)=@isdn, &(0x7f0000000140)=0x80, 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$rtc(&(0x7f00000001c0)='/dev/rtc#\x00', 0x5, 0xac00) r5 = dup2(0xffffffffffffffff, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:25 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26300900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_MAP_BUFS(r3, 0xc0186419, &(0x7f0000000240)={0x1, &(0x7f0000000100)=""/15, &(0x7f0000000140)=[{0x7, 0x61, 0x400, &(0x7f00000001c0)=""/97}]}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x19) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 502.354052] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:25 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) exit_group(0x3) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:46:25 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x1000004032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000000)) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:46:25 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x4200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup2(r5, r1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000014002000fe80000000000000000000000000000008000a0000000000060002000100000014001f00"/86], 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x6c, r8, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xffffffffffff877d}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7a}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @empty}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x42041) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) [ 502.558870] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:25 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f0000000000)={0x3, 0x3ff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 502.686353] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:25 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x4, 0x8, 0x402, 0x0, 0x0, {0xc, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9c52}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r5, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r7, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x401}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff2b}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x70}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000091}, 0x8080) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r7, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0xe, 0x13, "d0d9dee09e1f53deada1"}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) 19:46:25 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000005a7e7ef6cc8d43fa838e1235c9c0ccc728bdb269f67c7dc277334fc9c9b1d2986b74f707e8625ae6f6b4d92d8ceea7ccd0dbeeccb2d194e7f6513d61f50a937fbef3b02ad9b9967c02579b5e607105cce33e0acaaee82334789b23f4a12ed10cab6dc121e2521ab464d13786917f2c93fcb8e6e65ec6350599e38708e9146aa7c4e40f91b72f1233a8c48a4e8e1a2bb9abfa7dc8f9e9ddf66822c6c7a6db7682461bc3c05b6f8fecc927170df6e92d7e5dc7a63660a035e3e62c0fdc0cfe333d3cd03901c9c94f6844c564dcc798104113460582e9927bcae72d74b82bb4bf62e7ae"]}, 0x1ea) fanotify_init(0x10, 0x40000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x40000000400204) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r8 = gettid() process_vm_writev(r8, &(0x7f00000001c0), 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/206, 0xfffffff6}], 0x1, 0x0) close(r1) 19:46:25 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0xa8578e78348da91e, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x2) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x7) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x4, 0x0, 0x5e, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0}) [ 503.046695] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:25 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) [ 503.145063] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:25 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="ed8b5aad0481361f20769d8cbab3dad26f710b65063c076ed6c5524ba53e112fba08b0c2c9a187acff50225848430197bb9da2e91d43e0e247a243a5e0dc8944ba0bf0e5bbc90f9bb7a89651ebbc9d2ca0c11644fee4c7a86db5cb69051196a0576490405dbaa06b7ef0eed347bf54c9cfa0fb889973bea980", @ANYRES16=r2, @ANYRES16], 0x3}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x223a1571) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000140)) unshare(0x20800) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbf8, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x2008880) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f00000002c0)={0x1, 0x2000}, 0x4) 19:46:26 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffff, 0x91000) ioctl$USBDEVFS_SUBMITURB(r2, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0}) 19:46:26 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x2, [0x0, 0x0]}, &(0x7f0000000200)=0xc) recvfrom$unix(r3, &(0x7f0000000080)=""/77, 0x4d, 0x1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:46:26 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) dup(r5) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={0x0, 0x0, r5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="07000000000000000000050000000c00018008000100", @ANYRES32, @ANYBLOB="f4ff0500000000008e0c8d14cd96ae092f5124d426e3c23228e8553c1cf14179eac56ba055fb5c89602c0b224fd609d01bd1fb163bafde2e615a69415b73d0533607c75962b44e9b6594ccc809a724f5ee7dbdc499baa62629"], 0x5}, 0x1, 0xa00}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r11, 0xa00, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xfc}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x3}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={r7, 0x80000, r6}) dup(0xffffffffffffffff) 19:46:26 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x12100, 0x0) sendto$inet(r2, &(0x7f00000002c0)="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", 0x1000, 0x851, 0x0, 0x0) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 503.656556] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:26 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) dup(0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)=@builtin='builtin_trusted\x00') add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000140)="6e03dbfa44b0bcb65ac3a11e1e5dd226157b12bd33b431efa1529bbb4dc6227cbd590810fa0cf426c5e8161d379160d3f5bfb98930562d436832f8412cfd8f6af169bed693a292bd99cc5595d7e5d4a78036b50e34f3fc260fab2d3176ae711d745b7ad1128c767048ae5c6b92fd6e78772e6078376cd0ba117b6c3bab59601aeeaca7b090a5b4d912a567077268177f71ad76ff3490c34fac44f87f6397402ef806fd7e732a302b9aff", 0xaa, r6) 19:46:26 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x0}, &(0x7f0000000100)=0x10) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="01c142410222748ddcbc1af008d4541ff3fe2adce808edf1cddb8c51b1388130e000"/49, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r6, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0xfffffffe, {r8, @in6={{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x8000, 0x8000, 0x1f, 0x5, r8}, 0x10) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x8) 19:46:26 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x81, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000180)={@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, {&(0x7f0000000100)=""/86, 0x56}, &(0x7f0000000080), 0x20}, 0xa0) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x36800, 0x0) ioctl$PPPIOCGNPMODE(r6, 0xc008744c, &(0x7f0000000340)={0x8057, 0x3}) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000540)={@mcast1}, 0x14) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r8, 0xc0505405, &(0x7f0000000480)={{0x0, 0x1, 0x4, 0x0, 0x6244fdd5}, 0x29, 0xffff, 0x5ca}) r9 = socket$netlink(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r10, 0x3, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r6, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r10, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x8, 0x2, 0x530e}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) 19:46:26 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x80081, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x40, 0x0}) r3 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setuid(0x0) mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x100000, &(0x7f00000002c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@blksize={'blksize'}}], [{@measure='measure'}, {@uid_lt={'uid<'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@obj_role={'obj_role', 0x3d, '/dev/nvme-fabrics\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x39, 0x38, 0x61, 0x32, 0x34, 0x39, 0x30], 0x2d, [0x33, 0x36, 0x31, 0x38], 0x2d, [0x36, 0x3a, 0x65, 0x36], 0x2d, [0x32, 0x66, 0x63, 0x32], 0x2d, [0x0, 0x32, 0x0, 0x38, 0x62, 0x38, 0x35, 0x33]}}}]}}) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f0000000080)={0x3, @bcast, r7}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r8) setuid(r8) 19:46:26 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4000000, 0x29e000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) dup(0xffffffffffffffff) 19:46:26 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) fallocate(r6, 0x2, 0x4, 0x5) dup(0xffffffffffffffff) 19:46:26 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040005}, 0x10) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xc0002, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:46:26 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KDGETKEYCODE(r7, 0x4b4c, &(0x7f0000000080)={0x80000001, 0x4}) [ 504.234304] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:27 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000140)=0x78) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_S390_VCPU_FAULT(r7, 0x4008ae52, &(0x7f00000001c0)) close(r0) 19:46:27 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, r2, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, r2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r2, 0x12) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 504.404572] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x319880, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x3f6, 0x10, 0x78bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r4 = dup(r1) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) r7 = dup(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x3, 0x6, 0x0, 0xfffffffffffffffd, 0x8}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) dup(0xffffffffffffffff) 19:46:27 executing program 2: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80401, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r6, 0x80045505, &(0x7f00000001c0)=@urb_type_iso={0x0, {0x4, 0x1}, 0x80000001, 0x80, &(0x7f0000000080)="a0b6d387700e61fc5f", 0x9, 0x6, 0x8, 0x4, 0x6, 0x1, &(0x7f00000000c0)="c021404b3ef657323d4ca304e52974d2ea0cec0c953fcc4e70f2825b3f2bc6bcb1e058ccc135b83c9b7ccd467e2da8afd0cc2c9705bf078cf08c559ccb20dc020ef7c11db8e9ea7a637e0c015a327533f85f224837d66c1ebfaa99c8eaec146d69b9ba965a7e7c30609473214b4be3419ffa4b129edfccd5412d9744b68e951c151b44fecc29511ce45b", [{0x0, 0x7fffffff, 0x8}, {0x9, 0x8001, 0x9}, {0x6, 0x3, 0x2}, {0x4, 0x7, 0x7}]}) 19:46:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x6, 0x4b4100) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) dup(0xffffffffffffffff) 19:46:27 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)={0x1, 0x3}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000080)={0x6, 0x8, 0x4, 0x2, 0x6, {}, {0x3, 0x0, 0x3f, 0x3, 0x1, 0x0, "3ba8c1ce"}, 0x9, 0x3, @userptr=0xff, 0x1f, 0x0, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x1411, 0x400, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x1) 19:46:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x9, 0x2b, 0x0, 0xffffffffffffffff}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) mmap$fb(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x20010, 0xffffffffffffffff, 0x93000) dup(0xffffffffffffffff) [ 504.688220] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:27 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x416a40, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$FUSE_WRITE(r7, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, 0x6, {0x1000}}, 0x18) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r5, 0xc08c5336, &(0x7f00000001c0)={0x8, 0x43b6, 0x1, 'queue0\x00', 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x0) r8 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) gettid() process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/211, 0x20}], 0x1, 0x0) close(r0) 19:46:27 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000080)={r4, &(0x7f0000000440)=""/233}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000004c0)={r4, 0x25}) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) recvmsg(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/231, 0xe7}, {&(0x7f00000001c0)=""/153, 0x99}, {&(0x7f0000000000)=""/40, 0x28}, {&(0x7f00000002c0)=""/97, 0x61}, {&(0x7f0000000340)=""/56, 0x38}], 0x5, &(0x7f0000000400)=""/83, 0x53}, 0x40000000) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:46:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x400) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_tcp_int(r4, 0x6, 0x18, &(0x7f0000000100)=0x200, 0x4) setrlimit(0x8, &(0x7f0000000080)={0x10001, 0x1}) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r7 = dup(r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) dup(0xffffffffffffffff) 19:46:27 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'tunl0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9, 0x1, 'ipip\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}}, 0x0) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) [ 504.883433] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:27 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)={0x3, 0x0, [{}, {}, {}]}) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:46:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000100)) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) dup(0xffffffffffffffff) [ 505.015587] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:27 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80, 0x0) accept4$alg(r3, 0x0, 0x0, 0x80800) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 505.160984] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) dup(0xffffffffffffffff) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000080)=0x1) 19:46:27 executing program 4: r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$PNPIPE_INITSTATE(r4, 0x113, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r7 = dup(r6) ioctl$EVIOCGABS2F(r2, 0x8018456f, &(0x7f0000000280)=""/172) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) dup(0xffffffffffffffff) 19:46:28 executing program 4: fanotify_init(0x4, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) r4 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, r4, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, r4, 0x0) rt_tgsigqueueinfo(0xffffffffffffffff, r4, 0x28, &(0x7f0000000040)={0x33, 0x101, 0x7f}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:28 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f00000003c0)=@urb_type_iso={0x0, {0xd}, 0x7fff, 0x80, &(0x7f0000000080)="cd6db56690d7e6ceb9d31b5f2363698eedf4f978ea3075c94278110f5884662b13f8d66462af53d378fbfbfa861dd2943970b08cf1867eecee35a4c7346bb3a1bc56c7f069c2e5bf63b33facb3d6d77750a3e215377e6c021b832634962c665f3595520ca501ad14fb34445337235a97e3b8ff1795843e56eebe1ea07f01a71ba7c7d702ef9664cf371a331a56d5c4c60058be9d37ad7869bd79cf4af1361c7c2d4700cd055d2d8feedb26f0daff921d6057037ef561f836301ff37d2f9771059638d6e8e4a955acc3f2abfa55d03d7726bd366905c413b28087b32f7f2687c45f0eeb65abeebd3fa0", 0xe9, 0x8, 0x37af, 0x6d, 0x1000, 0xf48, &(0x7f00000002c0)="3ed3ceef3dac8ad7277d2b421d1e3e499988b667f3efc99a06b100af0f1645c29bbc66906731f4413f42e543a25ae0f6d5e108e9d01d14fe72e7838248da93fe7fdb3f0fe4d61c15877e020fd5c98eab09e5b763c19ab9a969e19d9395b198c120158e8cc9e5b6b4974bf0a807e6237080da5b0454e4843095e42db0f7afbf3086ffec192de09582f17909b535babe0b171e4cd3a985bb994038f484a6a9181a1625dfa9a50d3ff3a68fc49a99a85ccfc889d3b22c7705a0330e5d80aa68f57633a3c9", [{0x4, 0x9, 0x1}, {0x6, 0x2, 0x6a}, {0x10001, 0x9, 0x2}, {0x876, 0x40, 0x3ff}, {0x8, 0x9, 0x200}, {0xffffffff, 0x401, 0x7}, {0x6fe57676, 0x13, 0x40000}, {0xffff, 0x7, 0x5}, {0x37b, 0x1, 0x8}, {0x7, 0x1000002, 0x7}, {0x800, 0x5}, {0x554e, 0x8727, 0x7}, {0x0, 0x1000, 0x2}, {0x4, 0xe00000, 0x1}, {0x1, 0x8, 0x1ff}, {0xf6, 0x54, 0x7f3}, {0x6, 0x9, 0x3f}, {0xffffd9d4, 0x3}, {0xfffffffc, 0x2, 0x3}, {0x9, 0x7, 0x5}, {0x40, 0x3, 0x6}, {0x40, 0x8, 0x3}, {0x20, 0x800, 0xcd}, {0x7, 0xdc1, 0xfffffffe}, {0x0, 0x2, 0x4}, {0x2, 0x10a3c745, 0xfffffffc}, {0x4, 0x3, 0x6}, {0x1, 0x5c, 0x5}, {0xfffffffe, 0xffffffff, 0x8000}, {0x20, 0x20, 0x6}, {0x4, 0x6, 0x1000}, {0x1f, 0x7ff, 0xf60}, {0xc, 0x7, 0x8}, {0x2, 0x2, 0x20}, {0x5, 0x0, 0x1}, {0x4, 0x100, 0x3}, {0x2, 0xfffffe00, 0x6}, {0x40, 0x0, 0x7f}, {0xfffffffb, 0x4, 0x2}, {0x3, 0x1, 0xfffffffb}, {0x1, 0x7ff, 0x80}, {0x7fffffff, 0x77ab1c81, 0x2}, {0xfffffffc, 0xa71, 0xdbe}, {0x70, 0x4, 0x80000000}, {0x9, 0x1f, 0xe6}, {0x5, 0x9, 0x7}, {0x1000, 0x1, 0x2}, {0x1ff, 0x9, 0x8}, {0xffff, 0x5, 0x9}, {0x101, 0x8, 0x6}, {0x9b, 0x0, 0x1775}, {0x35, 0x0, 0x1a91}, {0x4, 0xfef, 0x3}, {0x10000, 0x2, 0x7}, {0x7ff, 0x9, 0x5}, {0x40, 0x6, 0x6}, {0xa1d8, 0x100, 0x6}, {0x0, 0x1ff, 0x4}, {0x140000, 0x80000001, 0xf8}, {0x8, 0x5, 0x1ff}, {0x8, 0x6d9, 0x1}, {0x3ff, 0x0, 0x19f}, {0x67, 0x8, 0x6}, {0x0, 0x8}, {0xfff, 0x5, 0x8302}, {0xf748, 0x8, 0x1}, {0x1, 0xbf29, 0x100}, {0x7f, 0xffff}, {0x100, 0xffffffff, 0xff}, {0x1, 0x0, 0x1}, {0x10001, 0x3f, 0x10000}, {0x7f, 0xffffffff, 0x3ff}, {0xfea8, 0x3f, 0xe59}, {0x4, 0xfffffffa, 0x1}, {0x9c, 0x8, 0x3}, {0x3f, 0x5, 0x5}, {0x8, 0x0, 0xfffffbff}, {0x0, 0x4, 0x8}, {0x3, 0x1ff, 0xfffffffd}, {0x9, 0x2, 0x1}, {0x450, 0x25, 0x2000}, {0x200, 0x2, 0x5}, {0x200, 0xd1, 0xef}, {0x1, 0x4, 0x80000000}, {0x2, 0x5bb, 0x4}, {0x1e, 0x5, 0x3ff}, {0x8, 0x8, 0x6}, {0x80000000, 0x1, 0x6}, {0x8, 0xfffffffc, 0x9}, {0x8, 0xa57}, {0xe1a3, 0x4f, 0x9}, {0x7fffffff, 0x5, 0x1}, {0xfffffffe, 0x5, 0x9}, {0x1, 0x0, 0xffff}, {0xde, 0x8, 0x17}, {0x2, 0x1, 0x1f}, {0x4, 0x80000000, 0x1}, {0x80, 0x0, 0xe7}, {0x88, 0x5, 0x3}, {0x6, 0x7ff}, {0x1000, 0x1, 0x8001}, {0x87b, 0x3}, {0x800, 0x28000, 0x2}, {0x99, 0x10001, 0x5}, {0x400, 0x6, 0x5}, {0x7, 0x7ff, 0x5}, {0x100, 0x4, 0x1}, {0x80000001, 0x6, 0x3f}, {0x4, 0xfff, 0x20}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x22, &(0x7f0000000000), 0x20a154cc) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0x108, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x37e3, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NODE={0x34, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1cd}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x50f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x13040240}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x11c, r6, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x935}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe2f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xeca}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}]}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4}, 0x40805) [ 505.573531] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #3328 19:46:28 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x80) recvfrom$llc(r1, &(0x7f0000000000)=""/7, 0x7, 0x2000, &(0x7f0000000080)={0x1a, 0x33a, 0x7, 0x7, 0x15, 0xbe, @dev={[], 0x44}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$caif_stream(0x25, 0x1, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 505.765382] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:28 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) splice(r3, &(0x7f0000000000)=0x3, r4, &(0x7f0000000080)=0x5, 0x2c79, 0xd) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xe2a, 0x62082) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000100)=0x8a2) 19:46:28 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x80000) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) inotify_add_watch(r6, &(0x7f0000000080)='./file0\x00', 0x4) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getsockopt$rose(r6, 0x104, 0x1, &(0x7f0000000240), &(0x7f0000000600)=0x4) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r8, 0x80184153, &(0x7f0000000200)={0x0, &(0x7f00000001c0)=[&(0x7f00000002c0)="e1c60e55c70b8de76ea7b67ffb2104ede6a7786dfc921e68c3f6a0c277fca63fc3ad81884c093596d4801693dcc65c542f35b1e2693166719d3a0f26af9cfe206ffa1f2ddd578c054a9e052f165ab0d3136520031028f5f2cd67ad5e2741b15ccf572fb4c8cd32276ad6e5e62f3c3d6a37939849bc656bbd1707e5e20be1058c8005a7d1df194f0b059e66adb4a974b2a436e82e8ae96d749872b96298441b8acf7ee61c640988089d92bb5aebb97cee2e7830fba53ad85eec217e560d9f9379d8bb0e11845349d07ece61", &(0x7f00000003c0)="6b7afd8be95c0723d9de835279cc732c338cfd87c6be550a955c6472ddc22fd3258a8da6e990ab5165428a785eb125bbd739b30da1fabdcb7c2fcf52cc2f085273887bd1e48bc7381b52240b1b9b52eb62266d8d7b7f19d6fb03777756fabcdad90cac63f17ed468a3eaff0ea188b90a7f04a2e3286177b51632cca78a536e8432b0b39310b3080768ad3e2405e4c211aba3bfdc5028cfc0365a64cf3ef7ec9d2028b2d189e50bdbeeb7d9fbc81cf55ab11a9ce4035ab08b7eccd2b77c63c71267a3a21f7275f22a9f62b53db13494b84adf5b08866a7a96b3d9", &(0x7f00000004c0)="76d42d0652d1eb38791b6923ac084424aed0f6374e78e7e215a7a56f4a54cc3b6d51476ce54fbfcf501563877a6ba6a371e031f3fb19059159ab08c683c722d1747ceb3c6639e6b1e2b7db5139568965e99fe53805b9f118ecca4f7e7c24ae195fbb78d1b0370497e321a11f8fae0a2fb0dbb844fcb55b912c9981fea757e411989bda7c037aa6ac32554b8d2375e0b0b11ba6e85de6f0342dc95768ddf2e654df76ef39e4401a0d8d50e68fac88a1367781c14f1377c1e9d8bf96eed655f4a30106c7ff914b38494dbaed28fa510491b5f393dce4d53459d5ee4171c338ef8ea4e352afe1504dc66d8c", &(0x7f0000000140)="07e1dd2b00c633d69dc14d50cd7f2fe901bb6dc88e458c5e447b0b"]}) [ 505.889322] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:28 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0xa0582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000000c0)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x400e01, 0x0) ioctl$USBDEVFS_REAPURB(r4, 0x4008550c, &(0x7f00000002c0)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r5, 0xae04) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'dummy0\x00', 0x4a00}) r6 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x48759a72e9b5da5f, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) renameat2(r7, &(0x7f00000001c0)='./file0\x00', r9, &(0x7f0000000200)='./file0\x00', 0x4) 19:46:28 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffe, 0x0, 0x0}) 19:46:28 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x2aa842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000)=0x44, 0x14) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x101101, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:46:28 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f0000000080)={0x8, 0xd, [{0xd, 0x1}, {0x1, 0x1}, {0x9}, {0xb}, {0x4, 0x1}, {0x4}, {0xf}, {0xc, 0x1}, {0xf}, {0xc, 0x1}, {0x5, 0x1}, {0x1}, {0x5}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r7 = dup2(r6, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) [ 506.140609] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 [ 506.217433] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:28 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_GETDRIVER(r4, 0x41045508, &(0x7f00000002c0)={0x7feb, "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"}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 506.296372] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:29 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 506.437728] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:29 executing program 4: r0 = userfaultfd(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000200)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000040)=[0x0], &(0x7f0000000140)=[0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x400000000000010a, 0x2, 0x4, 0x0, 0x23e84524}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f00005b4000/0x4000)=nil, 0x4000}, 0x1}) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:29 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket(0x10, 0x2, 0x0) socket(0x1e, 0x800, 0xffffffff) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) setuid(r4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 506.576907] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:29 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x28582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 506.692559] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:29 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x4) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:29 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x2000400, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 506.878818] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:29 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000080)={0xe8c, "479cd215c46898a0ba74a14fd4beff9a456015f25c63edfd00b32d3956e61e1d", 0x3, 0x7fffffff, 0x2, 0x8, 0x8}) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, r3, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, r3, 0x0) getpriority(0x1, r3) [ 507.022360] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:29 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:29 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) [ 507.202240] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:30 executing program 4: r0 = userfaultfd(0x180800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_read_part_table(0xfffffffffffffff8, 0x3, &(0x7f00000001c0)=[{&(0x7f00000002c0)="3a339dad6f0b0f9484c0fc9e242541af111cbfbc7eb393dadd66c58a064046d1fcb1d9433cea2e262ceef1d92267b1ba8411c3da043ac888012f92b72b7524c068a9f40fd79ab5e137a4d2af5eecd85368ea201a40ff5d46d2138ca8a4159b4c61283534adde3519fc59e2ec24a2c3f6fa0aa9bcc5d07d636b8a40fa886230e5415f30188621a6019da1dd2e4a096ec2f04b7972b7ff37af10a26c14dcfab16dd9da87713078d9558aff6ccdf45e35317ab02e957adb2521d52a0737b4243082a1c3c5499b8621e84e26e483a3fe2dba878de1f9699e1dccb077802d96ec3fea9e7d6da4d2d4884faa21a44f24451011e3f413ef8a16ce66", 0xf8, 0x9}, {&(0x7f0000000040)="41953981323b22ff39e4004ac31a65ba5b56e3571bfd41b770675fc53094676d9aa68df16b3660668b8fc0bcc11dca46ec81fd9256194c3e49fdb8abe88d9f90661a1f90e48d37af95ddd182c04834540c547abbb75e82ebd5779e09ebe8f691d63fd3efdf0f2428d589393c1ad42f1f802ea973b762a944", 0x78, 0x4}, {&(0x7f0000000140)="166f6101eff1201644edac1a65a88b876b24b5aa342a605b2d2df8ebb6df", 0x1e, 0x7}]) r3 = dup2(r2, r1) openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp1\x00', 0x8000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video1\x00', 0x2, 0x0) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0xe9}], 0x1, &(0x7f00000000c0), 0x0, 0x0) close(r0) 19:46:30 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f0000000040)=""/128) close(r0) 19:46:30 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x8000, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="00000018", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$netlink_NETLINK_CAP_ACK(r7, 0x10e, 0xa, &(0x7f00000000c0)=0x3, 0x4) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r3, 0x20, 0x2, 0x0, 0x6286, 0xd, 0x0, 0x0, {r5, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r5, 0xffff97cb}, 0xc) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 507.814410] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:30 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x48000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x5, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000001c0)={r7, 0x20}, &(0x7f0000000200)=0x8) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r8 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r9) ioprio_get$uid(0x3, r9) r10 = gettid() process_vm_writev(r10, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:30 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$pptp(0xffffffffffffffff, &(0x7f00000005c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) r4 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x22, &(0x7f0000000000), 0x20a154cc) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="0c852464b4d1ce19bb4946084b000000", @ANYRES16=r5, @ANYBLOB="000227bd7000ffdbdf2513000000800001800d0001007564703a73797a30000000000d0001007564703a73797a310000000038000400200001000a004e24000037e3fe880000000000000000000000000101060000001400020002004e247f00000100000000000000002400028008000100150000000800040000000000080001001000000008000200050000003400068008000100cd0100000800010000000000080001000f0500000800010003000000080001000100000008000100ffffffff4400068008000100030000000800010003000000040002000400020008000100ff0f00000800010000020000040002000800010006000000040002000800010004000000"], 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0xcc, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0xb8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8e}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x72}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff00000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0x20000001) r6 = dup(r1) listxattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x12c0c0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/enforce\x00', 0x404000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000340)=0xfffffffffffffe78) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0xd4, 0x13, 0x10, 0x70bd2b, 0x25dfdbfb, {0x1f, 0xff, 0x1f, 0x26, {0x4e20, 0x4e21, [0x4, 0xfffffffd, 0xb6], [0x1ff, 0x7, 0x80, 0x7de], r8, [0x800]}, 0x5, 0x400}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x82, 0x1, "2e825d8338068ab89db04c93f7a8a3ed6900c10594e945c9c0339aac959b4cb4fd160d20db0fb9362c7aeb0ea402692fd798c422ecb942b5d59792027403a97160e982043a98936beba8e029c9ffbde4e58a99bd3bf2af7a24bf51ef06b921144888ee3d85ff3e2853842406e29e9b4bd8c3a0fab5879196030d0e2f4d2f"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x4024}, 0x4008000) 19:46:30 executing program 4: r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000040)={{&(0x7f00000cf000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r8, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000800) [ 508.162447] selinux_nlmsg_perm: 70 callbacks suppressed [ 508.162457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53684 sclass=netlink_route_socket pig=22926 comm=syz-executor.2 [ 508.181972] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:30 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x1, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c804}, 0x20000040) [ 508.308017] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:31 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xde, 0x294a01) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:46:31 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x600440, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @remote}, 0x2, 0x4, 0x4, 0x2}}, 0x26) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000000)=0x6) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bind(r1, &(0x7f0000000080)=@sco, 0x80) 19:46:31 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e23, @broadcast}], 0x30) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r6 = gettid() read$usbmon(r5, &(0x7f00000001c0)=""/185, 0xb9) process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000140)={0x9b0000, 0x7fff, 0x4, r8, 0x0, &(0x7f0000000080)={0x0, 0x1, [], @value64=0x4}}) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f00000002c0)=0x1, &(0x7f0000000300)=0x4) [ 508.509880] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:31 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0xf6212900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 508.629036] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:31 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) preadv(r2, &(0x7f0000001440)=[{&(0x7f00000000c0)=""/152, 0x98}, {&(0x7f00000001c0)=""/174, 0xae}, {&(0x7f00000002c0)=""/131, 0x83}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/179, 0xb3}], 0x5, 0x5) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000080)=0x9) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000000)={0x3}) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 508.735705] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:31 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000001f00)='/dev/net/tun\x00', 0x4003, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001f40)='/dev/fb0\x00', 0x801, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000016c0)=[{&(0x7f0000000000)="c9e364ed711a495363d3170d699e8dd808932a93e79eece165", 0x19}, {&(0x7f00000001c0)="8ad08b737880573aa30abcee37709b338c37c8edaa7c6eb6c27df5ab42e00fae479f44e4c9be1e3d870230985a53f53fe84e7dccabb52a99bd2d39e990de3014d5bd166d03b079be81851a2499a3d4a665c762c2d5a5a1035bb32b1697566a42a97211ba173e43d40f24e3f123a6c08b217dc115f9dedc378ef3206a59ef44d1dd6a9f08779e3e5f0c3e7cf6bdfb44ca1beec9571ba85ecd46f4ddfdccd76d743ee7edc112c5493eedefbe6635cf387f", 0xb0}, {&(0x7f0000001300)="320df347f93038c89ace2252b4f7a24fb6543e6302c2f577e995ea4ca26df4b666db749fb34cbdd5cffa692bf340f29a4f3ea2579a2225cb5369a60f72ae74d76e872097cb8e3d248a3506616ba3174563be1d4c942e8adc0fda33697a2ed53b823c5ee00cfb04852ff48f079daabb62f5d543f1aed18c82f3d031749ed426258a7deccf6f61be1c21d4250cdc6ab45af9e71dd08dd5d9ed1daa7a31f0410d832645e916b07f09d015a6f43d778b5df35e0070e57a7577e18bcdd58a88089884e7ed", 0xc2}, {&(0x7f0000001400)="831031d7941a1c97fdeac46caed620a4e9b01c419ae873f82d14018dd6a9796f56e6846b5354fb1d9cacfb8fda3d80edb14ec3ad91ef8ea2a264b8d3971373cfbadd97e9dd5b66c5235cd11def4956620f70c80103a1f317b126fcdce971263873a8dff641bd3cd1ce06a64f1ae7ebb2387eb6c78f8f96beeb4f6d48e7cd6fe3caa683f98fe75bc5198569a819b47f5fdcd241b95694b39ba818c350fab0ff71c3701c34a1edb1588cd437cbf33fc5fc71924e745833cd3c5f8e1e3b2c44c43d6e49c611f9697e45d987", 0xca}, {&(0x7f0000000100)="e2da4189aa1280f4eb32757af78c628d12b0b82cc1bb5308c52abcc1cc80fca79c24b9ba3bf807854128c9af534b9edb6e26a7f76b23236cdc84d2284c7c4da60cfd1fccb4a88c2a895904e57ab76f22d970ddd2229aad20cbfc49b54382043d4f68faf4700a1d0e28fa61e5ff", 0x6d}, {&(0x7f0000001500)="7c41dca0dd655a03fc313714b31fd012dae883f49dcfba909de78743e471cafccb81e55530da21f14773d182502e747b28d13376ef", 0x35}, {&(0x7f0000001540)="858758c0975ec2f778b432a6167c829efd03d4a5d9117f0d310c5cd3890cb9c8c8675e12dbb7769c61aeb098a56c0fdca848ab3df7cf188e5db3c1663b5ab11eed8f1e4d423a134092f312b9476249de84270e2ff9dd5ddd83dee6623a9c2fb709db2cbab1f6c70e05ad697eae3448865556d68cc05b4b80daa6de4309d19587713f5991fc4ebc5b88a920bd3f6aec978cdfd385114920e1cc1df733795ef355e07b58f84dd7fa3a757c5edee9d57cb13766c4b83f749e8cf36646b7c03f442752bc3d56396ac7ee53ffe703c485b1124ca086bfd85d6e411af6b754816832308e853ad0999b0d90aaa46b93267463d5ac", 0xf1}, {&(0x7f0000001640)="075120a11c706a9672727509643fa0e683de051df5972719fa5bf2f2eda32405bb2739007866668069c30e712da0a6385daca8938101c6396a73e9142e8e8abae3f9a6c0f2c3be2060a770b1d0c0fad13ad4b989b595276945319b6f5bbf5e25f49155fb2c452b91700ef2d87443135d9d", 0x71}], 0x8, &(0x7f0000001740)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32, @ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x285, 0x1}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r8 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x90, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x8000, 0x6, 0x0, 0x800, 0x401}, r8, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, r8, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r8) write$UHID_INPUT2(r5, &(0x7f00000002c0)={0xc, {0x1000, "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"}}, 0x1006) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:46:31 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000080)={r3, &(0x7f0000000440)=""/233}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000000)={r3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$bt_cmtp(0x1f, 0x3, 0x5) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 509.356375] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:32 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0x990000, 0x3, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9b090f, 0x9, [], @string=&(0x7f0000000000)=0x89}}) write$P9_RFSYNC(r4, &(0x7f0000000100)={0x7, 0x33, 0x1}, 0x7) dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400, 0x0) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x80000000000007) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:46:32 executing program 4: r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r7 = dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:32 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x1, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$selinux_user(r4, &(0x7f0000000080)={'system_u:object_r:sshd_exec_t:s0', 0x20, 'unconfined_u\x00'}, 0x2e) [ 509.592535] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:32 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000000)=@generic={0x2, 0x7, 0x8}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x81, 0x0, 0x4f, 0x0, 0x10001, 0x0, 0x2, 0x0, 0x0}) 19:46:32 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup3(r2, r0, 0x80000) write$P9_RFLUSH(r3, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) [ 509.732695] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:32 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000000)={0x0, 0x4, 0x1, 0x7, 'syz0\x00', 0x6}) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 509.868064] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:32 executing program 4: r0 = userfaultfd(0x80c00) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:32 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000)) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0xc601, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r2, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 19:46:32 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) prctl$PR_GET_TSC(0x19, &(0x7f0000000000)) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000280)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 510.196275] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:33 executing program 4: r0 = userfaultfd(0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) gettid() r4 = getpgid(0x0) ioprio_set$pid(0x0, r4, 0x0) process_vm_writev(r4, &(0x7f0000000040)=[{&(0x7f00008f9f09)=""/233, 0xe9}], 0x1, &(0x7f00000000c0), 0x0, 0x0) close(r0) 19:46:33 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f00000002c0)=@urb_type_iso={0x0, {0x5}, 0x1000, 0x20, &(0x7f0000000080)="2c3ea56e819427356802f1e29b455204707abfb3d71f0d5cf7a87f6806ef63cd159e25c135f046af85a0be80827004d7c6bdf6d7c3e0b88f3303071716f41d155e6055719246be7aaf56786f0aeac21d70728496c2e89291de9bab86c7e31a3ea254ca4f80df68eac2695d7b56793f6d809c7cb985e493407205f789536ccf80a11ebe7ef3887dea297de6788d", 0x8d, 0x1, 0x1, 0x37, 0x401, 0x48285604, &(0x7f0000000000), [{0x551, 0x0, 0x89c9}, {0x101, 0x8, 0x4}, {0x81, 0x19, 0x4d40}, {0x3, 0x1, 0xad2}, {0xffff18ed, 0x5, 0x4}, {0x7, 0x261a, 0x3}, {0x300, 0x4, 0x342}, {0xda02, 0xfffffff7, 0xff}, {0xfffff7ee, 0x5, 0x7f}, {0x53953225, 0x8, 0xa6}, {0x9, 0x89b, 0x800}, {0xffff, 0x4}, {0x9c78, 0xdfc, 0x1}, {0x8, 0x6, 0x5}, {0x40, 0x4, 0x101}, {0xdd9, 0x40, 0x3}, {0x8, 0x40, 0x10001}, {0x1e1, 0x5}, {0x200, 0x9, 0x5f80000}, {0x1, 0x6, 0x2}, {0x200, 0x9, 0x3}, {0x5, 0xfffffffc, 0xf1}, {0x401, 0x9, 0x101}, {0x9b, 0xfff}, {0x5, 0x3, 0x7}, {0xf2, 0x5, 0x1}, {0xf467, 0x10001, 0x8}, {0x4, 0x1, 0xffff0000}, {0x40, 0x7f17, 0x81}, {0xfffffffe, 0x4790, 0xe36600}, {0x1, 0x2, 0x3f}, {0x1, 0x80000001, 0x8}, {0x6, 0x2, 0xfffffffd}, {0xfffffffb, 0x9, 0x7f}, {0x1, 0x2, 0xff}, {0x2, 0x1, 0x6}, {0xffff, 0x400000, 0x24}, {0x1, 0x4919, 0x4}, {0x2, 0x7fffffff, 0x4a91}, {0x7ff, 0x5, 0x8001}, {0x2, 0x6b54, 0x1}, {0x335f, 0x81, 0x112893fd}, {0x6, 0xce9b, 0x1}, {0xff, 0x21, 0x7f}, {0x3a3, 0x5, 0x7}, {0x7, 0x4, 0x1}, {0x9, 0x0, 0x6}, {0x6, 0x0, 0x7ff}, {0x1efc, 0x9, 0x3}, {0x8, 0x5, 0xde}, {0x9, 0x6c64, 0xff}, {0x1f, 0x0, 0x401}, {0xe5d, 0x4ca, 0x3f80}, {0x9, 0x695fc40e, 0x8}, {0x0, 0x1f, 0x1ff}]}) [ 510.358516] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #1280 19:46:33 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x103, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x40) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x4ea33f2aca91c33c}) r10 = gettid() process_vm_writev(r10, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:33 executing program 2: r0 = syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1a9f, 0x20582) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$phonet_pipe(r2, &(0x7f00000000c0)={0x23, 0xac, 0x1, 0x64}, 0x10) clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$USBDEVFS_SUBMITURB(r0, 0x80045505, &(0x7f0000000080)=@urb_type_interrupt={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f0000000000)) [ 510.559918] usb usb5: usbfs: interface 0 claimed by hub while 'syz-executor.2' sets config #2 19:46:33 executing program 2 (fault-call:12 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) [ 510.688517] FAULT_INJECTION: forcing a failure. [ 510.688517] name failslab, interval 1, probability 0, space 0, times 0 [ 510.714252] CPU: 1 PID: 23020 Comm: syz-executor.2 Not tainted 4.14.174-syzkaller #0 [ 510.722187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 510.731590] Call Trace: [ 510.734544] dump_stack+0x13e/0x194 [ 510.738192] should_fail.cold+0x10a/0x14b [ 510.749685] should_failslab+0xd6/0x130 [ 510.753680] kmem_cache_alloc_trace+0x2db/0x7b0 [ 510.758367] ? lock_downgrade+0x6e0/0x6e0 [ 510.762525] dma_buf_attach+0x66/0x2d0 [ 510.766424] drm_gem_prime_import_dev+0xb4/0x2d0 [ 510.771199] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 510.776288] ? drm_prime_gem_destroy+0xa0/0xa0 [ 510.780892] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 510.786040] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 510.791419] drm_ioctl_kernel+0x150/0x200 [ 510.795582] drm_ioctl+0x416/0x880 [ 510.799132] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 510.804507] ? drm_getstats+0x20/0x20 [ 510.808332] ? drm_getstats+0x20/0x20 [ 510.812145] do_vfs_ioctl+0x75a/0xfe0 [ 510.815961] ? selinux_file_mprotect+0x5c0/0x5c0 [ 510.820732] ? ioctl_preallocate+0x1a0/0x1a0 [ 510.825157] ? security_file_ioctl+0x76/0xb0 [ 510.829577] ? security_file_ioctl+0x83/0xb0 [ 510.833991] SyS_ioctl+0x7f/0xb0 [ 510.837361] ? do_vfs_ioctl+0xfe0/0xfe0 [ 510.841338] do_syscall_64+0x1d5/0x640 [ 510.845238] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 510.850435] RIP: 0033:0x45c849 [ 510.853628] RSP: 002b:00007fec750e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.861361] RAX: ffffffffffffffda RBX: 00007fec750e46d4 RCX: 000000000045c849 [ 510.868659] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000009 [ 510.875945] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 19:46:33 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) gettid() r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_GETXATTR(r6, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, 0x2, {0x10001}}, 0x18) close(r0) [ 510.883226] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 510.890597] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000000 19:46:33 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) getsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f0000000040), &(0x7f0000000080)=0x4) 19:46:33 executing program 2 (fault-call:12 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) [ 511.276719] FAULT_INJECTION: forcing a failure. [ 511.276719] name failslab, interval 1, probability 0, space 0, times 0 [ 511.304660] CPU: 0 PID: 23034 Comm: syz-executor.2 Not tainted 4.14.174-syzkaller #0 [ 511.312600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.321967] Call Trace: [ 511.325528] dump_stack+0x13e/0x194 [ 511.329172] should_fail.cold+0x10a/0x14b [ 511.333331] should_failslab+0xd6/0x130 [ 511.337309] kmem_cache_alloc_trace+0x2db/0x7b0 [ 511.342007] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 511.347476] ? dma_buf_attach+0x66/0x2d0 [ 511.351554] ? ion_device_create+0x280/0x280 [ 511.355964] ion_dma_buf_attach+0x80/0x570 [ 511.360231] ? ion_device_create+0x280/0x280 [ 511.364645] dma_buf_attach+0x120/0x2d0 [ 511.368635] drm_gem_prime_import_dev+0xb4/0x2d0 [ 511.373406] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 511.378427] ? drm_prime_gem_destroy+0xa0/0xa0 [ 511.383014] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 511.388123] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 511.393500] drm_ioctl_kernel+0x150/0x200 [ 511.397668] drm_ioctl+0x416/0x880 [ 511.401226] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 511.406623] ? drm_getstats+0x20/0x20 [ 511.414104] ? drm_getstats+0x20/0x20 [ 511.417917] do_vfs_ioctl+0x75a/0xfe0 [ 511.421753] ? selinux_file_mprotect+0x5c0/0x5c0 [ 511.426518] ? ioctl_preallocate+0x1a0/0x1a0 [ 511.430943] ? security_file_ioctl+0x76/0xb0 [ 511.435356] ? security_file_ioctl+0x83/0xb0 [ 511.439771] SyS_ioctl+0x7f/0xb0 [ 511.443142] ? do_vfs_ioctl+0xfe0/0xfe0 [ 511.447125] do_syscall_64+0x1d5/0x640 [ 511.451025] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 511.456265] RIP: 0033:0x45c849 [ 511.459458] RSP: 002b:00007fec750e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.467176] RAX: ffffffffffffffda RBX: 00007fec750e46d4 RCX: 000000000045c849 19:46:34 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SIOCGETNODEID(r6, 0x89e1, &(0x7f0000000140)={0x4}) r7 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) [ 511.474477] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000009 [ 511.481771] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 511.489048] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 511.496330] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000001 19:46:34 executing program 2 (fault-call:12 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) [ 511.657024] FAULT_INJECTION: forcing a failure. [ 511.657024] name failslab, interval 1, probability 0, space 0, times 0 [ 511.683007] CPU: 0 PID: 23039 Comm: syz-executor.2 Not tainted 4.14.174-syzkaller #0 [ 511.690954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 511.700318] Call Trace: [ 511.702924] dump_stack+0x13e/0x194 [ 511.706574] should_fail.cold+0x10a/0x14b [ 511.710738] should_failslab+0xd6/0x130 [ 511.714718] kmem_cache_alloc_trace+0x2db/0x7b0 [ 511.719399] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 511.724854] ? dma_buf_attach+0x66/0x2d0 [ 511.728926] ? ion_device_create+0x280/0x280 [ 511.733343] ion_dma_buf_attach+0xe9/0x570 [ 511.737589] ? ion_device_create+0x280/0x280 [ 511.742001] dma_buf_attach+0x120/0x2d0 [ 511.745986] drm_gem_prime_import_dev+0xb4/0x2d0 [ 511.750754] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 511.755792] ? drm_prime_gem_destroy+0xa0/0xa0 [ 511.760396] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 511.765512] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 511.770886] drm_ioctl_kernel+0x150/0x200 [ 511.775050] drm_ioctl+0x416/0x880 [ 511.778601] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 511.784864] ? drm_getstats+0x20/0x20 [ 511.788687] ? drm_getstats+0x20/0x20 [ 511.792507] do_vfs_ioctl+0x75a/0xfe0 [ 511.796347] ? selinux_file_mprotect+0x5c0/0x5c0 [ 511.801114] ? ioctl_preallocate+0x1a0/0x1a0 [ 511.805545] ? security_file_ioctl+0x76/0xb0 [ 511.809958] ? security_file_ioctl+0x83/0xb0 [ 511.814375] SyS_ioctl+0x7f/0xb0 [ 511.817745] ? do_vfs_ioctl+0xfe0/0xfe0 [ 511.821731] do_syscall_64+0x1d5/0x640 [ 511.825634] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 511.830826] RIP: 0033:0x45c849 [ 511.834014] RSP: 002b:00007fec750e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.841733] RAX: ffffffffffffffda RBX: 00007fec750e46d4 RCX: 000000000045c849 [ 511.849013] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000009 [ 511.856293] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 511.863577] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 511.870876] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000002 19:46:34 executing program 2 (fault-call:12 fault-nth:3): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) [ 512.048826] FAULT_INJECTION: forcing a failure. [ 512.048826] name failslab, interval 1, probability 0, space 0, times 0 [ 512.075124] CPU: 0 PID: 23045 Comm: syz-executor.2 Not tainted 4.14.174-syzkaller #0 [ 512.083067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.092434] Call Trace: [ 512.095041] dump_stack+0x13e/0x194 [ 512.098681] should_fail.cold+0x10a/0x14b [ 512.102852] should_failslab+0xd6/0x130 [ 512.106839] __kmalloc+0x2e9/0x7c0 [ 512.110393] ? sg_kmalloc+0x26/0x60 [ 512.114062] sg_kmalloc+0x26/0x60 [ 512.117536] __sg_alloc_table+0x25c/0x3a0 [ 512.121690] ? sgl_alloc+0x30/0x30 [ 512.125244] ? ion_device_create+0x280/0x280 [ 512.129663] sg_alloc_table+0x36/0x230 [ 512.133560] ? dma_buf_attach+0x66/0x2d0 [ 512.137658] ? ion_device_create+0x280/0x280 [ 512.142077] ion_dma_buf_attach+0x13e/0x570 [ 512.146415] ? ion_device_create+0x280/0x280 [ 512.150836] dma_buf_attach+0x120/0x2d0 [ 512.154820] drm_gem_prime_import_dev+0xb4/0x2d0 [ 512.159590] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 512.164622] ? drm_prime_gem_destroy+0xa0/0xa0 [ 512.169219] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 512.174338] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 512.179728] drm_ioctl_kernel+0x150/0x200 [ 512.183891] drm_ioctl+0x416/0x880 [ 512.187445] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 512.192814] ? drm_getstats+0x20/0x20 [ 512.196635] ? drm_getstats+0x20/0x20 [ 512.200445] do_vfs_ioctl+0x75a/0xfe0 [ 512.204257] ? selinux_file_mprotect+0x5c0/0x5c0 [ 512.209030] ? ioctl_preallocate+0x1a0/0x1a0 [ 512.213464] ? security_file_ioctl+0x76/0xb0 [ 512.217906] ? security_file_ioctl+0x83/0xb0 [ 512.222352] SyS_ioctl+0x7f/0xb0 [ 512.225744] ? do_vfs_ioctl+0xfe0/0xfe0 [ 512.229737] do_syscall_64+0x1d5/0x640 [ 512.233647] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 512.238841] RIP: 0033:0x45c849 [ 512.242035] RSP: 002b:00007fec750e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:46:35 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup2(r3, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="48679d4d6c7e16bc664aa36da0059ffc01009160", @ANYRES32, @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRES64=r2], @ANYRES32=r6, @ANYRES32], 0x5}, 0x1, 0x0, 0x0, 0x4000}, 0x4044010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r6}}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x19, 0x8, 0x7, 0x0, 0x204, 0xffffffffffffffff, 0x2, [], r6, r8, 0x4, 0x5, 0x5}, 0x40) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0xe9}], 0x1, &(0x7f00000000c0), 0x0, 0x0) close(r0) [ 512.249768] RAX: ffffffffffffffda RBX: 00007fec750e46d4 RCX: 000000000045c849 [ 512.257045] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000009 [ 512.264411] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 512.271725] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 512.279012] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000003 19:46:35 executing program 2 (fault-call:12 fault-nth:4): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) [ 512.407581] FAULT_INJECTION: forcing a failure. [ 512.407581] name failslab, interval 1, probability 0, space 0, times 0 [ 512.446745] CPU: 1 PID: 23051 Comm: syz-executor.2 Not tainted 4.14.174-syzkaller #0 [ 512.454683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.464050] Call Trace: [ 512.466659] dump_stack+0x13e/0x194 [ 512.470306] should_fail.cold+0x10a/0x14b [ 512.474485] should_failslab+0xd6/0x130 [ 512.478468] kmem_cache_alloc_trace+0x2db/0x7b0 [ 512.483151] __vgem_gem_create+0x44/0xe0 [ 512.487223] vgem_prime_import_sg_table+0x5b/0x280 [ 512.492163] drm_gem_prime_import_dev+0x161/0x2d0 [ 512.497025] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 512.502058] ? drm_prime_gem_destroy+0xa0/0xa0 [ 512.506650] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 512.511764] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 512.517138] drm_ioctl_kernel+0x150/0x200 [ 512.521298] drm_ioctl+0x416/0x880 [ 512.524849] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 512.530231] ? drm_getstats+0x20/0x20 [ 512.534049] ? drm_getstats+0x20/0x20 [ 512.537860] do_vfs_ioctl+0x75a/0xfe0 [ 512.541672] ? selinux_file_mprotect+0x5c0/0x5c0 [ 512.546442] ? ioctl_preallocate+0x1a0/0x1a0 [ 512.550893] ? security_file_ioctl+0x76/0xb0 [ 512.555322] ? security_file_ioctl+0x83/0xb0 [ 512.559878] SyS_ioctl+0x7f/0xb0 [ 512.563267] ? do_vfs_ioctl+0xfe0/0xfe0 [ 512.567252] do_syscall_64+0x1d5/0x640 [ 512.571160] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 512.576355] RIP: 0033:0x45c849 [ 512.579543] RSP: 002b:00007fec750e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 512.587262] RAX: ffffffffffffffda RBX: 00007fec750e46d4 RCX: 000000000045c849 [ 512.594546] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000009 19:46:35 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() r5 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, r5, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, r5, 0x0) ptrace$peeksig(0x4209, r5, &(0x7f0000000080)={0x71de, 0x0, 0x3}, &(0x7f00000002c0)=[{}, {}, {}]) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1}) close(r0) [ 512.601829] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 512.609113] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 512.616391] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000004 19:46:35 executing program 2 (fault-call:12 fault-nth:5): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) [ 512.763382] FAULT_INJECTION: forcing a failure. [ 512.763382] name failslab, interval 1, probability 0, space 0, times 0 [ 512.787094] CPU: 1 PID: 23058 Comm: syz-executor.2 Not tainted 4.14.174-syzkaller #0 [ 512.795031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 512.804391] Call Trace: [ 512.807000] dump_stack+0x13e/0x194 [ 512.810643] should_fail.cold+0x10a/0x14b [ 512.814801] should_failslab+0xd6/0x130 [ 512.818787] kmem_cache_alloc+0x2b5/0x770 [ 512.822939] ? save_trace+0x290/0x290 [ 512.826747] ? ion_dma_buf_attach+0x429/0x570 [ 512.831248] ? save_trace+0x290/0x290 [ 512.835060] __d_alloc+0x2a/0x9b0 [ 512.838523] __shmem_file_setup.part.0+0xcb/0x3c0 [ 512.843373] ? shmem_fill_super+0x8a0/0x8a0 [ 512.847793] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 512.853267] shmem_file_setup+0x4b/0x60 [ 512.857259] drm_gem_object_init+0x36/0xa0 [ 512.861516] __vgem_gem_create+0x6a/0xe0 [ 512.865594] vgem_prime_import_sg_table+0x5b/0x280 [ 512.870532] drm_gem_prime_import_dev+0x161/0x2d0 [ 512.875386] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 512.880412] ? drm_prime_gem_destroy+0xa0/0xa0 [ 512.884999] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 512.890106] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 512.895473] drm_ioctl_kernel+0x150/0x200 [ 512.899628] drm_ioctl+0x416/0x880 [ 512.903182] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 512.908564] ? drm_getstats+0x20/0x20 [ 512.912386] ? drm_getstats+0x20/0x20 [ 512.916193] do_vfs_ioctl+0x75a/0xfe0 [ 512.920000] ? selinux_file_mprotect+0x5c0/0x5c0 [ 512.924762] ? ioctl_preallocate+0x1a0/0x1a0 [ 512.929193] ? security_file_ioctl+0x76/0xb0 [ 512.933606] ? security_file_ioctl+0x83/0xb0 [ 512.938026] SyS_ioctl+0x7f/0xb0 [ 512.941399] ? do_vfs_ioctl+0xfe0/0xfe0 [ 512.945393] do_syscall_64+0x1d5/0x640 [ 512.949297] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 512.954491] RIP: 0033:0x45c849 [ 512.957687] RSP: 002b:00007fec750e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 512.965401] RAX: ffffffffffffffda RBX: 00007fec750e46d4 RCX: 000000000045c849 [ 512.972670] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000009 [ 512.979934] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 512.987227] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 512.994505] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000005 19:46:35 executing program 2 (fault-call:12 fault-nth:6): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) [ 513.118658] FAULT_INJECTION: forcing a failure. [ 513.118658] name failslab, interval 1, probability 0, space 0, times 0 [ 513.130617] CPU: 0 PID: 23062 Comm: syz-executor.2 Not tainted 4.14.174-syzkaller #0 [ 513.138526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.147881] Call Trace: [ 513.150480] dump_stack+0x13e/0x194 [ 513.154121] should_fail.cold+0x10a/0x14b [ 513.158288] ? shmem_destroy_callback+0xa0/0xa0 [ 513.162963] should_failslab+0xd6/0x130 [ 513.166941] ? shmem_destroy_callback+0xa0/0xa0 [ 513.171631] kmem_cache_alloc+0x2b5/0x770 [ 513.175783] ? __d_alloc+0x2a/0x9b0 [ 513.179413] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 513.184889] ? shmem_destroy_callback+0xa0/0xa0 [ 513.189575] shmem_alloc_inode+0x18/0x40 [ 513.198278] ? shmem_destroy_callback+0xa0/0xa0 [ 513.202963] alloc_inode+0x5d/0x170 [ 513.206611] new_inode_pseudo+0x14/0xe0 [ 513.210604] new_inode+0x1b/0x40 [ 513.213977] shmem_get_inode+0x75/0x750 [ 513.217965] ? __d_alloc+0x5bb/0x9b0 [ 513.221691] __shmem_file_setup.part.0+0x104/0x3c0 [ 513.226631] ? shmem_fill_super+0x8a0/0x8a0 [ 513.230964] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 513.236424] shmem_file_setup+0x4b/0x60 [ 513.240424] drm_gem_object_init+0x36/0xa0 [ 513.244688] __vgem_gem_create+0x6a/0xe0 [ 513.248766] vgem_prime_import_sg_table+0x5b/0x280 [ 513.254053] drm_gem_prime_import_dev+0x161/0x2d0 [ 513.259204] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 513.264240] ? drm_prime_gem_destroy+0xa0/0xa0 19:46:35 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) [ 513.268843] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 513.274482] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 513.279857] drm_ioctl_kernel+0x150/0x200 [ 513.284029] drm_ioctl+0x416/0x880 [ 513.287596] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 513.292970] ? drm_getstats+0x20/0x20 [ 513.296786] ? drm_getstats+0x20/0x20 [ 513.300595] do_vfs_ioctl+0x75a/0xfe0 [ 513.304404] ? selinux_file_mprotect+0x5c0/0x5c0 [ 513.309173] ? ioctl_preallocate+0x1a0/0x1a0 [ 513.313608] ? security_file_ioctl+0x76/0xb0 [ 513.318023] ? security_file_ioctl+0x83/0xb0 [ 513.322450] SyS_ioctl+0x7f/0xb0 [ 513.325827] ? do_vfs_ioctl+0xfe0/0xfe0 [ 513.329807] do_syscall_64+0x1d5/0x640 [ 513.333701] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 513.338895] RIP: 0033:0x45c849 [ 513.342085] RSP: 002b:00007fec750e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.349805] RAX: ffffffffffffffda RBX: 00007fec750e46d4 RCX: 000000000045c849 [ 513.357101] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000009 [ 513.364478] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 513.371755] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 513.379043] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000006 19:46:36 executing program 2 (fault-call:12 fault-nth:7): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) [ 513.484530] FAULT_INJECTION: forcing a failure. [ 513.484530] name failslab, interval 1, probability 0, space 0, times 0 [ 513.515980] CPU: 0 PID: 23068 Comm: syz-executor.2 Not tainted 4.14.174-syzkaller #0 [ 513.523939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.533488] Call Trace: [ 513.536097] dump_stack+0x13e/0x194 [ 513.539748] should_fail.cold+0x10a/0x14b [ 513.543913] should_failslab+0xd6/0x130 [ 513.547901] kmem_cache_alloc+0x2b5/0x770 [ 513.552069] ? shmem_alloc_inode+0x18/0x40 [ 513.556310] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 513.561817] selinux_inode_alloc_security+0xb1/0x2a0 [ 513.566962] security_inode_alloc+0x8f/0xd0 [ 513.571308] inode_init_always+0x549/0xaf0 [ 513.575557] alloc_inode+0x7a/0x170 [ 513.579207] new_inode_pseudo+0x14/0xe0 [ 513.583212] new_inode+0x1b/0x40 [ 513.586591] shmem_get_inode+0x75/0x750 [ 513.590569] ? __d_alloc+0x5bb/0x9b0 [ 513.594304] __shmem_file_setup.part.0+0x104/0x3c0 [ 513.599249] ? shmem_fill_super+0x8a0/0x8a0 [ 513.603585] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 513.609046] shmem_file_setup+0x4b/0x60 [ 513.613036] drm_gem_object_init+0x36/0xa0 [ 513.617285] __vgem_gem_create+0x6a/0xe0 [ 513.621356] vgem_prime_import_sg_table+0x5b/0x280 [ 513.626306] drm_gem_prime_import_dev+0x161/0x2d0 [ 513.631194] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 513.636238] ? drm_prime_gem_destroy+0xa0/0xa0 [ 513.640840] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 513.645962] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 513.651339] drm_ioctl_kernel+0x150/0x200 [ 513.655507] drm_ioctl+0x416/0x880 [ 513.659063] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 513.664442] ? drm_getstats+0x20/0x20 [ 513.668267] ? drm_getstats+0x20/0x20 [ 513.672094] do_vfs_ioctl+0x75a/0xfe0 [ 513.675912] ? selinux_file_mprotect+0x5c0/0x5c0 [ 513.680696] ? ioctl_preallocate+0x1a0/0x1a0 [ 513.685128] ? security_file_ioctl+0x76/0xb0 [ 513.689544] ? security_file_ioctl+0x83/0xb0 [ 513.693961] SyS_ioctl+0x7f/0xb0 [ 513.697334] ? do_vfs_ioctl+0xfe0/0xfe0 [ 513.701317] do_syscall_64+0x1d5/0x640 [ 513.705217] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 513.710408] RIP: 0033:0x45c849 [ 513.713593] RSP: 002b:00007fec750e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 513.721312] RAX: ffffffffffffffda RBX: 00007fec750e46d4 RCX: 000000000045c849 [ 513.728588] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000009 [ 513.735869] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 513.743411] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 513.750695] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000007 19:46:36 executing program 2 (fault-call:12 fault-nth:8): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) [ 513.906419] FAULT_INJECTION: forcing a failure. [ 513.906419] name failslab, interval 1, probability 0, space 0, times 0 [ 513.928120] CPU: 0 PID: 23073 Comm: syz-executor.2 Not tainted 4.14.174-syzkaller #0 [ 513.936066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 513.945458] Call Trace: [ 513.948072] dump_stack+0x13e/0x194 [ 513.951718] should_fail.cold+0x10a/0x14b [ 513.955881] should_failslab+0xd6/0x130 [ 513.959874] kmem_cache_alloc+0x2b5/0x770 [ 513.964065] get_empty_filp+0x86/0x3e0 [ 513.967996] alloc_file+0x23/0x440 [ 513.971554] __shmem_file_setup.part.0+0x198/0x3c0 [ 513.976504] ? shmem_fill_super+0x8a0/0x8a0 [ 513.980839] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 513.986305] shmem_file_setup+0x4b/0x60 [ 513.990306] drm_gem_object_init+0x36/0xa0 [ 513.994554] __vgem_gem_create+0x6a/0xe0 [ 513.998626] vgem_prime_import_sg_table+0x5b/0x280 [ 514.003565] drm_gem_prime_import_dev+0x161/0x2d0 [ 514.008420] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 514.013449] ? drm_prime_gem_destroy+0xa0/0xa0 [ 514.018038] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 514.023146] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 514.028517] drm_ioctl_kernel+0x150/0x200 [ 514.032677] drm_ioctl+0x416/0x880 [ 514.036232] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 514.041632] ? drm_getstats+0x20/0x20 [ 514.045458] ? drm_getstats+0x20/0x20 [ 514.049284] do_vfs_ioctl+0x75a/0xfe0 [ 514.053111] ? selinux_file_mprotect+0x5c0/0x5c0 [ 514.057878] ? ioctl_preallocate+0x1a0/0x1a0 [ 514.062310] ? security_file_ioctl+0x76/0xb0 [ 514.066731] ? security_file_ioctl+0x83/0xb0 [ 514.071156] SyS_ioctl+0x7f/0xb0 [ 514.074528] ? do_vfs_ioctl+0xfe0/0xfe0 [ 514.078528] do_syscall_64+0x1d5/0x640 [ 514.082431] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 514.087633] RIP: 0033:0x45c849 [ 514.090822] RSP: 002b:00007fec750e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.098570] RAX: ffffffffffffffda RBX: 00007fec750e46d4 RCX: 000000000045c849 [ 514.105850] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000009 [ 514.113137] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 514.120417] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 514.127702] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000008 19:46:36 executing program 2 (fault-call:12 fault-nth:9): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) [ 514.242914] FAULT_INJECTION: forcing a failure. [ 514.242914] name failslab, interval 1, probability 0, space 0, times 0 [ 514.279767] CPU: 1 PID: 23076 Comm: syz-executor.2 Not tainted 4.14.174-syzkaller #0 [ 514.287719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.297100] Call Trace: [ 514.299731] dump_stack+0x13e/0x194 [ 514.303375] should_fail.cold+0x10a/0x14b [ 514.307545] should_failslab+0xd6/0x130 [ 514.311525] kmem_cache_alloc+0x2b5/0x770 [ 514.315679] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 514.321137] ? rcu_read_lock_sched_held+0x10a/0x130 [ 514.326160] selinux_file_alloc_security+0xaf/0x190 [ 514.331195] security_file_alloc+0x66/0xa0 [ 514.335433] ? selinux_is_enabled+0x5/0x50 [ 514.339674] get_empty_filp+0x15c/0x3e0 [ 514.343655] alloc_file+0x23/0x440 [ 514.347216] __shmem_file_setup.part.0+0x198/0x3c0 [ 514.352153] ? shmem_fill_super+0x8a0/0x8a0 [ 514.356487] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 514.361960] shmem_file_setup+0x4b/0x60 [ 514.365957] drm_gem_object_init+0x36/0xa0 [ 514.370209] __vgem_gem_create+0x6a/0xe0 [ 514.374286] vgem_prime_import_sg_table+0x5b/0x280 [ 514.379233] drm_gem_prime_import_dev+0x161/0x2d0 [ 514.384103] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 514.389135] ? drm_prime_gem_destroy+0xa0/0xa0 [ 514.393738] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 514.398857] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 514.404231] drm_ioctl_kernel+0x150/0x200 [ 514.408408] drm_ioctl+0x416/0x880 [ 514.411996] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 514.417372] ? drm_getstats+0x20/0x20 [ 514.421197] ? drm_getstats+0x20/0x20 [ 514.425974] do_vfs_ioctl+0x75a/0xfe0 [ 514.429788] ? selinux_file_mprotect+0x5c0/0x5c0 [ 514.434556] ? ioctl_preallocate+0x1a0/0x1a0 [ 514.438982] ? security_file_ioctl+0x76/0xb0 [ 514.443396] ? security_file_ioctl+0x83/0xb0 [ 514.447865] SyS_ioctl+0x7f/0xb0 [ 514.451241] ? do_vfs_ioctl+0xfe0/0xfe0 [ 514.455232] do_syscall_64+0x1d5/0x640 [ 514.460275] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 514.465482] RIP: 0033:0x45c849 [ 514.468679] RSP: 002b:00007fec750e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.476407] RAX: ffffffffffffffda RBX: 00007fec750e46d4 RCX: 000000000045c849 [ 514.483693] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000009 19:46:37 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) preadv(r1, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/73, 0x49}, {&(0x7f0000000280)=""/129, 0x81}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000140)=""/33, 0x21}], 0x4, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000100), 0x4) dup(r1) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8916, 0x240100) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000003c0)={0x0, 0x1, 0x4, [], &(0x7f0000000380)=0x3}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000400)={0x1000001, 0xfffffffd, 0x1d, 0x100, 0x9}) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) [ 514.490973] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 514.498252] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 514.505540] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000009 19:46:37 executing program 4: r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setgid(0x0) setregid(0xee00, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCGETA(r2, 0x5405, &(0x7f0000000040)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)=@builtin='builtin_trusted\x00') r4 = request_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)='\x00', r3) keyctl$read(0xb, r4, &(0x7f00000002c0)=""/135, 0x87) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r6, r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xfff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r7 = gettid() process_vm_writev(r7, &(0x7f0000000200), 0x0, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xdc}], 0x1, 0x0) close(r0) 19:46:37 executing program 2 (fault-call:12 fault-nth:10): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:46:37 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) write$dsp(r5, &(0x7f0000000100)="f87744bf25a83ce5be6f706a5aba6e3e9dc306ff1e1bd742513627e8b4ba972fe99fccf49b8a6aa7759702f001f8dcaaf48bb978751d9893014e0852b0f35d43c23a60c70f1c712ded21", 0x4a) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) [ 514.679156] FAULT_INJECTION: forcing a failure. [ 514.679156] name failslab, interval 1, probability 0, space 0, times 0 [ 514.722074] CPU: 1 PID: 23086 Comm: syz-executor.2 Not tainted 4.14.174-syzkaller #0 [ 514.729994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 514.739360] Call Trace: [ 514.741969] dump_stack+0x13e/0x194 [ 514.745620] should_fail.cold+0x10a/0x14b [ 514.749792] should_failslab+0xd6/0x130 [ 514.753783] kmem_cache_alloc+0x2b5/0x770 [ 514.757962] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 514.763430] ? rcu_read_lock_sched_held+0x10a/0x130 [ 514.768468] selinux_file_alloc_security+0xaf/0x190 [ 514.773499] security_file_alloc+0x66/0xa0 [ 514.777741] ? selinux_is_enabled+0x5/0x50 [ 514.781990] get_empty_filp+0x15c/0x3e0 [ 514.785976] alloc_file+0x23/0x440 [ 514.789531] __shmem_file_setup.part.0+0x198/0x3c0 [ 514.795078] ? shmem_fill_super+0x8a0/0x8a0 [ 514.799405] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 514.804900] shmem_file_setup+0x4b/0x60 [ 514.808891] drm_gem_object_init+0x36/0xa0 [ 514.813139] __vgem_gem_create+0x6a/0xe0 [ 514.817219] vgem_prime_import_sg_table+0x5b/0x280 [ 514.822160] drm_gem_prime_import_dev+0x161/0x2d0 [ 514.827021] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 514.832053] ? drm_prime_gem_destroy+0xa0/0xa0 [ 514.836644] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 514.841755] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 514.847130] drm_ioctl_kernel+0x150/0x200 [ 514.851286] drm_ioctl+0x416/0x880 [ 514.854839] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 514.860303] ? drm_getstats+0x20/0x20 [ 514.864124] ? drm_getstats+0x20/0x20 [ 514.867936] do_vfs_ioctl+0x75a/0xfe0 [ 514.871743] ? selinux_file_mprotect+0x5c0/0x5c0 [ 514.876512] ? ioctl_preallocate+0x1a0/0x1a0 [ 514.880957] ? security_file_ioctl+0x76/0xb0 [ 514.885376] ? security_file_ioctl+0x83/0xb0 [ 514.889798] SyS_ioctl+0x7f/0xb0 [ 514.893169] ? do_vfs_ioctl+0xfe0/0xfe0 [ 514.897157] do_syscall_64+0x1d5/0x640 [ 514.901319] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 514.906540] RIP: 0033:0x45c849 [ 514.909732] RSP: 002b:00007fec750e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.917451] RAX: ffffffffffffffda RBX: 00007fec750e46d4 RCX: 000000000045c849 [ 514.924731] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000009 [ 514.932011] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 514.939288] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 514.946569] R13: 00000000000002a7 R14: 00000000004d3330 R15: 000000000000000a 19:46:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000080)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan1\x00', r4}) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) 19:46:38 executing program 2 (fault-call:12 fault-nth:11): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) [ 515.389789] FAULT_INJECTION: forcing a failure. [ 515.389789] name failslab, interval 1, probability 0, space 0, times 0 [ 515.406821] CPU: 1 PID: 23098 Comm: syz-executor.2 Not tainted 4.14.174-syzkaller #0 [ 515.414734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.424805] Call Trace: [ 515.427411] dump_stack+0x13e/0x194 [ 515.431050] should_fail.cold+0x10a/0x14b [ 515.435211] should_failslab+0xd6/0x130 [ 515.439189] kmem_cache_alloc_trace+0x2db/0x7b0 [ 515.443865] ? __mutex_unlock_slowpath+0x75/0x780 [ 515.448717] drm_vma_node_allow+0x4e/0x2e0 [ 515.452960] drm_gem_handle_create_tail+0x196/0x340 [ 515.457985] ? drm_gem_destroy+0xa0/0xa0 [ 515.462049] ? drm_gem_prime_import_dev+0x1a5/0x2d0 [ 515.467070] drm_gem_prime_fd_to_handle+0x277/0x430 [ 515.472126] ? drm_prime_gem_destroy+0xa0/0xa0 [ 515.476804] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 515.481927] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 515.487302] drm_ioctl_kernel+0x150/0x200 [ 515.491473] drm_ioctl+0x416/0x880 [ 515.495020] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 515.500394] ? drm_getstats+0x20/0x20 [ 515.504223] ? drm_getstats+0x20/0x20 [ 515.508043] do_vfs_ioctl+0x75a/0xfe0 [ 515.511859] ? selinux_file_mprotect+0x5c0/0x5c0 [ 515.516636] ? ioctl_preallocate+0x1a0/0x1a0 [ 515.521067] ? security_file_ioctl+0x76/0xb0 [ 515.525484] ? security_file_ioctl+0x83/0xb0 [ 515.529905] SyS_ioctl+0x7f/0xb0 [ 515.533277] ? do_vfs_ioctl+0xfe0/0xfe0 [ 515.537267] do_syscall_64+0x1d5/0x640 [ 515.541167] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 515.546372] RIP: 0033:0x45c849 [ 515.549566] RSP: 002b:00007fec750e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 515.557285] RAX: ffffffffffffffda RBX: 00007fec750e46d4 RCX: 000000000045c849 [ 515.564576] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000009 [ 515.572011] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 515.579303] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d 19:46:38 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x1) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x885a81c90e81a766, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x3c, &(0x7f0000000500)=[@in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x5}]}, &(0x7f0000000580)=0x10) r6 = socket(0x10, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x22, &(0x7f0000000000), 0x20a154cc) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0903ffffcece8765cf7c", @ANYRES16=r7, @ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000011}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x1b0, r7, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd6a}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}]}]}, @TIPC_NLA_SOCK={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x245}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x96}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f8022fd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a58}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x10, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x0, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x93}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4040}, 0x20040880) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x0, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffa000/0x4000)=nil) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) [ 515.586586] R13: 00000000000002a7 R14: 00000000004d3330 R15: 000000000000000b 19:46:38 executing program 2 (fault-call:12 fault-nth:12): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) [ 515.619656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52942 sclass=netlink_route_socket pig=23101 comm=syz-executor.4 19:46:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40485404, &(0x7f0000000100)={{0x2, 0x0, 0x8, 0x2, 0x8001}, 0x5, 0x4}) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x201) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, &(0x7f0000000340)=0x8) time(&(0x7f0000000080)) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) [ 515.742962] FAULT_INJECTION: forcing a failure. [ 515.742962] name failslab, interval 1, probability 0, space 0, times 0 [ 515.786845] CPU: 1 PID: 23108 Comm: syz-executor.2 Not tainted 4.14.174-syzkaller #0 [ 515.794785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 515.804155] Call Trace: [ 515.806767] dump_stack+0x13e/0x194 [ 515.810426] should_fail.cold+0x10a/0x14b [ 515.814590] should_failslab+0xd6/0x130 [ 515.819101] kmem_cache_alloc_trace+0x2db/0x7b0 [ 515.823820] ? drm_gem_handle_create_tail+0x29d/0x340 [ 515.829024] drm_prime_add_buf_handle+0x52/0x480 [ 515.833791] ? drm_gem_prime_import_dev+0x1a5/0x2d0 [ 515.838843] drm_gem_prime_fd_to_handle+0x2cb/0x430 [ 515.843870] ? drm_prime_gem_destroy+0xa0/0xa0 [ 515.848457] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 515.853568] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 515.858936] drm_ioctl_kernel+0x150/0x200 [ 515.867959] drm_ioctl+0x416/0x880 [ 515.871509] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 515.876879] ? drm_getstats+0x20/0x20 [ 515.880701] ? drm_getstats+0x20/0x20 [ 515.884512] do_vfs_ioctl+0x75a/0xfe0 [ 515.888339] ? selinux_file_mprotect+0x5c0/0x5c0 [ 515.893108] ? ioctl_preallocate+0x1a0/0x1a0 [ 515.897537] ? security_file_ioctl+0x76/0xb0 [ 515.901954] ? security_file_ioctl+0x83/0xb0 [ 515.906385] SyS_ioctl+0x7f/0xb0 [ 515.909765] ? do_vfs_ioctl+0xfe0/0xfe0 [ 515.913754] do_syscall_64+0x1d5/0x640 [ 515.917656] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 515.922870] RIP: 0033:0x45c849 [ 515.926065] RSP: 002b:00007fec750e3c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:46:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x0, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) [ 515.933791] RAX: ffffffffffffffda RBX: 00007fec750e46d4 RCX: 000000000045c849 [ 515.941065] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000009 [ 515.948344] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 515.955626] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000d [ 515.962911] R13: 00000000000002a7 R14: 00000000004d3330 R15: 000000000000000c 19:46:38 executing program 2 (fault-call:12 fault-nth:13): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:46:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000080)={0x80, 0xa, 0x1, r8}) r9 = dup(r4) r10 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r6, 0x1276, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) 19:46:38 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000240)=0x5) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000203010100000000000000000500e10a082b1a59bbd16e40000000040900020000230101"], 0x28}, 0x1, 0x0, 0x0, 0x881}, 0x40020) close(r0) 19:46:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x5d1980, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) r4 = dup(r3) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000080)={0x3, 0x48524742, 0x8, 0x3d2, 0x2, @stepwise={{0x2, 0xc3f}, {0x5, 0x4c0}, {0x0, 0x800}}}) r7 = dup(r6) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) 19:46:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) dup3(r3, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000100)=0x0) io_submit(r4, 0x1, &(0x7f0000000400)=[&(0x7f00000000c0)={0x10000000000000, 0x0, 0x80000000000000, 0x5, 0x880a, 0xffffffffffffffff, 0x0}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) io_submit(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6, r5, &(0x7f0000000080)=']', 0x1, 0xfffffffffffffe00}]) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r8 = dup(r7) r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r12 = dup(r11) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r12}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) 19:46:39 executing program 4: r0 = userfaultfd(0x0) epoll_create1(0x80000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup2(r2, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) r5 = getuid() stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r4, r5, r6) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000085000/0x3000)=nil, 0x3000}, 0x1}) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:39 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x100}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x80, 0xcb80, 0x0, 0x0, 0x5}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, [], 0xc}, 0xffffffe0}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000140)={r6, 0x7d95, 0x8, 0x1, 0xfffffffe}, &(0x7f0000000180)=0x14) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r8 = dup(r7) r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r12 = dup(r11) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r12}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) 19:46:39 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r6, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000200)={r6, 0x23, "dd57dbf1c035a3264d765bce43dbc41a20c6bec3ac3711101d702d7119c8a8b5923989"}, &(0x7f0000000240)=0x2b) r7 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = accept4$tipc(r7, &(0x7f0000000080)=@name, &(0x7f0000000140)=0x10, 0x0) signalfd4(r8, &(0x7f0000000040)={[0x2]}, 0x8, 0x80000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:40 executing program 4: r0 = userfaultfd(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40102, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000100)=0x4) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0xe9}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xdc}], 0x1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r7, 0x8982, &(0x7f0000000140)={0x6, 'team_slave_1\x00', {}, 0x3}) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) 19:46:40 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) fcntl$setlease(r3, 0x400, 0x0) r4 = gettid() r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8401, 0x0) getsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000080), &(0x7f0000000140)=0x4) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:40 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r5, 0x3f, 0x18}, 0xc) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:40 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/235, 0xeb}], 0x1, &(0x7f0000000140)=[{&(0x7f0000217f28)=""/191, 0xbf}, {&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f00000001c0)=""/103, 0x67}], 0x3, 0x0) close(r0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x9, 0x200000) getpid() openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x50002, 0x0) 19:46:41 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f0000000040)={{0x0, 0x9}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = dup2(r4, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) 19:46:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x24000080) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040029bd7000fddbdf25030000b3d106c0af701999d4c390ee00"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x400, 0x0) r10 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x9, 0x101000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x78, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0x8, 0x1, r9}, {0x8, 0x1, r5}, {0x8, 0x1, r5}, {0x8, 0x1, r10}, {0x8, 0x1, r12}, {0x8, 0x1, r8}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x11b}]}, 0x78}, 0x1, 0x0, 0x0, 0x40940}, 0x20040001) 19:46:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100)={0xffffffffffffffff}, 0x4, {0xa, 0x4e22, 0x710, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2e25}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000080), r7}}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$TIOCGDEV(r11, 0x80045432, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r11, 0x80082102, &(0x7f0000000200)) 19:46:41 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x1ff) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() process_vm_writev(r4, &(0x7f0000000080)=[{&(0x7f00008f9f09)=""/233, 0xe9}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xdc}], 0x1, 0x0) close(r0) 19:46:41 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5afbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05752981", @ANYRES32=0x0, @ANYBLOB="b3ef461584d1f8f0"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000011000d040000000000000000000003001b3a9d70b230584b7f7ff558e5c046c6de7048307cef85ffb889fb5a7b5fd6febd18fc3ee847c8be1a358b2ba9d905e513212ab2", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00&'], 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="ac0200002d0008002cbd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="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"], 0x2ac}, 0x1, 0x0, 0x0, 0x21}, 0x4008400) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = dup2(r7, r6) ioctl$SNDRV_PCM_IOCTL_FORWARD(r8, 0x40084149, &(0x7f0000000040)=0x100000001) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) process_vm_writev(0x0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) close(r0) [ 518.861620] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 518.884932] bridge0: port 3(veth15) entered blocking state [ 518.890805] bridge0: port 3(veth15) entered disabled state [ 518.898059] device veth15 entered promiscuous mode 19:46:41 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) r4 = gettid() r5 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, r5, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, r5, 0x0) ptrace$peeksig(0x4209, r5, &(0x7f0000000080)={0x71de, 0x0, 0x3}, &(0x7f00000002c0)=[{}, {}, {}]) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/233, 0x208f9ff2}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/220, 0xfffffebd}], 0x1, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1}) close(r0) [ 518.911493] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 19:46:42 executing program 4 (fault-call:8 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) [ 519.455591] FAULT_INJECTION: forcing a failure. [ 519.455591] name failslab, interval 1, probability 0, space 0, times 0 [ 519.478146] CPU: 1 PID: 23195 Comm: syz-executor.4 Not tainted 4.14.174-syzkaller #0 [ 519.486070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.495442] Call Trace: [ 519.498045] dump_stack+0x13e/0x194 [ 519.501696] should_fail.cold+0x10a/0x14b [ 519.505856] should_failslab+0xd6/0x130 [ 519.509846] kmem_cache_alloc_trace+0x2db/0x7b0 [ 519.514533] ? lock_downgrade+0x6e0/0x6e0 [ 519.518692] dma_buf_attach+0x66/0x2d0 [ 519.522587] drm_gem_prime_import_dev+0xb4/0x2d0 [ 519.527355] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 519.532376] ? drm_prime_gem_destroy+0xa0/0xa0 [ 519.536963] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 519.542075] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 519.547445] drm_ioctl_kernel+0x150/0x200 [ 519.551609] drm_ioctl+0x416/0x880 [ 519.555160] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 519.560531] ? drm_getstats+0x20/0x20 [ 519.564343] ? drm_getstats+0x20/0x20 [ 519.568149] do_vfs_ioctl+0x75a/0xfe0 [ 519.571960] ? selinux_file_mprotect+0x5c0/0x5c0 [ 519.576813] ? ioctl_preallocate+0x1a0/0x1a0 [ 519.581254] ? security_file_ioctl+0x76/0xb0 [ 519.585675] ? security_file_ioctl+0x83/0xb0 [ 519.590097] SyS_ioctl+0x7f/0xb0 [ 519.593475] ? do_vfs_ioctl+0xfe0/0xfe0 [ 519.597461] do_syscall_64+0x1d5/0x640 [ 519.601368] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 519.606562] RIP: 0033:0x45c849 [ 519.610707] RSP: 002b:00007f4fe5c5ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 519.618421] RAX: ffffffffffffffda RBX: 00007f4fe5c5b6d4 RCX: 000000000045c849 [ 519.625692] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000006 [ 519.632961] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 519.640239] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 519.647519] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000000 19:46:42 executing program 4 (fault-call:8 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) [ 519.877867] FAULT_INJECTION: forcing a failure. [ 519.877867] name failslab, interval 1, probability 0, space 0, times 0 [ 519.900370] CPU: 1 PID: 23198 Comm: syz-executor.4 Not tainted 4.14.174-syzkaller #0 [ 519.908320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 519.917686] Call Trace: [ 519.920302] dump_stack+0x13e/0x194 [ 519.923968] should_fail.cold+0x10a/0x14b [ 519.928135] should_failslab+0xd6/0x130 [ 519.932230] kmem_cache_alloc_trace+0x2db/0x7b0 [ 519.936911] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 519.942372] ? dma_buf_attach+0x66/0x2d0 [ 519.946450] ? ion_device_create+0x280/0x280 [ 519.950865] ion_dma_buf_attach+0x80/0x570 [ 519.956069] ? ion_device_create+0x280/0x280 [ 519.960486] dma_buf_attach+0x120/0x2d0 [ 519.964475] drm_gem_prime_import_dev+0xb4/0x2d0 [ 519.969247] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 519.974277] ? drm_prime_gem_destroy+0xa0/0xa0 [ 519.978860] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 519.983976] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 519.989349] drm_ioctl_kernel+0x150/0x200 [ 519.993506] drm_ioctl+0x416/0x880 [ 519.997059] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 520.002432] ? drm_getstats+0x20/0x20 [ 520.006254] ? drm_getstats+0x20/0x20 [ 520.010067] do_vfs_ioctl+0x75a/0xfe0 [ 520.013905] ? selinux_file_mprotect+0x5c0/0x5c0 [ 520.018685] ? ioctl_preallocate+0x1a0/0x1a0 [ 520.023117] ? security_file_ioctl+0x76/0xb0 [ 520.027545] ? security_file_ioctl+0x83/0xb0 [ 520.031962] SyS_ioctl+0x7f/0xb0 [ 520.035360] ? do_vfs_ioctl+0xfe0/0xfe0 [ 520.039346] do_syscall_64+0x1d5/0x640 [ 520.043253] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 520.048455] RIP: 0033:0x45c849 [ 520.051646] RSP: 002b:00007f4fe5c5ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 520.059443] RAX: ffffffffffffffda RBX: 00007f4fe5c5b6d4 RCX: 000000000045c849 [ 520.066714] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000006 [ 520.073984] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 520.081256] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 520.088532] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000001 19:46:43 executing program 4 (fault-call:8 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) [ 520.368207] FAULT_INJECTION: forcing a failure. [ 520.368207] name failslab, interval 1, probability 0, space 0, times 0 [ 520.412945] CPU: 0 PID: 23201 Comm: syz-executor.4 Not tainted 4.14.174-syzkaller #0 [ 520.420989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.430352] Call Trace: [ 520.432959] dump_stack+0x13e/0x194 [ 520.436605] should_fail.cold+0x10a/0x14b [ 520.440776] should_failslab+0xd6/0x130 [ 520.444771] kmem_cache_alloc_trace+0x2db/0x7b0 [ 520.449447] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 520.454906] ? dma_buf_attach+0x66/0x2d0 [ 520.458984] ? ion_device_create+0x280/0x280 [ 520.463404] ion_dma_buf_attach+0xe9/0x570 [ 520.467651] ? ion_device_create+0x280/0x280 [ 520.472071] dma_buf_attach+0x120/0x2d0 [ 520.476058] drm_gem_prime_import_dev+0xb4/0x2d0 [ 520.480828] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 520.485855] ? drm_prime_gem_destroy+0xa0/0xa0 [ 520.490446] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 520.495638] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 520.501015] drm_ioctl_kernel+0x150/0x200 [ 520.505175] drm_ioctl+0x416/0x880 [ 520.508730] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 520.514103] ? drm_getstats+0x20/0x20 [ 520.517917] ? drm_getstats+0x20/0x20 [ 520.521743] do_vfs_ioctl+0x75a/0xfe0 [ 520.525554] ? selinux_file_mprotect+0x5c0/0x5c0 [ 520.530320] ? ioctl_preallocate+0x1a0/0x1a0 [ 520.534746] ? security_file_ioctl+0x76/0xb0 [ 520.539154] ? security_file_ioctl+0x83/0xb0 [ 520.543569] SyS_ioctl+0x7f/0xb0 [ 520.546937] ? do_vfs_ioctl+0xfe0/0xfe0 [ 520.550923] do_syscall_64+0x1d5/0x640 [ 520.554824] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 520.560018] RIP: 0033:0x45c849 [ 520.563212] RSP: 002b:00007f4fe5c5ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 520.570931] RAX: ffffffffffffffda RBX: 00007f4fe5c5b6d4 RCX: 000000000045c849 [ 520.578205] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000006 [ 520.585499] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 520.592800] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 520.600079] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000002 19:46:43 executing program 4 (fault-call:8 fault-nth:3): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) [ 520.701759] FAULT_INJECTION: forcing a failure. [ 520.701759] name failslab, interval 1, probability 0, space 0, times 0 [ 520.725729] CPU: 1 PID: 23204 Comm: syz-executor.4 Not tainted 4.14.174-syzkaller #0 [ 520.733636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 520.742990] Call Trace: [ 520.745596] dump_stack+0x13e/0x194 [ 520.749240] should_fail.cold+0x10a/0x14b [ 520.753407] should_failslab+0xd6/0x130 [ 520.757384] __kmalloc+0x2e9/0x7c0 [ 520.760928] ? sg_kmalloc+0x26/0x60 [ 520.764570] sg_kmalloc+0x26/0x60 [ 520.768030] __sg_alloc_table+0x25c/0x3a0 [ 520.772210] ? sgl_alloc+0x30/0x30 [ 520.775758] ? ion_device_create+0x280/0x280 [ 520.780166] sg_alloc_table+0x36/0x230 [ 520.784070] ? dma_buf_attach+0x66/0x2d0 [ 520.788143] ? ion_device_create+0x280/0x280 [ 520.792573] ion_dma_buf_attach+0x13e/0x570 [ 520.796926] ? ion_device_create+0x280/0x280 [ 520.801339] dma_buf_attach+0x120/0x2d0 [ 520.805324] drm_gem_prime_import_dev+0xb4/0x2d0 [ 520.810089] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 520.815111] ? drm_prime_gem_destroy+0xa0/0xa0 [ 520.819755] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 520.824880] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 520.830259] drm_ioctl_kernel+0x150/0x200 [ 520.834430] drm_ioctl+0x416/0x880 [ 520.837985] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 520.843363] ? drm_getstats+0x20/0x20 [ 520.847178] ? drm_getstats+0x20/0x20 [ 520.850985] do_vfs_ioctl+0x75a/0xfe0 [ 520.854824] ? selinux_file_mprotect+0x5c0/0x5c0 [ 520.859587] ? ioctl_preallocate+0x1a0/0x1a0 [ 520.864028] ? security_file_ioctl+0x76/0xb0 [ 520.868436] ? security_file_ioctl+0x83/0xb0 [ 520.872854] SyS_ioctl+0x7f/0xb0 [ 520.876230] ? do_vfs_ioctl+0xfe0/0xfe0 [ 520.880369] do_syscall_64+0x1d5/0x640 [ 520.884267] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 520.889458] RIP: 0033:0x45c849 [ 520.892652] RSP: 002b:00007f4fe5c5ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 520.900364] RAX: ffffffffffffffda RBX: 00007f4fe5c5b6d4 RCX: 000000000045c849 [ 520.907633] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000006 [ 520.914901] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 520.922169] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 520.929436] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000003 19:46:43 executing program 4 (fault-call:8 fault-nth:4): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) [ 521.229918] FAULT_INJECTION: forcing a failure. [ 521.229918] name failslab, interval 1, probability 0, space 0, times 0 [ 521.255337] CPU: 0 PID: 23207 Comm: syz-executor.4 Not tainted 4.14.174-syzkaller #0 [ 521.263272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.272633] Call Trace: [ 521.275238] dump_stack+0x13e/0x194 [ 521.278878] should_fail.cold+0x10a/0x14b [ 521.283037] should_failslab+0xd6/0x130 [ 521.287039] kmem_cache_alloc_trace+0x2db/0x7b0 [ 521.291725] __vgem_gem_create+0x44/0xe0 [ 521.295794] vgem_prime_import_sg_table+0x5b/0x280 [ 521.300740] drm_gem_prime_import_dev+0x161/0x2d0 [ 521.305599] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 521.310633] ? drm_prime_gem_destroy+0xa0/0xa0 [ 521.315224] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 521.320333] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 521.325705] drm_ioctl_kernel+0x150/0x200 [ 521.329861] drm_ioctl+0x416/0x880 [ 521.333407] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 521.338773] ? drm_getstats+0x20/0x20 [ 521.342584] ? drm_getstats+0x20/0x20 [ 521.346390] do_vfs_ioctl+0x75a/0xfe0 [ 521.350196] ? selinux_file_mprotect+0x5c0/0x5c0 [ 521.354964] ? ioctl_preallocate+0x1a0/0x1a0 [ 521.359386] ? security_file_ioctl+0x76/0xb0 [ 521.363796] ? security_file_ioctl+0x83/0xb0 [ 521.368213] SyS_ioctl+0x7f/0xb0 [ 521.371580] ? do_vfs_ioctl+0xfe0/0xfe0 [ 521.375559] do_syscall_64+0x1d5/0x640 [ 521.379454] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 521.384669] RIP: 0033:0x45c849 [ 521.387865] RSP: 002b:00007f4fe5c5ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 521.395573] RAX: ffffffffffffffda RBX: 00007f4fe5c5b6d4 RCX: 000000000045c849 [ 521.402846] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000006 [ 521.410122] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 521.417485] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 521.424764] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000004 19:46:44 executing program 4 (fault-call:8 fault-nth:5): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) [ 521.541686] FAULT_INJECTION: forcing a failure. [ 521.541686] name failslab, interval 1, probability 0, space 0, times 0 [ 521.557447] CPU: 0 PID: 23210 Comm: syz-executor.4 Not tainted 4.14.174-syzkaller #0 [ 521.565351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.574712] Call Trace: [ 521.577321] dump_stack+0x13e/0x194 [ 521.580976] should_fail.cold+0x10a/0x14b [ 521.585162] should_failslab+0xd6/0x130 [ 521.589149] kmem_cache_alloc+0x2b5/0x770 [ 521.593300] ? save_trace+0x290/0x290 [ 521.597110] ? ion_dma_buf_attach+0x429/0x570 [ 521.601618] ? save_trace+0x290/0x290 [ 521.605423] __d_alloc+0x2a/0x9b0 [ 521.608889] __shmem_file_setup.part.0+0xcb/0x3c0 [ 521.613739] ? shmem_fill_super+0x8a0/0x8a0 [ 521.618093] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 521.623552] shmem_file_setup+0x4b/0x60 [ 521.627565] drm_gem_object_init+0x36/0xa0 [ 521.631804] __vgem_gem_create+0x6a/0xe0 [ 521.635868] vgem_prime_import_sg_table+0x5b/0x280 [ 521.640801] drm_gem_prime_import_dev+0x161/0x2d0 [ 521.645649] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 521.651279] ? drm_prime_gem_destroy+0xa0/0xa0 [ 521.655874] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 521.660978] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 521.666348] drm_ioctl_kernel+0x150/0x200 [ 521.670505] drm_ioctl+0x416/0x880 [ 521.674051] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 521.679429] ? drm_getstats+0x20/0x20 [ 521.683257] ? drm_getstats+0x20/0x20 [ 521.687070] do_vfs_ioctl+0x75a/0xfe0 [ 521.690882] ? selinux_file_mprotect+0x5c0/0x5c0 [ 521.695646] ? ioctl_preallocate+0x1a0/0x1a0 [ 521.700080] ? security_file_ioctl+0x76/0xb0 [ 521.704501] ? security_file_ioctl+0x83/0xb0 [ 521.708921] SyS_ioctl+0x7f/0xb0 [ 521.712297] ? do_vfs_ioctl+0xfe0/0xfe0 [ 521.716283] do_syscall_64+0x1d5/0x640 [ 521.720190] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 521.725389] RIP: 0033:0x45c849 [ 521.728580] RSP: 002b:00007f4fe5c5ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 521.736298] RAX: ffffffffffffffda RBX: 00007f4fe5c5b6d4 RCX: 000000000045c849 [ 521.743578] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000006 [ 521.750857] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 521.758250] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 521.765524] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000005 19:46:44 executing program 4 (fault-call:8 fault-nth:6): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) [ 521.926777] FAULT_INJECTION: forcing a failure. [ 521.926777] name failslab, interval 1, probability 0, space 0, times 0 [ 521.951926] CPU: 0 PID: 23213 Comm: syz-executor.4 Not tainted 4.14.174-syzkaller #0 [ 521.959859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 521.969224] Call Trace: [ 521.971848] dump_stack+0x13e/0x194 [ 521.975512] should_fail.cold+0x10a/0x14b [ 521.979667] ? shmem_destroy_callback+0xa0/0xa0 [ 521.984347] should_failslab+0xd6/0x130 [ 521.988325] ? shmem_destroy_callback+0xa0/0xa0 [ 521.992999] kmem_cache_alloc+0x2b5/0x770 [ 521.997164] ? __d_alloc+0x2a/0x9b0 [ 522.000803] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 522.006268] ? shmem_destroy_callback+0xa0/0xa0 [ 522.010948] shmem_alloc_inode+0x18/0x40 [ 522.015042] ? shmem_destroy_callback+0xa0/0xa0 [ 522.019721] alloc_inode+0x5d/0x170 [ 522.023354] new_inode_pseudo+0x14/0xe0 [ 522.027336] new_inode+0x1b/0x40 [ 522.030710] shmem_get_inode+0x75/0x750 [ 522.034690] ? __d_alloc+0x5bb/0x9b0 [ 522.038413] __shmem_file_setup.part.0+0x104/0x3c0 [ 522.043346] ? shmem_fill_super+0x8a0/0x8a0 [ 522.047670] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 522.053129] shmem_file_setup+0x4b/0x60 [ 522.057134] drm_gem_object_init+0x36/0xa0 [ 522.061396] __vgem_gem_create+0x6a/0xe0 [ 522.065462] vgem_prime_import_sg_table+0x5b/0x280 [ 522.070404] drm_gem_prime_import_dev+0x161/0x2d0 [ 522.075252] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 522.080274] ? drm_prime_gem_destroy+0xa0/0xa0 [ 522.084864] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 522.089996] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 522.095370] drm_ioctl_kernel+0x150/0x200 [ 522.099532] drm_ioctl+0x416/0x880 [ 522.103078] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 522.108456] ? drm_getstats+0x20/0x20 [ 522.112275] ? drm_getstats+0x20/0x20 [ 522.116872] do_vfs_ioctl+0x75a/0xfe0 [ 522.120681] ? selinux_file_mprotect+0x5c0/0x5c0 [ 522.125448] ? ioctl_preallocate+0x1a0/0x1a0 [ 522.129867] ? security_file_ioctl+0x76/0xb0 [ 522.134312] ? security_file_ioctl+0x83/0xb0 [ 522.138737] SyS_ioctl+0x7f/0xb0 [ 522.142112] ? do_vfs_ioctl+0xfe0/0xfe0 [ 522.146092] do_syscall_64+0x1d5/0x640 [ 522.149992] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 522.155184] RIP: 0033:0x45c849 [ 522.158374] RSP: 002b:00007f4fe5c5ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 522.166093] RAX: ffffffffffffffda RBX: 00007f4fe5c5b6d4 RCX: 000000000045c849 [ 522.173380] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000006 [ 522.180651] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 522.187937] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 522.195206] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000006 19:46:45 executing program 4 (fault-call:8 fault-nth:7): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) [ 522.384934] FAULT_INJECTION: forcing a failure. [ 522.384934] name failslab, interval 1, probability 0, space 0, times 0 [ 522.396607] CPU: 0 PID: 23216 Comm: syz-executor.4 Not tainted 4.14.174-syzkaller #0 [ 522.404674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 522.415002] Call Trace: [ 522.417607] dump_stack+0x13e/0x194 [ 522.421262] should_fail.cold+0x10a/0x14b [ 522.425421] should_failslab+0xd6/0x130 [ 522.429586] kmem_cache_alloc+0x2b5/0x770 [ 522.433743] ? shmem_alloc_inode+0x18/0x40 [ 522.437989] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 522.443449] selinux_inode_alloc_security+0xb1/0x2a0 [ 522.448559] security_inode_alloc+0x8f/0xd0 [ 522.452888] inode_init_always+0x549/0xaf0 [ 522.457131] alloc_inode+0x7a/0x170 [ 522.461375] new_inode_pseudo+0x14/0xe0 [ 522.465355] new_inode+0x1b/0x40 [ 522.468732] shmem_get_inode+0x75/0x750 [ 522.472716] ? __d_alloc+0x5bb/0x9b0 [ 522.476442] __shmem_file_setup.part.0+0x104/0x3c0 [ 522.481380] ? shmem_fill_super+0x8a0/0x8a0 [ 522.485709] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 522.491170] shmem_file_setup+0x4b/0x60 [ 522.495155] drm_gem_object_init+0x36/0xa0 [ 522.499406] __vgem_gem_create+0x6a/0xe0 [ 522.503483] vgem_prime_import_sg_table+0x5b/0x280 [ 522.508428] drm_gem_prime_import_dev+0x161/0x2d0 [ 522.513285] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 522.518311] ? drm_prime_gem_destroy+0xa0/0xa0 [ 522.522904] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 522.528012] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 522.533382] drm_ioctl_kernel+0x150/0x200 [ 522.537541] drm_ioctl+0x416/0x880 [ 522.541087] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 522.546473] ? drm_getstats+0x20/0x20 [ 522.550313] ? drm_getstats+0x20/0x20 [ 522.554130] do_vfs_ioctl+0x75a/0xfe0 [ 522.557937] ? selinux_file_mprotect+0x5c0/0x5c0 [ 522.562699] ? ioctl_preallocate+0x1a0/0x1a0 [ 522.567129] ? security_file_ioctl+0x76/0xb0 [ 522.571542] ? security_file_ioctl+0x83/0xb0 [ 522.575967] SyS_ioctl+0x7f/0xb0 [ 522.579347] ? do_vfs_ioctl+0xfe0/0xfe0 [ 522.583342] do_syscall_64+0x1d5/0x640 [ 522.587252] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 522.592445] RIP: 0033:0x45c849 [ 522.595633] RSP: 002b:00007f4fe5c5ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 522.603353] RAX: ffffffffffffffda RBX: 00007f4fe5c5b6d4 RCX: 000000000045c849 [ 522.611325] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000006 [ 522.618601] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 522.625872] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 522.633146] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000007 19:46:45 executing program 4 (fault-call:8 fault-nth:8): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) [ 522.997006] FAULT_INJECTION: forcing a failure. [ 522.997006] name failslab, interval 1, probability 0, space 0, times 0 [ 523.029511] CPU: 0 PID: 23219 Comm: syz-executor.4 Not tainted 4.14.174-syzkaller #0 [ 523.037457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.046821] Call Trace: [ 523.049436] dump_stack+0x13e/0x194 [ 523.053087] should_fail.cold+0x10a/0x14b [ 523.057597] should_failslab+0xd6/0x130 [ 523.061580] kmem_cache_alloc+0x2b5/0x770 [ 523.065789] get_empty_filp+0x86/0x3e0 [ 523.069713] alloc_file+0x23/0x440 [ 523.073280] __shmem_file_setup.part.0+0x198/0x3c0 [ 523.078219] ? shmem_fill_super+0x8a0/0x8a0 [ 523.082549] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 523.088009] shmem_file_setup+0x4b/0x60 [ 523.093043] drm_gem_object_init+0x36/0xa0 [ 523.097303] __vgem_gem_create+0x6a/0xe0 [ 523.101377] vgem_prime_import_sg_table+0x5b/0x280 [ 523.106324] drm_gem_prime_import_dev+0x161/0x2d0 [ 523.111185] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 523.116217] ? drm_prime_gem_destroy+0xa0/0xa0 [ 523.120807] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 523.125916] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 523.131290] drm_ioctl_kernel+0x150/0x200 [ 523.135457] drm_ioctl+0x416/0x880 [ 523.139008] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 523.144380] ? drm_getstats+0x20/0x20 [ 523.148202] ? drm_getstats+0x20/0x20 [ 523.152971] do_vfs_ioctl+0x75a/0xfe0 [ 523.156783] ? selinux_file_mprotect+0x5c0/0x5c0 [ 523.161550] ? ioctl_preallocate+0x1a0/0x1a0 [ 523.165974] ? security_file_ioctl+0x76/0xb0 [ 523.170391] ? security_file_ioctl+0x83/0xb0 [ 523.174833] SyS_ioctl+0x7f/0xb0 [ 523.178216] ? do_vfs_ioctl+0xfe0/0xfe0 [ 523.182196] do_syscall_64+0x1d5/0x640 [ 523.186099] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 523.191298] RIP: 0033:0x45c849 [ 523.194490] RSP: 002b:00007f4fe5c5ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 523.202208] RAX: ffffffffffffffda RBX: 00007f4fe5c5b6d4 RCX: 000000000045c849 [ 523.209486] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000006 [ 523.216768] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 523.224050] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 523.231514] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000008 19:46:46 executing program 4 (fault-call:8 fault-nth:9): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) [ 523.440014] FAULT_INJECTION: forcing a failure. [ 523.440014] name failslab, interval 1, probability 0, space 0, times 0 [ 523.459229] CPU: 1 PID: 23222 Comm: syz-executor.4 Not tainted 4.14.174-syzkaller #0 [ 523.467161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.476555] Call Trace: [ 523.479170] dump_stack+0x13e/0x194 [ 523.482830] should_fail.cold+0x10a/0x14b [ 523.487170] should_failslab+0xd6/0x130 [ 523.491527] kmem_cache_alloc+0x2b5/0x770 [ 523.495685] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 523.501157] ? rcu_read_lock_sched_held+0x10a/0x130 [ 523.506188] selinux_file_alloc_security+0xaf/0x190 [ 523.511217] security_file_alloc+0x66/0xa0 [ 523.515460] ? selinux_is_enabled+0x5/0x50 [ 523.519702] get_empty_filp+0x15c/0x3e0 [ 523.523696] alloc_file+0x23/0x440 [ 523.527263] __shmem_file_setup.part.0+0x198/0x3c0 [ 523.532208] ? shmem_fill_super+0x8a0/0x8a0 [ 523.536545] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 523.542017] shmem_file_setup+0x4b/0x60 [ 523.546004] drm_gem_object_init+0x36/0xa0 [ 523.550245] __vgem_gem_create+0x6a/0xe0 [ 523.554317] vgem_prime_import_sg_table+0x5b/0x280 [ 523.559254] drm_gem_prime_import_dev+0x161/0x2d0 [ 523.564215] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 523.569245] ? drm_prime_gem_destroy+0xa0/0xa0 [ 523.573842] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 523.578959] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 523.584356] drm_ioctl_kernel+0x150/0x200 [ 523.588522] drm_ioctl+0x416/0x880 [ 523.592101] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 523.597572] ? drm_getstats+0x20/0x20 [ 523.601405] ? drm_getstats+0x20/0x20 [ 523.605223] do_vfs_ioctl+0x75a/0xfe0 [ 523.609036] ? selinux_file_mprotect+0x5c0/0x5c0 [ 523.613806] ? ioctl_preallocate+0x1a0/0x1a0 [ 523.618241] ? security_file_ioctl+0x76/0xb0 [ 523.622653] ? security_file_ioctl+0x83/0xb0 [ 523.627068] SyS_ioctl+0x7f/0xb0 [ 523.630440] ? do_vfs_ioctl+0xfe0/0xfe0 [ 523.634426] do_syscall_64+0x1d5/0x640 [ 523.638334] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 523.643536] RIP: 0033:0x45c849 [ 523.646736] RSP: 002b:00007f4fe5c5ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 523.654453] RAX: ffffffffffffffda RBX: 00007f4fe5c5b6d4 RCX: 000000000045c849 [ 523.661724] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000006 [ 523.669006] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 523.676282] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 523.683560] R13: 00000000000002a7 R14: 00000000004d3330 R15: 0000000000000009 19:46:46 executing program 4 (fault-call:8 fault-nth:10): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) [ 523.795104] FAULT_INJECTION: forcing a failure. [ 523.795104] name failslab, interval 1, probability 0, space 0, times 0 [ 523.820093] CPU: 0 PID: 23225 Comm: syz-executor.4 Not tainted 4.14.174-syzkaller #0 [ 523.828047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 523.837422] Call Trace: [ 523.840028] dump_stack+0x13e/0x194 [ 523.843670] should_fail.cold+0x10a/0x14b [ 523.847830] should_failslab+0xd6/0x130 [ 523.851818] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 523.856924] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 523.862385] ? __lockdep_init_map+0x100/0x560 [ 523.866984] __kmalloc_node+0x38/0x70 [ 523.870798] kvmalloc_node+0x46/0xd0 [ 523.874520] vgem_prime_import_sg_table+0x111/0x280 [ 523.879549] drm_gem_prime_import_dev+0x161/0x2d0 [ 523.884406] drm_gem_prime_fd_to_handle+0x20c/0x430 [ 523.889436] ? drm_prime_gem_destroy+0xa0/0xa0 [ 523.894031] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 523.899144] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 523.904529] drm_ioctl_kernel+0x150/0x200 [ 523.908707] drm_ioctl+0x416/0x880 [ 523.912264] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 523.917643] ? drm_getstats+0x20/0x20 [ 523.921485] ? drm_getstats+0x20/0x20 [ 523.925302] do_vfs_ioctl+0x75a/0xfe0 [ 523.929114] ? selinux_file_mprotect+0x5c0/0x5c0 [ 523.933896] ? ioctl_preallocate+0x1a0/0x1a0 [ 523.938325] ? security_file_ioctl+0x76/0xb0 [ 523.942747] ? security_file_ioctl+0x83/0xb0 [ 523.947172] SyS_ioctl+0x7f/0xb0 [ 523.950554] ? do_vfs_ioctl+0xfe0/0xfe0 [ 523.954540] do_syscall_64+0x1d5/0x640 [ 523.958446] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 523.963658] RIP: 0033:0x45c849 [ 523.966855] RSP: 002b:00007f4fe5c5ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 523.974578] RAX: ffffffffffffffda RBX: 00007f4fe5c5b6d4 RCX: 000000000045c849 [ 523.981869] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000006 [ 523.989197] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 523.996480] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 524.003856] R13: 00000000000002a7 R14: 00000000004d3330 R15: 000000000000000a 19:46:46 executing program 4 (fault-call:8 fault-nth:11): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) [ 524.116305] FAULT_INJECTION: forcing a failure. [ 524.116305] name failslab, interval 1, probability 0, space 0, times 0 [ 524.136783] CPU: 1 PID: 23228 Comm: syz-executor.4 Not tainted 4.14.174-syzkaller #0 [ 524.144720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.154083] Call Trace: [ 524.156691] dump_stack+0x13e/0x194 [ 524.160341] should_fail.cold+0x10a/0x14b [ 524.164504] should_failslab+0xd6/0x130 [ 524.168486] kmem_cache_alloc_trace+0x2db/0x7b0 [ 524.173167] ? __mutex_unlock_slowpath+0x75/0x780 [ 524.178026] drm_vma_node_allow+0x4e/0x2e0 [ 524.182308] drm_gem_handle_create_tail+0x196/0x340 [ 524.187347] ? drm_gem_destroy+0xa0/0xa0 [ 524.191418] ? drm_gem_prime_import_dev+0x1a5/0x2d0 [ 524.196443] drm_gem_prime_fd_to_handle+0x277/0x430 [ 524.201468] ? drm_prime_gem_destroy+0xa0/0xa0 [ 524.206057] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 524.211171] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 524.216558] drm_ioctl_kernel+0x150/0x200 [ 524.220712] drm_ioctl+0x416/0x880 [ 524.224259] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 524.229640] ? drm_getstats+0x20/0x20 [ 524.233465] ? drm_getstats+0x20/0x20 [ 524.237287] do_vfs_ioctl+0x75a/0xfe0 [ 524.241104] ? selinux_file_mprotect+0x5c0/0x5c0 [ 524.245872] ? ioctl_preallocate+0x1a0/0x1a0 [ 524.250300] ? security_file_ioctl+0x76/0xb0 [ 524.254713] ? security_file_ioctl+0x83/0xb0 [ 524.259133] SyS_ioctl+0x7f/0xb0 [ 524.262507] ? do_vfs_ioctl+0xfe0/0xfe0 [ 524.266507] do_syscall_64+0x1d5/0x640 [ 524.270409] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 524.275609] RIP: 0033:0x45c849 [ 524.278834] RSP: 002b:00007f4fe5c5ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 524.286561] RAX: ffffffffffffffda RBX: 00007f4fe5c5b6d4 RCX: 000000000045c849 [ 524.293848] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000006 [ 524.301130] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 524.308411] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 524.315688] R13: 00000000000002a7 R14: 00000000004d3330 R15: 000000000000000b 19:46:47 executing program 4 (fault-call:8 fault-nth:12): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) [ 524.438744] FAULT_INJECTION: forcing a failure. [ 524.438744] name failslab, interval 1, probability 0, space 0, times 0 [ 524.454560] CPU: 0 PID: 23231 Comm: syz-executor.4 Not tainted 4.14.174-syzkaller #0 [ 524.462466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 524.471826] Call Trace: [ 524.474438] dump_stack+0x13e/0x194 [ 524.478078] should_fail.cold+0x10a/0x14b [ 524.482245] should_failslab+0xd6/0x130 19:46:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000000)={0x0, 0x0, 0xffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000080)={r6, 0x80000, r8}) [ 524.486222] kmem_cache_alloc_trace+0x2db/0x7b0 [ 524.490900] ? drm_gem_handle_create_tail+0x29d/0x340 [ 524.496364] drm_prime_add_buf_handle+0x52/0x480 [ 524.501122] ? drm_gem_prime_import_dev+0x1a5/0x2d0 [ 524.506154] drm_gem_prime_fd_to_handle+0x2cb/0x430 [ 524.511180] ? drm_prime_gem_destroy+0xa0/0xa0 [ 524.515770] drm_prime_fd_to_handle_ioctl+0xdb/0x130 [ 524.520885] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 524.526266] drm_ioctl_kernel+0x150/0x200 [ 524.530425] drm_ioctl+0x416/0x880 [ 524.533973] ? drm_prime_handle_to_fd_ioctl+0x190/0x190 [ 524.539340] ? drm_getstats+0x20/0x20 [ 524.543154] ? drm_getstats+0x20/0x20 [ 524.546973] do_vfs_ioctl+0x75a/0xfe0 [ 524.550777] ? selinux_file_mprotect+0x5c0/0x5c0 [ 524.555545] ? ioctl_preallocate+0x1a0/0x1a0 [ 524.559971] ? security_file_ioctl+0x76/0xb0 [ 524.564387] ? security_file_ioctl+0x83/0xb0 [ 524.568829] SyS_ioctl+0x7f/0xb0 [ 524.572197] ? do_vfs_ioctl+0xfe0/0xfe0 [ 524.576181] do_syscall_64+0x1d5/0x640 [ 524.580094] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 524.585291] RIP: 0033:0x45c849 [ 524.588479] RSP: 002b:00007f4fe5c5ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 524.596197] RAX: ffffffffffffffda RBX: 00007f4fe5c5b6d4 RCX: 000000000045c849 [ 524.603481] RDX: 00000000200000c0 RSI: 00000000c00c642e RDI: 0000000000000006 [ 524.610762] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 524.618041] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 524.625324] R13: 00000000000002a7 R14: 00000000004d3330 R15: 000000000000000c 19:46:47 executing program 4 (fault-call:8 fault-nth:13): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) 19:46:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000023000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000780)=[{{&(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000000)=""/64, 0x40}], 0x1, &(0x7f0000000280)=""/152, 0x98}, 0x10000}, {{&(0x7f00000001c0)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000340)=""/180, 0xb4}], 0x1, &(0x7f0000000400)=""/104, 0x68}, 0xfffffffe}, {{&(0x7f0000000480)=@nfc, 0x80, &(0x7f0000000700)=[{&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/33, 0x21}, {&(0x7f0000000600)=""/228, 0xe4}], 0x3, &(0x7f0000000740)=""/42, 0x2a}, 0x3}], 0x3, 0x40000002, &(0x7f0000000880)={r3, r4+10000000}) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:47 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept4$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c, 0x1000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) r8 = dup(r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) 19:46:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000000)) 19:46:47 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x1f, 0x27, 0x1, r1}) r3 = dup(r2) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x84080) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x5c803, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r3}) r7 = dup(r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) 19:46:47 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200002, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x2, 0x8, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000081) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) readlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/202, 0xca) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000880)='NLBL_CALIPSO\x00') ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x802, 0x0) writev(r5, &(0x7f00000007c0)=[{&(0x7f0000000380)="7fd7e5c7bc53c69712802257a7307b1c7b2dc897f10e88ced2daab43ca571d61677540b8d802cab8", 0x28}, {&(0x7f00000003c0)="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", 0xff}, {&(0x7f00000004c0)="431713f2b36b3b70b7de4dbd8a5d9dec0476b036225e96a1e44b234f5bb6aae129ee564c2d85023687d749ec60a67f7313dea559ce7e473248ceb255c83db8259c", 0x41}, {&(0x7f0000000540)="62ad6efada440c5b26c9998d28d8d11867370546e165d552437638c9c5fcbe6edbbca23ebacfec1e4d8504af282abbb44eccc49c98921bd89e542d", 0x3b}, {&(0x7f0000000580)="0ef65e26c46d3344ab162de905b8cbecf64533b2919ce169344bddb77bac642cda7f6a2809efd4d758a2ea8958d93d1ac72cc41a194faf06b6b3ebbe3489c1458617f05e7a6cb7a46fd0c4abaa7282a8531149e8d67b042295f0248c7aa2bb6215aeded8db8a44002db7dae863e5f653a5e8c68c7ba0a4b6bb8ceaaa8624d3d1014f099363925cf6a5e6b42e8648356490e890de34079f811feed22794b8e72e4af21e807ef0945725e4908732a4d4526e2e32f44155fd1feac90fb74eafee3059d222667056bb17a18d01", 0xcb}, {&(0x7f0000000680)="42fde6b67b1a8671c4932d2c5b223e", 0xf}, {&(0x7f00000006c0)="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", 0xfa}], 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(0xffffffffffffffff, 0xc0945662, &(0x7f00000008c0)={0x3ff, 0x0, [], {0x0, @reserved}}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000980)={0xffffff81, 0x80000001, 0x40, 0x1, 0x2}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$UI_END_FF_ERASE(r7, 0x400c55cb, &(0x7f0000000840)={0xc, 0x1, 0x4}) 19:46:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x202820, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f0000000080)={0x1, "1ab4f4eb89fdf1cc1c9ffaac88828f18622c7541a6d988713ce3b60ae4203ffe", 0x200, 0x2d, 0x3601, 0x4, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:48 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, r2}) r4 = dup(r3) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xe) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) r8 = dup(r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r10 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r9, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r10, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r11, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x401}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff2b}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x70}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000091}, 0x8080) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r11, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_SSID={0x5, 0x34, 'A'}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000888}, 0x10) 19:46:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5afbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05752981", @ANYRES32=0x0, @ANYBLOB="b3ef461584d1f8f0"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r7}}, 0x20}}, 0x0) sendmmsg(r2, &(0x7f0000006300)=[{{&(0x7f0000000080)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="1346", 0x2}, {&(0x7f0000000100)="b4576f6fa607f5bb454155d0fdea7e5bd375c6be79294108ef102d897e897c9bff920f67557dc61e1938c8aec39dd3a044047920d0dba7926c95c3b0cbc2b899c6dca68509cad2e1a1aa6f3cc55c98b0c39e79d30685cd02", 0x58}], 0x2, &(0x7f0000000280)=[{0x100, 0x114, 0x3, "0de0539da8357abdd501f52ae5043113824f9e360632b8e49be6980b3c0cc083297660efc44b79359c9f359f97b4c94f8ebc04513fe0d7f4e778f31cfdeb6db87b5d86017272792ff9a3b336b1e4e16e3c9426b3295973fc37c501f7253a799a9ef7661c717df635d63d3a99ae1220190da3590cb0f63f0f9f90e18677b5192b92d22a71aae12de103540868fc405fda49ce824963826ad97bc89ffd824245a69a87fdb983ada7065ef6216c41f483593dc5661892339bbf650c00d4a1e32ee48d26baa9be2d3b8ed835e3484193a6eb1c8f84f7748ee438e07f771a0b2ebe98cd7c414efaf98c1d96100bffe273f9"}, {0x20, 0x112, 0x5, "0222fc3c666ab1c65e1550b7c332"}], 0x120}}, {{&(0x7f00000003c0)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e20, 0x6, @remote, 0x2b}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)="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", 0xfa}, {&(0x7f0000000200)}], 0x2, &(0x7f0000000580)=[{0x110, 0x11, 0x6, "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"}, {0x30, 0x10c, 0x6, "1faf0f44017cd7be4c3f014aafb736304ea3be07bf626c0c7a52401b"}, {0x90, 0x0, 0x7, "50a4ff67419471ce39696d0068126fb3785f93f9e9a62feb9447b7ca16dbfe9e72077eaadc0a2de913653fba02a52055935cb9cda2653a14a26a6219a917a809b6df7f545500bda89fbe01dd6942df3f4865cdfa806bb5f2b978cae70d1488d67e73bf756456dd461707a4dc183208bab776a80f191f992d98e2"}, {0x1010, 0x117, 0x5, "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"}, {0xe0, 0x113, 0x9, "457a40a709a00f30654b83985aa5ed38732b04cfb195016e6ce53afcb7fac2c2b892e9a57ed822b60ca503265880a5dd61dfe0267264f8a4d9953eab1adcb5db5036672a1a530b011b0e27e27bc47ba6297191f0971dd65276a8f5beeba7ddca1394421807e317c865690892021709996f3ba0604aef7ac3be5e463156e8ad90914b4359b8ab846d9af5fb105cf748b1d5e21e05719fcd01564dff285282e9f560bb21062ce0ed7cb84ccee221db215b01f68074aa313d3046fd1c2cd28c1876d93d50a3169421f7b6a9"}, {0x70, 0x11, 0x4, "854f282ec2799211f2627f1643c06ab1585a303283505a6b8881198b278351da2956d228e88edbb9820bc09692f668f0226580be9447bdd73c353157628523f646a258828534bf01afca3ef448627ab89335fec992770e0b13bf"}, {0x50, 0x107, 0x2, "365b9bfb8c31835f2a27c4f8577c07a3bf042a3b63211f9603fc5e16ab3cee0cce31f91af5019fabf785b2aec2b59acbd0c7480a4ab0a16a20fb64b544c7"}], 0x1380}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001900)="8f820810f5c9c6dfc058355c3c94e8f8916865e4a0e0b7574b9c78b92b6df545f2162fbd6c5eeee66e5421fe615474a8847ea5fa2975f4fb51d28d41003acc208e68b8b23999373fe1a8410722f1ca162e4dc54fe28d", 0x56}, {&(0x7f0000001980)="4398c73f65aee1c025fcea7355a9261935845384ecf5d6e9c984d31c00fd42fd06ba55456e317f963425efe738413c360300d32741b092fe5621182d03cf5381c9dd16390d0a80c5f32313b2da3fd58e79b028886d81796a787cb4c9ab58d36a78936fb9efa4b2c1efd63a33a8bed934ae0f4d571791af5b12ab3efbafceecbada2ad1e8", 0x84}, {&(0x7f0000001a40)="bdf0eb651043a468b6ba6c545851c954bfe23912d6fb546343c32407b10ac4ff050c7359fc09a0e38d677db2cb51be51d7345f6aefd6f03844b9fd0ff27b3f03d44744b51a070ad2ab579e93c8524f71096ebd592efe4f860444a797a657135f4f6249b98e6c8efcde689bf3ab09cdcf37970128edd9f9812e5c6cff656923", 0x7f}, {&(0x7f0000001ac0)="dd579b26e6c11408b133bc3a750ad908d6d2cc925a1bc5e636dba184154759d2bee48f3d062a22ea8372a21451525bb78f27e668aceb6d743447d1446e831f17cdfb567da6e5e8a3c193bf0c6033753d89f3d0c034c424b6a872a11a7f74dce98ebf74345cb02e9aaa17c0135b2c33db7bfdbd8583e82f07d6f7dc32d013bb1ba93d35649ff0513a99be19a5f711b4ee474eea343aea0a0e3df1881753791efed6817451b4e898428db67fc015d7bfbecc32c697caa6710ca5b40d664d4b825b948a91b4cf47b54b5cbc141cb6a325f4dd47b1791db60e99646cc5", 0xdb}], 0x4, &(0x7f0000001c00)=[{0xb0, 0x110, 0x5, "10775fef615d0ff0cd69b5f322d3c4858ee98aa45f5d5240a8f7f2b4b9bada64b8a8934e61b58a64c07e37527d325e8cc1dca0b27f682109c54331bb78c970e6e5982f152c99c6ffcce85a833857fdaf2c84ad6f34e0ba136ac8c01da78e94af7b57389b5a9cd1e566b0885fe62a29816a00f86dee20597227fc487ae74dfaa90a2d5f96f1683d60bdaac072765ab7e9f0f085f193f16159cb6335ffc2b9"}, {0xe8, 0x107, 0x8001, "4004b720ba2e51d2cc2425bd04d802fa282909c864bb36c55f0a91bdf19bb2a02ccd241f612cb246a62372d7c795f800da8571ff54815afdcb9f16a85d2e998f395fa08922e01d44dce99c74931159ed8b55e1d4717bedbcbe8f152c27acbcefb03344f0d460a6c18123ef6669824aca7355d6af3b4237593b48f53791b1aa98cee2ecfd73d873aa23d35236fcce19db8541252989fc208a2eef2489d7de62f44180417c0e187e8cef43747bfc10b85b54e98017c098a2d78d7a3f6c78bc3c57a2ba9fd6ea01aee1c05cbc5a78ae3c02d66e20fb33da"}], 0x198}}, {{&(0x7f0000001dc0)=@ipx={0x4, 0x725, 0xebb1, "4a3afc454ce7", 0x80}, 0x80, &(0x7f0000003040)=[{&(0x7f0000001e40)="a8f080b2cbe2eb302e2077ac42a710e4e638d88b53e7ea9fc47bc210df2c579bfa8dcbd3ba5dee2e7f0c2ed8e0de7e6da67f5b26d5897e53ba0c43725a0150a6b24292b6855d6da1062b7936309bb3d1c4076bcff3d850f1c4bb9f37e9d3fb5063db5f4421c540ece3ae6d76d41108342afe2d3040651bdd336117268197fbae2435b410623dfc48bce0f645c088937892263c3c4c9d2aa148cf9487c7da76772bd915cb54a3f734c2ee68e54b9b349632f09241d5ee917d1b1e8fdd7b51a0836cca7a6d4e76bc449c4f822d7bedd891ac20b32e0c5c74793aa3aa422f221146be382d735454a17e88f4b654dab9", 0xee}, {&(0x7f0000001f40)="ef7376af076d079419c9b4c0de0ea54906e5a0d0201e9a4870bf090239b6fe0213b941cf727080dfa977b0489d44e2ca4de860ea3a1213202e7bbb7ece4db10d218a144da2aae8d7893a8d6ed146bcce64291b984ce3353cabfdc963eef2b2ff7ea5c8b6471759d2e129b2c3f66a1daef9ddacd4abf90a20158e6b5b0f90002865d5876e2b8ea4a81a74cd8066cef9d0dc9e5afe65847d09e5a8be4af46ec2441d368f96d33c50c917dec1e5d631f1a62cb5759bec274d8266147171634f0a8884c7a021367768afb0aa277561c85b43ee", 0xd1}, {&(0x7f0000002040)="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", 0x1000}], 0x3, &(0x7f0000003080)=[{0x1010, 0x117, 0x100, "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"}, {0x18, 0x1, 0x80, "00f4b9acf403"}, {0x50, 0x1, 0x8001, "ef222fd788080e26dd5e1eacd60caed3b7ad2ae4abb593864a94718df7ba30b2fc298725caa3f9190fea365b09109dde516427c24004aa31adb8b8440b"}, {0x28, 0x114, 0x9, "f4303590fe3a4da627f425f872a10d00a4ff37"}, {0xa0, 0x188, 0x3, "9d06e8dd3ec4cd1e277caaf36d60d05b00246a2df0f380b0de02fc53d9ceb5fd967a665c12ccf1d7dc3788d0b93a59d75b20a180db78d5474088bf8864b8542c509d60b729d89336b9dad6941340b108cf61cdf133ec3d7221e698d6c3b419ad9c8aa49c0e5297cf0b610dc9c799671375cd8212cbd6dd93d44fa580c293ac70d17c89f20314f0c7b095"}], 0x1140}}, {{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f00000041c0)="52d7d253fafbcae214fafa96019bd5e1d670ad0c4df8c45b7de673d11e439b868bd45ecb92040766c38716682ef18b2e60631040a2d9c1a82b1a413ca7e1e575454aa4b37dde51116f688b10368d2a53f68125abdea4b2dbd73435b9280464c3ea9d9e9e293e5504399c6880e432c225a9a534a7b34c56f26aee782013bd99726c2cc2625e08f288d897c131636420171f65fdf4603f05a5ecbb955c16cebe8336020b7d3d7b093eb93c7b41c2b1b99d007b876b30fe09756f4bbc9f9b2c72e583d0bf828acbe6d2d964543ac2033b1648f8cc860b9669a76c", 0xd9}], 0x1, &(0x7f0000004300)=[{0x28, 0x84, 0x6, "44f3153f8d9e66865d5f4b3246e42f3a2038686a"}, {0x10, 0x1, 0x3ff}, {0x90, 0x100, 0x1, "b3a6d6947b7d6f4511dafa771d03439076e142775e3bc1e25583ef74ab06b9699ff5e1c68e4773387271532a5886309f03c63dcaf93a6fe65d43a8d59e223a4e96db13683c787e74421c5ccb19752559aeb3ecca8f3af5e10bc6d7d71c7114814a54bdc4a099ab2a603b14e4bf4e31cbff4aad6565dca1498230b19beb"}, {0xe0, 0x107, 0xe7, "4d423b0e31455f0079733335da7db9d0aabcf6b2a92e74ad8a3e1f0975cb3339e165ddfe80384d57700a02ee4a52bd02b448b610ec6badfe4757ea0d4e8357c29a925f3b3ab226bd7a8b4647a968f5fddd952a79a2a5cd2799f1eb212a9d1047d8c05eb87fedb3215c058161c028f3726028be7166012fd6fad836a92fa276640cc784c1b618b3b19fe349b662154608c5f4a813a8a7df9fc9781183c0488baaeeeb02e97989cc3476d2759bddecf4fb051dc3fbd50f22a218b7047b8f8b2bab2abc812775f48e4891a6f67d"}], 0x1a8}}, {{&(0x7f00000044c0)=@ll={0x11, 0x18, r7, 0x1, 0x7, 0x6, @multicast}, 0x80, &(0x7f0000005980)=[{&(0x7f0000004540)="37b3800c3f63b7461a92068ddef4b0b80197c7c9de7212cb6a974f6857216417ede3865c53f37770f904e2b75f0f688e23aa8699f953adca64269b985046c88627ea1123e27bcbed8e89f1bec2e28964", 0x50}, {&(0x7f00000045c0)="0f9c4a5bc10751d86b8d5b03cf561b74c7d606b43fc45f80cae41ff6bc4d4d8ed14c36b9b05dce0b6266b1ce0b68455fa64e2d488a6da7d4830f7aca7f89470e1c39aa585783ed3e447841209ef4a4a9d087d52df0ed21a2eaeb7b2540ce3eb0fa634ebfd67eedbb2b5b6e975748b5596b19034f29c0e663c7ff8b7c76c446f3e534e9b5ef701f", 0x87}, {&(0x7f0000004680)="cdc847f2ae617dfaccde92f4550ff9136df11ef319aef847a8f5a087ce3c44b00d19e865a20755258f60bc82f711a22489852ec1e5f7d93ea2659071b8baa417c0f852c192f2f9966da943f41d728e4876ec33dab16b21e390132a6548c6208aee5cf3bde5b09ca92ffb740cd098c8ccdb5270b19e9837bbfde99fb338bbb2afd5b0", 0x82}, {&(0x7f0000004740)='^', 0x1}, {&(0x7f0000004780)="2f48cebf7286ce6f662ec16380845df8e1d6841f5b35509d25cde3bcbbb9561e228db5ff1e0a979d8c7962d5b70d8d5c277c91f93041566de63a076859dcb307713b8455dfc8fef7453aa6c8772d165ef3e8627481e3353ab0fa06482d56508b4c8e116487a0814469dfefba95370c5a3ab6a6d98a30fc86ec0a2a93c14b02a958bd1d9531aa6ab3b4912dfe221e49a34e33e802614399684591b19205c49bd7f851a68465c6b2c3f67909fa36b02708f0cfd9dbf78f2ea63d5811ba03a9094b3e", 0xc1}, {&(0x7f0000004880)="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", 0x1000}, {&(0x7f0000005880)="43a8f9de75cb8d5c3c7fb06544bdef2d3c7fbc07e71828e164027bd0fbd3a70340e4f08942e527d9acd411b920b21891a6d3835899423647759e8f39840c7764db0e4ee719cc0cbfa89502f7e80de2bd94e57579918fa5591a90397ea3de347cefcf01b83e38eb0323d1a97eb80e7c1e103f1d0c093f3bb617634cafcb97292a7ac0559bcd4036dd8330062da94e41393714173b555fce879be80bd659d69fb3edc75ecd366614ffd6d16008b5ae171814047e3ea3c303da6e4d9b571b3fe362d5a151f6e7979518c2f2058a05b392b39026d89e4ddebfb8c41dd57152f7756a2f2d23b325fb679b2bb15f", 0xeb}], 0x7, &(0x7f0000005a00)=[{0x20, 0x101, 0x792, "56d61e174b506324817e4f3134"}, {0x30, 0x10d, 0x7, "f8f3bb997201b218e2aa4a5e17c8311c5789780167fe79a59b8ae4e11589"}, {0xe8, 0x118, 0x808000, "837e71577831c2f3774b510a9cac4b95e395abe0231a604e8617965600209fea4dbaf9789baf73668424686f5a63432031a7d2ca735c722a2f99c1745027bb75ca99b88e0a6cca4b58a09af53b2d5694b5b778749e36bc0d9a251a81cbec0460a86b51070195183520e6a0ad4979a21722d6483cc9d75e0e175ff57a122db65b68fb8a502e20ebefb61f9876b67e0a9a198a7280c4502a6d9bb3285e535d0d265cd757cb97b25da73f99e5b487f0f4da4071a5aa468fe88c7557ed50e1ea7aee555574846adcd09f29ed1ab5ca3f2592630e10f87e29"}, {0xc0, 0x111, 0x0, "5d555300ab631aeff92ed32e8a1f09ab6fb768acc8ba9a1ee8f78fbc7335f9c8886b5ca30cb52f6653b88111aa54c25d6d7bc4dd696b6ffdb8c13c52d866a4e780263da4bf98e6edabc39746bb44dd8f188a39b57f83c89b48e927e3405536eb24728cc254b6429903db6dd32d71dad306716d3ce6a4ae0192cd3f2a2ec03acef990c6c65bb802c8cd43ba1d79b4f9e71e3d51c6819224bd8e3a77da2cec57d69311a649f4080f4a113b319ef8ca3c33"}, {0xf8, 0x117, 0x4d, "26821633c5934ac81c9191614b1fe42e8bfdac4f6094ec6f06ed112b2fda82f18be0c7948d2d3904787cf5fc8b4b294e5897999107695af2c20da0d37a973bb60ce67e09f439b061ee65c07c18be769f41d2db6664ee7b2c9ff942d9a8bd4ca99fdc177f159fe48c5feeb502ba14a9efde2d76ea0e64d1598d9926c0e581368f688173daa8bedfe95ee8bba032b63ac870f61d32eb2b4536987b3159ef5edb79f006a2f45749a6903ef885309ac28ec26d24374c746108497d276e6fff83bf86423e475d5278c9e56ea897264de4d8dbd77a551e63a471e9e1bc0689df6399ba3e189f47"}, {0xe8, 0x108, 0xb4, "3d6f0d887e66db1aa666323fe3d2af81c6b34007cd330745142783b7c840c3be127d17cbeb3d07e8fed89f2c8666a0af1a905e55bbb29bed051f223212cf88cb6a2df7e96bd66902dbd68a0d5c81c63b7c0ff3018d91ba8912aefc57f2120ef1341781979366b975b218d25c2f401dcafd4ff9383ebcb912defca081738e72d39a94b657f0bb4a2b1c487a2a59a7648ad9581bcb4083e93c365d384fadff3601ce8d13d7e9b8b65d1244e8b724cc6c08f144a77b873e2cf19ab26b2b88c38c6599f9b112acbff66f4bd9166d27297f02f8"}, {0xa8, 0x102, 0x400000, "69db059bb5d917553351dda64fe78937b1427b62d645a1493181c8aab24c76a955ff1ca7b7d1dbcd35703f90429109daea27745b31fb0a292fd0e800361b51a5ddf2a18747793a6feeeac3291685076bf27e4c4b105cb10463a001a06c6f4084196313777d920d781d7f29ddb16d89a9b4b8c2048bfb111f5e0aea219c488d20be06b8426d7bc83917c171d6a22575f734744a4b47"}], 0x480}}, {{0x0, 0x0, &(0x7f0000006280)=[{&(0x7f0000005e80)}, {&(0x7f0000005ec0)="146fa9c7a99f5acd2a2cc000ef27cf5cf57ffeb46228448529bfc2a71244067683f6bc2272e923359a75ab4ad630b2e6e8b643e74c9607109a19a5c2d3c001769a6caddbccab0c6a026acbeadc8c13e9d46c2c42b079c7b1904c565e00dbd181d1185d2f6e51fb24892a92ad266d72445d10fdeb4edf4373b800b31b", 0x7c}, {&(0x7f0000005f40)="052252a7a760ae4d028ad7e1acb321991127f09a5ca211ff01786c0c2df56f2a0420cc480f5ec0cf930354a6573f57ffb9dad7e71c3afed9bf4220de9781ea76fa5de3426cd46aaeb4ce9be620a78a80cf09fbc232025b199548faef1279d2bfa8185be724c54b82f2d72cc6c53d29046ef80ee77247bf10a1820e4e3f44299fe3e8340ab18b16368533c72eaea66f00841dc3893a25ff5a0c691731df22223a9fe5c1ea2cab4c931bef2c9b99321fa1873cbf72cb157476b4ef24885a472e23c5f4daea5a69e42a6eca10ccbe9530f04293646afdd405e9c8", 0xd9}, {&(0x7f0000006040)="c78b5effa25ca707c0f9086a83fcbc689ed92b3578e55bf1b54b39917e0dc660f0e5751a727a5fde8afe26c9fc2a1512f803c3a2a5722a43ec4fdc358b2f7c719418dfa95c9e8d8a94", 0x49}, {&(0x7f00000060c0)="bff7e8b7e5446397548322c4affc1e78a198175353e4027e804f44b2ecb7efd8f0157571bb3ed1d200310e25beceabaf50fdff1daeca5ad6f7795ffadedab92cf4627d6b2ea2bb63c98303825b7ff6468d1b07fcaec574455614d50188f98e384a1171f811695aaea74fdab257fc9c73e88997682f4f13df410837279db2a391678586975abcd490c3489a79ad303747a53a4d3785bacf682ea8fbc62b0e83ef3fee07e5fa31ea5399bd294f35a5b010099da0170f38b3ac04b13d2c13", 0xbd}, {&(0x7f0000006180)="14f5e41539ef5bbbf5215a5b69e83e8d9443be647ae3dfa1b86fa17e649f6e6e2cf4b9103720985c0328bd462b2106376315cfd7e6b904393d12200510975c4638f6fa664e202cc87dc9cacf3a0dd5664e0b4d46b8c116e4686ce0523201f84302cc2bc47ac05646dc914c2f01ccfb6391f0c8917d3917d7f452d9b6856d1bae3a27dfacd0d0646cfee713bb9cf0dabaa5616fab619dcdbf8495cb12e11c4f8a49e1c25e3c05c52e1f2dfcf23b87d34e7b6aef087afcdf550b8b924787c2ab50418470b710b9cfe3e83dcb692af8cb38d962", 0xd2}], 0x6}}], 0x7, 0x51) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:48 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x0, 0x23, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) [ 525.686041] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 525.746360] bridge0: port 4(veth7) entered blocking state [ 525.771128] bridge0: port 4(veth7) entered disabled state [ 525.779703] device veth7 entered promiscuous mode 19:46:48 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r2, 0x7}, 0x10) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) [ 525.798081] device veth7 left promiscuous mode [ 525.803998] bridge0: port 4(veth7) entered disabled state [ 525.914459] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 19:46:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101400, 0x0) dup2(r0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, r5}) 19:46:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000000)="edc13be6b734fe3253cd62cabeeadd1d66cb82f67c9392f06ab0e3c0"}, 0x20) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$GIO_FONTX(r4, 0x4b6b, &(0x7f00000000c0)={0x121, 0x9, &(0x7f0000000280)}) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:48 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0xae3acf7dfa8e7576}) 19:46:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$EVIOCSKEYCODE(r4, 0x40084504, &(0x7f0000000040)=[0x8]) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000000)={0x4, 0x2b, 0x0, r2}) 19:46:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000000)=[0x9, 0x2]) 19:46:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x16800, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:49 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x402001, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r5, 0xc0186419, &(0x7f0000000700)={0x6, &(0x7f0000000280)=""/237, &(0x7f0000000640)=[{0x8, 0x5e, 0x400, &(0x7f00000001c0)=""/94}, {0x8001, 0xa8, 0x4, &(0x7f0000000380)=""/168}, {0x5, 0x2f, 0x5, &(0x7f0000000140)=""/47}, {0x0, 0xd3, 0xffff, &(0x7f0000000540)=""/211}, {0xffffff94, 0x63, 0x8000, &(0x7f0000000440)=""/99}, {0x4, 0x4, 0xfffffffe, &(0x7f00000004c0)=""/4}]}) dup(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r8, 0x40a85321, &(0x7f0000000740)={{0x4}, 'port1\x00', 0x44, 0x40004, 0x1, 0x7fff, 0x3, 0x8, 0x9, 0x0, 0x4, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000}) dup(0xffffffffffffffff) 19:46:49 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280)=0x0) chown(&(0x7f0000000080)='./file0\x00', r6, r7) dup(0xffffffffffffffff) 19:46:49 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000200)=0xfffd, 0x2) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r7, 0x12, 0x2, &(0x7f0000000280)=""/4096, &(0x7f0000000000)=0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x6) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:49 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socket(0x8, 0x800, 0x4) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) dup(0xffffffffffffffff) 19:46:49 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, &(0x7f00000000c0)=0xebf5, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VT_ACTIVATE(r2, 0x5606, 0x7f) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) read$dsp(r4, &(0x7f0000000100)=""/190, 0xbe) setsockopt$TIPC_MCAST_BROADCAST(r2, 0x10f, 0x85) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x10880, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r4, 0xc0bc5351, &(0x7f0000000280)={0x40, 0x2, 'client1\x00', 0x2, "3247a934e2abe2c6", "75d8708cda40208f647fe51e7ce0264a682f4c8a5605372eda727d6ef8ad291c", 0x3ff, 0x73ea}) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x4, 0x2b}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f00000001c0)={0x9, 0x8, 0x80000001}) 19:46:49 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x1, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48001}, 0x20008000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) dup(0xffffffffffffffff) getsockopt$bt_BT_POWER(r5, 0x112, 0x9, &(0x7f0000000080)=0x40, &(0x7f0000000100)=0x1) 19:46:50 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x4e24, @rand_addr=0x80}}, 0x0, 0x0, 0x2d, 0x0, "33a40ab86c4fb5f00691f742780eb284710829187b65b721a38cdb7d4af362151603c943bb3b987b3831c882a0cd655d35a8215e0587cc0371f4a0c85d597ac7ec445a05f1e141754bc5ac9dfda9b5a7"}, 0xd8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) r7 = dup(r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) r8 = socket$inet6_dccp(0xa, 0x6, 0x0) ftruncate(r8, 0x9) dup(0xffffffffffffffff) 19:46:50 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r6 = accept4$netrom(r2, &(0x7f0000000100)={{0x3, @bcast}, [@rose, @bcast, @netrom, @netrom, @remote, @netrom, @bcast, @default]}, &(0x7f0000000080)=0x48, 0x80800) fsetxattr(r6, &(0x7f0000000180)=@random={'trusted.', '/dev/dri/card#\x00'}, &(0x7f00000001c0)='/dev/dri/card#\x00', 0xf, 0xf7721a2d074108fc) dup(0xffffffffffffffff) 19:46:50 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, r2}) r4 = dup(r3) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) r7 = dup(r6) r8 = socket$vsock_stream(0x28, 0x1, 0x0) tee(r8, r6, 0x9, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$bt_hci_HCI_FILTER(r10, 0x0, 0x2, &(0x7f0000000080)={0x9, [0x2, 0x8], 0x403}, 0x10) ioctl$RTC_WIE_ON(r7, 0x700f) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) dup(0xffffffffffffffff) 19:46:50 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x58200, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) dup(0xffffffffffffffff) 19:46:50 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x129001) ioctl$RTC_PLL_GET(r2, 0x80207011, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$IPT_SO_GET_REVISION_MATCH(r7, 0x0, 0x42, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) dup(0xffffffffffffffff) 19:46:50 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000001c0)={&(0x7f0000000080), &(0x7f00000000c0)=""/133, 0x85}) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x2b}) 19:46:50 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000080)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) dup(0xffffffffffffffff) setgid(0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r10) r11 = socket(0x2c, 0x4, 0x8000000) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r12) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x80000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno'}, 0x2c, {[{@dfltuid={'dfltuid'}}, {@access_client='access=client'}, {@access_client='access=client'}, {@dfltgid={'dfltgid'}}, {@cache_none='cache=none'}], [{@subj_role={'subj_role', 0x3d, '}-em1'}}, {@uid_eq={'uid', 0x3d, r7}}, {@euid_eq={'euid', 0x3d, r8}}, {@subj_user={'subj_user', 0x3d, '/dev/dri/card#\x00'}}, {@appraise='appraise'}, {@uid_lt={'uid<', r10}}, {@obj_role={'obj_role', 0x3d, '\'trusted'}}, {@uid_lt={'uid<', r12}}]}}) 19:46:50 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) sendmsg$unix(r2, &(0x7f0000000100)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000280)="209c5f275b30611cb54d562e585accf8d173592a1946d06caa9252a58a7345e5d98c4daca9c1af3f40294bcc582bfac2073db1434dc7085d526ea9939b5bf33f9302ef5ed70d52bf96c6e91244f417e85b8268613737bf62b6108ced09d8ca5525e9d75af8bdbdc6f3d0768791bed7f7da859844ed2ee2d81cc4199ef3f2ec727079eb80f0dd6c576ab56acc14f6c81d18b844b70bac7132230ee0c9693577bb140473b224d11a366184c395b70866065ee469", 0xb3}, {&(0x7f0000000340)="bc97cbef5a823f81c7bd54f921e8a0093233b371b2e599c62074ad984a929ca01ce1b35b61f1f7ed3b136658d651f84707a375358c5ccea5873053941a6c802fc8d425f7a3c9f89b8ffa6bb229132f013ee8bc8944ca930cb525398ab1c0909734f237a0cb383ecbc11be56685c713c216798289d8937aae7a5998cab10405aac88abfb71d6bcfbb6c24afdf47092b67fd816f14e3993e71e5e3518505c8ef1eb35468a51fb4d331ee6aecef5964638b9523e9b5c316525a7d29ed2d99db7569ae98240ab0b1f2813602037057a5", 0xce}], 0x2, 0x0, 0x0, 0x800}, 0xc040) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x40000, 0xa) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:50 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) vmsplice(r3, &(0x7f0000000300)=[{&(0x7f0000000100)="7fb7ea135c37ee407490be3cef2e59ddd954c5bcfb90cb6f87951fcf9478a42e916851e645eebce503cfd9467a5d24798c00ff4842d31f0d3a4816a25565f7f45c5ede05d7671fcefb25cde8760841f9", 0x50}, {&(0x7f00000045c0)="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", 0x10dd}, {&(0x7f0000000180)="e12d03dfc2f298aa9e638ea210725dafa34206ed7aac1b761af40e05618b9d0c4264894a2730d4c90283440519775b9ba28bf15b4af3ec2f5965511b27db9d4e0604ff44effb73b344dc9fdbdda165926dacd1952cf441f061083ad53129352c8a44516e40bbf4d38d0a6781bc25761461ddb15de3247fcb098d", 0x7a}, {&(0x7f0000000280)="daac8c96924d8c24f91a8f38a4c1e058b2c217db4efb4b3931506c2580ab2c647431c355948db7cd52c6b3fffb275c8e76452d198d24e9f95c1337c59cfd557c7082fbd976376d2cb3a1180d328df695d0ebcf6cbf588e7543e997c483fab36e773b7618a99b11401050d22a2acae37497f6d9fd1a39a71a", 0x78}, {&(0x7f0000001540)="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", 0x1000}], 0x5, 0x2) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, 0xffffffffffffffff}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) dup(0xffffffffffffffff) 19:46:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, r6, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) write$binfmt_elf32(r1, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x5, 0x6, 0xb1, 0x8001, 0x2, 0x6, 0x101, 0x11d, 0x38, 0x18d, 0x3b94, 0x3, 0x20, 0x2, 0x4c5, 0x7, 0x7}, [{0x323a72af, 0x29, 0x9, 0x4, 0x1, 0x4, 0x5, 0x1}, {0x60000000, 0x2, 0x1, 0x4, 0x4, 0x3, 0xa0d9, 0x5}], "3b5b4d8a983f57b63ada429c24a8eec16fd709dced433e40b5b4a46c41a0119587483b749df1318fb254bd0ad7b8ad23a1cb1a6863987837852e9869ed533ffb26c780f1bee30d897373541d2f0c9d431ef3ace63769ac6b3aeb36d17306b88bd009c30f3ac865c00abb0bae85604b79e5b6f728246ebbb230d9c951d530a91360114d6a584e39a45526743e84ca3c778e2a5788162f5128ba73613838fea57b01ac022b81e2b17bc06b45951c145e97d7dab53f6b", [[], [], [], [], [], [], []]}, 0x82d) 19:46:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7fffffff, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) dup(0xffffffffffffffff) 19:46:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) r1 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)=0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) kcmp(r1, r4, 0x1, r5, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x6) preadv(r7, &(0x7f0000000540)=[{&(0x7f0000000100)=""/224, 0xe0}, {&(0x7f0000000280)=""/136, 0x88}, {&(0x7f0000000340)=""/203, 0xcb}, {&(0x7f0000000440)=""/151, 0x97}, {&(0x7f0000000200)=""/55, 0x37}], 0x5, 0xfff7fffffffffffd) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) dup(0xffffffffffffffff) 19:46:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000080)=0x8) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x130800, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5afbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05752981", @ANYRES32=0x0, @ANYBLOB="b3ef461584d1f8f0"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r3}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', r3}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x7a1b40, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x24, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000200)='vlan1\x00', 0x441, 0x80, 0xfffe}) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r8 = dup(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r9) write(r9, &(0x7f0000000100)="9ec11c2aafbfcb1a773dde19182cfcef8892ed09257f7a60530d3d51bd4747dcf6f413f0e873e5e6b672597943657081a4c5855827d740ecaeb2e3c1a14949e7f54ed7966ed48164b6de70a4a0a72866d56afc5d2ef1c6ff601f940f762601ee", 0x60) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)) ioctl$DRM_IOCTL_GEM_CLOSE(r8, 0x40086409, &(0x7f0000000080)={r6}) dup(0xffffffffffffffff) 19:46:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RXATTRWALK(r2, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0xffffffffffffff01}, 0xf) r3 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0xe60701, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bind$rds(r7, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$KVM_S390_INTERRUPT_CPU(r5, 0x4010ae94, &(0x7f0000000080)={0x4, 0xf255, 0x100000000}) syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x113000) 19:46:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) signalfd(r1, &(0x7f0000000080)={[0x2d]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r5}) r8 = dup(r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) dup(0xffffffffffffffff) 19:46:51 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000000c0)={&(0x7f0000000000)=[0x613], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x101}) 19:46:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000100)=""/125) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000280)={{{@in=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f00000001c0)={r6, @broadcast, @multicast2}, 0xc) r7 = dup(r2) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r7}) r10 = dup(r9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) dup(r2) 19:46:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TIOCL_UNBLANKSCREEN(r6, 0x541c, &(0x7f0000000080)) r7 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) dup(0xffffffffffffffff) r8 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, r8, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, r8, 0x0) ptrace$cont(0x9, r8, 0x6, 0x8) 19:46:51 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, r5, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, r5, 0x0) syz_open_procfs(r5, &(0x7f0000000080)='fdinfo/3\x00') r6 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) dup(0xffffffffffffffff) 19:46:52 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000080)={0x100000000, 0x31, 0x1, r4}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r6}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) dup(0xffffffffffffffff) 19:46:52 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup(r6) getsockopt$bt_sco_SCO_OPTIONS(r7, 0x11, 0x1, &(0x7f0000000080)=""/29, &(0x7f0000000100)=0x1d) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) dup(0xffffffffffffffff) 19:46:52 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x3c9900) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) dup(0xffffffffffffffff) 19:46:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5afbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05752981", @ANYRES32=0x0, @ANYBLOB="b3ef461584d1f8f0"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r4}}, 0x20}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000980)={0x2c4, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x34, 0x4, [{0xfffb, 0x69, 0x9, 0xfffffff9}, {0xed1e, 0xcb, 0x80, 0x3766}, {0xa2c0, 0x7f, 0x4, 0xef3a}, {0x7, 0x3, 0x0, 0x5}, {0xfe01, 0x0, 0x58, 0x6144}, {0x3, 0x6, 0x9, 0x7}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x7f, 0x3b, 0x7, 0x4}, {0x0, 0x8a, 0x9, 0xe334}, {0x40, 0x9a, 0x7f, 0x173ee30b}, {0x4, 0x1, 0x3}, {0x4332, 0x3, 0x4, 0x200}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}]}}]}, 0x2c4}}, 0x40012) syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r7 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r6, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r7, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r8, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x401}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff2b}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x70}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000091}, 0x8080) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0xe00, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_vlan\x00'}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_hsr\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004}, 0x40408c8) 19:46:53 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x8a101, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = accept4$llc(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000000c0)=0x5a, 0x1800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x3d) r9 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x282000) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x80400200) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x2, r6}) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000100)={'geneve1\x00', {0x2, 0x4e22, @loopback}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r10, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:46:57 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x2, 0xb, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r7 = dup(r6) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r3}) dup(r10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) dup3(r0, r8, 0x0) 19:46:57 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x602100, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r3}) r10 = dup(r9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) dup3(r0, r7, 0x0) 19:46:57 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) readv(r6, &(0x7f0000000540)=[{&(0x7f0000000100)=""/126, 0x7e}, {&(0x7f0000000280)=""/133, 0x85}, {&(0x7f00000001c0)=""/45, 0x2d}, {&(0x7f0000000340)=""/223, 0xdf}, {&(0x7f0000000440)=""/66, 0x42}], 0x5) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x0) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r11, 0xc01064b3, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r12 = dup(r9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r12}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:46:57 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r3}) r10 = dup(r9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) r11 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, r11, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, r11, 0x0) ptrace$getregset(0x4204, r11, 0x1, &(0x7f0000000080)={&(0x7f0000000100)=""/208, 0xd0}) dup3(r0, r7, 0x0) 19:46:57 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r3}) r10 = dup(r9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) dup3(r0, r7, 0x0) 19:46:58 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x10000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) sigaltstack(&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080)) connect$vsock_dgram(r2, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @host}, 0x10) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:46:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GET_CAP(r7, 0xc010640c, &(0x7f0000000140)={0x9}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x1, 0x7f, 0x100, 0x401, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000100)={0x0, 0x6, 0x876, 0x0, r10}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:46:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sync_file_range(r7, 0x6, 0x80, 0x2) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:46:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) setsockopt$inet_group_source_req(r8, 0x0, 0x2c, &(0x7f0000000280)={0x80000001, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}}}, 0x108) r9 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:46:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x400000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x3f6, 0xe, 0x0, 0xffffffffffffffff}) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x20c802) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000080)={0x2, 0x7, 0x8, 0xfffffff7, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r8, 0xc01064b3, &(0x7f0000000100)={r11}) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) 19:46:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x111, 0x2, 0x1, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x80080, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@newspdinfo={0x4c, 0x24, 0x100, 0x70bd28, 0x25dfdbfb, 0x4, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r11 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) 19:46:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(0xffffffffffffffff) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000140)={0xa20000, 0x6, 0x8, r9, 0x0, &(0x7f0000000100)={0x9f0902, 0x4, [], @p_u32=&(0x7f0000000080)=0x8ff}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5afbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05752981", @ANYRES32=0x0, @ANYBLOB="b3ef461584d1f8f0"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2800003262f754001000cb00000000000000000000ffff00", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=@delneigh={0x38, 0x1d, 0x10, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x2, 0x1, 0x7}, [@NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_CACHEINFO={0x14, 0x3, {0xfffffff8, 0x1f, 0x8001, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4081}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000003c0)={@rand_addr="5017b3b3cdb08267da7deca4c2212d6a", 0x4a}) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="c00000000906010100000000000000000c00000505000100070000002c000780060005404e2200000c00184000000000000000090c001b40000000000000000508000940000000030900020073797a3000000000050001000100000020000880100007800900120073797a32e6b10700e544000000000c00078008000840000000f508ea0940000000083c0008800c000780060004404e200000100007800900120073797a3000000000100007800c0019400000000000000fff0c0007800600"], 0xc0}}, 0x200000c0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) [ 538.078388] NOHZ: local_softirq_pending 08 19:47:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003740)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x6c, r6, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x21, 0x7, 'system_u:object_r:fonts_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2b}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x6c}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="58000500", @ANYRES16=r6, @ANYBLOB="200028bd7000fbdbdf25020000001400060073797a6b616c6c65723100000000000008000500ffffffff1400060067656e6576653100000000000000000014000300fe880000000000000000000000000001"], 0x58}}, 0x20008000) r7 = dup(r4) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) 19:47:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000000)=0x1, 0x4) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0xa000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/checkreqprot\x00', 0xc0c00, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="0cf908f75aec79e538e08e8d75619e2012ac62", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r3, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r5, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000140)={0x66, 0x73}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000940)={r5, @in={{0x2, 0x4e22, @loopback}}, 0xfff8, 0x5}, &(0x7f0000000a00)=0x90) r6 = dup(r1) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r9 = dup(r8) r10 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000002c0)={'broute\x00'}, &(0x7f0000000340)=0x78) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) 19:47:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x1, {0x7fff}}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x121140, 0x0) ioctl$EVIOCGKEYCODE_V2(r11, 0x80284504, &(0x7f0000000280)=""/227) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KDGKBMETA(r4, 0x4b62, &(0x7f0000000080)) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) 19:47:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x200401, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r9) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000380)=ANY=[@ANYRES32=r9, @ANYBLOB="090000000700c28215571d3f79ecbe9f01a0d7ac8c6347c2963f8cceb014d7493a97c88276b671cbfcc2d7fad8ff2e0eae533e714f7b052af161f4ab86981ff9448fc51c75ab746b2e17cb189f2563939c7f5831568fe7af08fcb4de59babf53e2c0d4c1dc67efb432eae8af3be96bf65211ef25d8efa0f4a310b38a6f33d21ca722ccb9e00f0a42b9d8c6e49a889dd702621d16bbc6747f6f9c0dbf9aa1286e1a3a3815511418d95af25a2d11acfab3d2a97a2289efdd855dbb3eb7f6f5d8fc25ee331441b03f649eb2a38b71"]) 19:47:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000280)=""/172, 0xac}, &(0x7f00000001c0), 0x40}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1a8c1, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000100)=0x8) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r8 = dup(r7) r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) 19:47:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x400, 0x0) ioctl$VT_RELDISP(r9, 0x5605) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x3) sendto$inet6(r10, &(0x7f0000000340)="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", 0x175, 0xc810, &(0x7f00000001c0)={0xa, 0x4e22, 0x7, @ipv4={[], [], @loopback}, 0xfffffffb}, 0x1c) ioctl$VIDIOC_SUBDEV_S_EDID(r2, 0xc0285629, &(0x7f0000000140)={0x0, 0x44, 0x7, [], &(0x7f0000000100)=0xff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:02 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000100)="420fdc000f01f8470f3266baf80cb8a892728eef66bafc0ced66b831010f00d8c74424000c000000c7442402768ca22ac7442406000000000f011c24c4a1195fac080078000048b80f000000000000000f23c80f21f835000020000f23f8c4037d7f3e003667450f01cb", 0x6a}], 0x1, 0x2, &(0x7f00000001c0)=[@cr4={0x1, 0x10000}], 0x1) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x40000, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r9 = dup(r8) r10 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r6}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) 19:47:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000100)={0x9, 0x2, {0x2, 0x2, 0x0, 0x2, 0x80000001}, 0x2}) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0x7fff) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)) 19:47:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) getpeername$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r10, 0x301, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r10, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7ff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x782906347563e20a, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003740)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000126bd7000fddbdf25122bfaffc201fefe6cdf43b8da0700000008000500000000062100070073797374656d5f753a6f626a6563745f723a666f6e74735f745673300000000008000500ac14142b14000300fe88000000000000000105000175bfe7d8d4442fcf8c2fe238be532fb6a53abb162d1361f75333925cbcd3826e5fb9173a1c518c083ebd7eb908b4fd6fd207751c07a94b2bdf7753d2404983be1c6b0a9232fb0762e6c9f6071dc7c12c833a35c7cf5d4b82b7da52291c6b26350f5d20"], 0x6c}}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x60, r7, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x16}}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x7}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, [], 0x3f}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000004) r8 = socket$rds(0x15, 0x5, 0x0) sendfile(r0, r8, &(0x7f0000000440)=0x6, 0x40) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000280)={0x9, 0x400, 0x100, 0x3f, 0x7}) r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DROP(r10, 0x4143, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETFB(r12, 0xc01c64ad, &(0x7f0000000080)={0x0, 0x3ff, 0x0, 0x2, 0xdd5, 0x101, 0x400}) 19:47:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, 0x140c, 0x400, 0x70bd26, 0x25dfdbf9, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0xfffffffd}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x40010) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) write$UHID_GET_REPORT_REPLY(r10, &(0x7f0000000080)={0xa, {0xa, 0x8, 0x1}}, 0xa) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) prctl$PR_SET_TSC(0x1a, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) 19:47:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x109000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000100)={0x0, 0x0, r5}) 19:47:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)=@builtin='builtin_trusted\x00') r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)=@builtin='builtin_trusted\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000140)='blacklist\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r8}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="f35867ce55821b8c050feac39810ef52d21a1c12b10f8430eaa3c0619305eb70681ffb9bccd84810c2424866a5e52a676a", 0x31}], 0x1, 0xabed) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:04 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = socket$inet(0x2, 0x6, 0x5) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r6, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r8, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={r8, 0x7}, 0xc) r9 = dup(r4) r10 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x499) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) 19:47:04 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0xfff, 0x2a, 0x1, r0}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) fcntl$F_SET_FILE_RW_HINT(r9, 0x40e, &(0x7f0000000100)=0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000100)={0x24, 0x0, 0x0, r4}) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r9 = dup(r8) r10 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000001c0)=[@mss={0x2, 0x9}, @mss={0x2, 0xc0}, @mss, @window={0x3, 0x5, 0x3}, @window={0x3, 0x8006, 0xfff}, @window={0x3, 0x2f, 0x3}, @window={0x3, 0x3, 0xfffa}, @sack_perm, @window={0x3, 0x800, 0x17e}], 0x9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) 19:47:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x50, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:05 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$nbd(r9, &(0x7f0000000100)={0x67446698, 0x0, 0x2, 0x1, 0x4}, 0x10) 19:47:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) timer_create(0x3, 0x0, &(0x7f0000000240)=0x0) timer_settime(r6, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) timer_delete(r6) r7 = dup(r1) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={0x0, 0x7, 0x0, 0x9, 0x0, 0x8, 0x6, 0x8, 0x6, 0x20, 0x8, 0x3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) 19:47:10 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x803, 0x2b, 0x1, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000080)=0x2) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = accept(r5, &(0x7f00000001c0)=@l2tp={0x2, 0x0, @local}, &(0x7f0000000280)=0x80) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x3, 0x1, [0x9]}, &(0x7f0000000300)=0xa) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0xc09c9c1fb456385e, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) connect$ax25(r9, &(0x7f0000000100)={{0x3, @default, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r12 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r11, 0x0) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r12, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="000128bd7000fcdb68f2df251d0000001c00238006000c00e10300348df67c79b3beba2589390008001400e529292d7843c6ac99c47b2063bfefbe5c542bff"], 0x30}, 0x1, 0x0, 0x0, 0x24000091}, 0x8080) sendmsg$NL80211_CMD_STOP_AP(r10, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r13, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_AKM_SUITES={0x18, 0x4c, [0xfac06, 0xfac10, 0x0, 0xfac03, 0xfac07]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004881) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r4, 0x8983, &(0x7f0000000080)={0x7, 'veth0_macvtap\x00', {0x2}}) r5 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_MODULATOR(r5, 0x40445637, &(0x7f0000000100)={0x0, "f9b988b686a15fda542838afabfd78cb8503f82ad7e5aefddd2c0c70ccb3d7dc", 0x20, 0x0, 0xffffff00, 0x4, 0x4}) r6 = dup(r1) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r9 = dup(r8) r10 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r6}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) 19:47:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000280)={0x6, [0xadf, 0x1, 0x8], [{0x3, 0x80, 0x1, 0x1}, {0x9, 0x80000001, 0x0, 0x0, 0x1}, {0x642d, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x7fffffff, 0x1, 0x1, 0x0, 0x1}, {0x924, 0x7ff, 0x0, 0x0, 0x0, 0x1}, {0xfff, 0x2, 0x1, 0x1, 0x1}, {0x5, 0xffffffff, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x5, 0x1, 0x0, 0x0, 0x1}, {0x0, 0x6, 0x0, 0x0, 0x1, 0x1}, {0xd318, 0x5, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x5, 0x0, 0x1, 0x1}, {0x7, 0x8000, 0x1, 0x1}], 0xa79}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) 19:47:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0xbac00, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:11 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f0000000080), 0x4) 19:47:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x578848558e5f02f5, 0x0) dup(0xffffffffffffffff) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000140)=0x80, 0x8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r9 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800, 0x0, 0x6}, r9, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, r9, 0x0) fcntl$setownex(r7, 0xf, &(0x7f0000000100)={0x389b02b361fc6633, r9}) r10 = syz_open_dev$mouse(&(0x7f0000001b80)='/dev/input/mouse#\x00', 0x8, 0x20000) getsockopt$inet6_mtu(r10, 0x29, 0x17, &(0x7f0000001bc0), &(0x7f0000001c00)=0x4) 19:47:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x24c0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, r7, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, r7, 0x0) wait4(r7, &(0x7f00000001c0), 0x8, &(0x7f0000000280)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0xc21) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) fcntl$getownex(r10, 0x10, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) dup(r1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) 19:47:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) write$P9_RRENAME(r2, &(0x7f0000000080)={0x7, 0x15, 0x1}, 0x7) dup(r4) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000100)={0x7, 0x102, 0x2, {0x6, 0x9, 0x3, 0x7}}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)) 19:47:12 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$inet6_IPV6_ADDRFORM(r10, 0x29, 0x1, &(0x7f0000000080), 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:13 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000080)={{0x0, 0x0, @identifier="5095880a7412d1a4035ebbc075bbf5c4"}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$sock_inet6_tcp_SIOCINQ(r10, 0x541b, 0xffffffffffffffff) 19:47:13 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) write$FUSE_OPEN(r10, &(0x7f0000000080)={0x20, 0xffffffffffffffda, 0x7, {0x0, 0x2}}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:13 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x4c, r11, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, r11, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1f}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x4014011) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) [ 550.722213] IPVS: Scheduler module ip_vs_sip not found 19:47:13 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCNXCL(r3, 0x540d) r4 = dup(r1) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bind$isdn_base(r7, &(0x7f0000000080)={0x22, 0x7, 0x0, 0x7f}, 0x6) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r9 = dup(r8) r10 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = dup(r11) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) 19:47:13 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xffff, 0x2b, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x4010, r3, 0x400) r4 = dup(r1) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) dup(r6) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r9, 0x29, 0x41, &(0x7f0000000100)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)) 19:47:13 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000100)={0x3, 0x3, 0xb0, 0x5, &(0x7f0000000080)=[{0x7, 0xa00, 0x1, 0x1f}, {0x3, 0x1439, 0x1, 0x5}, {0x41b, 0x1f, 0x7, 0x1}, {0x3ff, 0x3f, 0x1000, 0x3f}, {0x3ff, 0x4, 0x8000, 0x2}]}) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) 19:47:13 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x20}}, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f00000004c0)={@rand_addr="cc62652c3c0ea50cd0e719b2b46db8ea"}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) sendmmsg$nfc_llcp(r6, &(0x7f0000006e80)=[{&(0x7f0000000280)={0x27, 0x1, 0x0, 0x3, 0x2, 0xc9, "ef6e247587cd744fa14354eebb66b8bf7f14bc0a7fa048c8127458dddbf743bc4293f03e6f41f10db504bc5e06441080fb6e000000000d9b23f07349b897cd", 0x38}, 0x60, &(0x7f0000000680)=[{&(0x7f0000000200)="815fd763cdef3089a978807b7b", 0xd}, {&(0x7f0000000300)="71c4e04675cb7d9b530b", 0xa}, {&(0x7f0000000340)="e693a1446fd455a5ea93937f76c2ab15e37d93b8974c6b6599cb14084166aa0f40ca398c8bfa6f223958d443e378553a5808a3eb7fc40fc6a22dcca1172958c8d393566f17048c813e6ebcdcd851751de63592c81c2d2e13162b44cdc11d932f3f664ff0c6ca646de99f513c7c123fbc2ac010f7ce1c5e2261b339c0c257bd0d1d54bf951c3a9168612fdb65d2b9c60efc78c5f5830326a0c280f147aa7083312a68cad25cbe426ade1de25ed2745f1a4066194348257537ef3d369440745b002eacffed3e30ebbf512ebeeb321d1f638a3d36bd52b87de868159fb5aadd820f3e0fbafbe35934", 0xe7}, {&(0x7f0000000440)="c2851ae260da22baf4f66539cb9196ee136c1415f9b091f10c73a0948aee341f9fec3e86e24854018a6df008af38fe8a01804c8f519223964a35c68ebd1bc5fb03303693f55bfebb35e53455b31132cccd04f2bf4913aacaf404f18d2fcc", 0x5e}, {&(0x7f0000000540)="11a004f42823fd9d96c9e23087294db298802850a6484376f57dc1d9100573a6710ef5bdfe7eb2be3a63f6d81e3af145e00339070872c42cf2beefdfde507efc2a6e1f819c1d24a5c49219d0af43fc5f89c62497e263ef0eb92733a7e3a0ddbf3d13b330fee5157867ac1d8297a1cebaf64c195fb2c36a07ff2dd9026ebc4a707abe5d173411eddb67009d27e98d58c3bee2ee2f902c", 0x96}, {&(0x7f0000000600)="9b1e675fbc02b2f97e7c729dff7223c6146049a2eac64a370acd84a32e10755baf24b8e04ea06eb4b5dc286e086ecc04b65cd61ede728fe0dd4b3be704b307cf7d71031e70161f4935cfb341066c4fe2028039012620850165b0f3d5fd0b3c94bc9723a341bc7545846e3b1dabb43cb9", 0x70}], 0x6, &(0x7f0000000700)=ANY=[@ANYPTR64=&(0x7f0000007380)=ANY=[@ANYPTR64=&(0x7f0000002f80)=ANY=[@ANYRES16, @ANYRES16, @ANYPTR], @ANYRES32, @ANYRESHEX=r0, @ANYRES64=r4, @ANYPTR64=&(0x7f0000007240)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRESDEC, @ANYPTR64, @ANYRES64=r5, @ANYBLOB="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", @ANYRES32, @ANYPTR64], @ANYRESDEC=r0, @ANYPTR64=&(0x7f0000002fc0)=ANY=[@ANYPTR, @ANYRESOCT=0x0, @ANYRES16=r2], @ANYRES32]], 0xfffffffffffffd1c, 0x4008044}, {&(0x7f0000000800)={0x27, 0x1, 0x0, 0x2, 0x8, 0x40, "1402b9fd9d739fe8e54ade441227e8a26c1e2a041aa139e69a0c51a22ec11948ef0c52cd0a5d9ff9a6c45cd09859602be28ac18eeb35ecc0664d31b457b975", 0x39}, 0x60, &(0x7f0000001a00)=[{&(0x7f0000000880)="0e701094484ea0c621c6fb6a4ce21f207952531988582e9515127141498579f285bb108b601b16ab25b11ba460079feb5d109a0092b27e31f19c08ef6cf67ac370360b1dab2f12478197839319f28efff30c4045ee44f66f5da85c8ca980105b41b02d8ddbcd1eac0c78ee5b166ee6084b479956df6374887c9385da3150aa20b16d6869b925054db2c786677759000ade6783ec273bdcbcde39238e05aaa9c9bcac621fcaf4e415b0a41938c79dc46572e96bedc4cd1a511343d6ff2a0df3e1b0626ea3120ef692590bc28b2707548a9795", 0xd2}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="8460974f8dfb9977419cde656471d917b4895fb37014817a80e1cfedf5ca49a5a7eef2daf69445fb0a389dc4dcc98e549d8f4c07565ee323068ea4f13a17dbddb7e2dd6692edb4499b2e4455fb9d600858359085", 0x54}, {&(0x7f00000004c0)}], 0x4, 0x0, 0x0, 0x800}, {&(0x7f0000001a40)={0x27, 0x1, 0x0, 0x3, 0x5, 0x40, "22ef6ef699fb635f7cd75453d98949f4647d1dd9c173f272a40af5892a1c69f030a4cf427c489a154b935d0eb5e6cc99248ed0c719d77c95f6692d8ef7cb14", 0x6}, 0x60, &(0x7f0000003080)=[{&(0x7f0000001ac0)="a1a7cc7746ad3de6a6bb3d6083d1a0b6b010854b4042651001949754f1056c0b550fdda4af24297d4f5fc305e7537e79d382ddda6df7505b58d23a318cb0185a383074265c9b8d560970e8f2b1f2ddc01ad87dbf4f3b1bb2a627baf6d63ae1750af63ccb4e2bb7a6cfe38a03c25e1d6b90af6ac510d1cd625627b61823b959997a94835aaa5cce4b3249e453908fd47ee3ac283396b1282a6e57104eccfaac2acc9b4f615c732e9abf1d303517c23136c55fd7dd4ec14000910f056d00aeb180fcc98515fae14a3b2647", 0xca}, {&(0x7f0000001bc0)="cbfed81df68a0288c9a18aa1d9f3d2e8af429d640f78d076b91a42d22eead7861e0f5e0d5bec", 0x26}, {&(0x7f0000001c00)="fa9d5bd7320b02d22a9a9589837a312e34a8cac83c510d93bf5c584f6ba0c6f00e0a3d9f007a1bbd6a88cee166904b3527ccdf3031c119ae7f1c5f8ee86b9679e56fb7e6936a5c1addf2ef67298559731baaa797", 0x54}, {&(0x7f0000001c80)="a943a9af194760e4f8cf6cccf6c8a122aed3d9bb6a4602052bf9f3c0306f5eb3e3400d963aaf66469b738784f75b6b4be424ee3f7766003677211b630a1b1693639d95e721d89ebf2687a99fb7a97ca21d8b6df524490798fb22024222e16f013c0e2da54c7c1f4f513e7740670c23100d577732cf9774a2", 0x78}, {&(0x7f0000001d00)="552e9e5174570c94a303572a0635f82619dd2a8b36b9b8b322b825ce5784670193f90f84579059e5e0f5b894be04d6e9550624c5503a8d37eef49d6434fb3d104546ca5c37b93def01533b0c25531da29f63c49fb0896a13af32d8b5942b6e2ce3ff13f3ecbfc75f11f8fdcf817cdaf70f5b79cbd76442dc2b1474b505ba07b636d0be0f0052840a80e6333db9ce656ec973285504d874e4507b908e0d21de762809564c73c36483ea40b586456a3cfa885785606320ef961c73df5f8a6f18c3e747fd43bec95df7701c51d4f887d3", 0xcf}], 0x5, &(0x7f0000001e80)={0x50, 0x1, 0x7ff, "4d7d901a87a95a6f80dea54673e49843b4aec92afc19b8a9e3b11824e118cb4b07f70e5bcb6bcf812d79e7279c94a8456f8ce1f60c46c20bce"}, 0x50, 0x40000}, {&(0x7f0000001f00)={0x27, 0x0, 0xffffffff, 0x2, 0x42, 0x3, "9f9506863c3b8882715297c6d1eb2675fcce204ab3cb0be8393ab8876936ee6f8f44ea4d33eb6aaf62870a3934617e35b50f06d7d1fca22f5c2c6e89c97488", 0x1d}, 0x60, &(0x7f0000001e00)=[{&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000003cc0)="96d5623af85e40c14f4ba2f0525ea5ba4cc79188030378f833a8b314974c379cb77a23cb664f977f550e283772a24ea3b39c82e929b3e7efd0f5ecc179a061141c96ed74e7d144ae5f98803740c456b68b18a8abdaa413c52071fe70840640a48729582d2533086d55974cce6c0ae2f7e8e7a3e08c5b95fc588f583a4cb9c83c9b89cbe01ee282c0e3420927632a4f2f913d3383fe1cabce40bee260691f33782df57f58d3106c0faee170311e3ee199", 0xb0}, {&(0x7f0000003040)="0269af45275a8fdf6f2baf0d833a22fc5808e85f32523efc35", 0x19}, {&(0x7f0000000740)="56ee5f5ff0e1456e98dbc76dd4ad1afdbb81182e5964d8a6b4a2929adcbbe3e2d7790900feb156fb5da7f428d368b727891a3f2d6c9a57178b425ebd2dbc376e8a7a5ed48eeb7177fea32b24cb5cf8ec", 0x50}, {&(0x7f0000003100)="fada3f2a59b6247fb3540f069c7b09b36746388d0cfa7d715939a3a9afbdfc7ce409e72589637a1e70a1dc4ecd68280ec3411c592c03ad0d5eeb8dbb159e3cb460a8429438ae03b32d3d5360803df94f48773ebbc28da59348741019f3a4d7fe3d18386b4260c922eb01cc5870384b8c766f6b3f5be0f22a4a2147d54b6b2979c7f53184e9ad1bf8915d605a2462c29b47bbaff188e0f3e400b4875d9c0551a0cd258ba65dd1521afa6ee06db249edcd14f28e579602e6e06acb5d26968090a3cca13a888917746c9afd2de2c4c00bee576c2632825c19febc75271f9840685be0cb7d9b686bc2903278c440225765289fe0402f70e78bbd", 0xf8}], 0x5, 0x0, 0x0, 0x80881}, {&(0x7f0000003280)={0x27, 0x0, 0x2, 0x2, 0x49, 0x6, "4361fcb6b77dc81342cb4ab27a58505c54b2ff633e8a48bba05c1b7b4e50feb04933766265cd3c64abbb8d6c56b7c7c48a8bfc37b71d1aaec7d53b179bcdcb", 0x11}, 0x60, &(0x7f0000003680)=[{&(0x7f0000003300)="55b5e465a22e6d8dce39005e41b0edba787262", 0x13}, {&(0x7f0000003340)="8bd783d124a29a454a091f19691664a0feac8b1ac96deeb85edd7840b26dbe695485ecf4805a8120a3b660ab544727a8a94dd2b9ad32d510187944ef08cef6ac5627bec426cbbee557cad656cd041c615bf2b68a462b7c9341303d892fdab309b8a447815e497ac2c3c3fba2005d28d1c45d7a6280a7c8a061c22588f28bca57f6fdeadb4db1d0b9f926aa6e701e315bbc4be678e4e9e716527d9944d3", 0x9d}, {&(0x7f0000003400)="2cab4fb578a5086c977b16964d25206aeb17f6e4e9636a5a568c1037860d94c33c7ac21219332d185abea7731c5aa935e5885a60a87c8e0572b1eb090bd7cb260606eb1e64523cd4cfb889f4076e64c61cb9232463cf8d5683d631c656c1b46f96959b917b1cb86db49ac8d75df046fa3cc88be4796736d3f34dbc4d57bc76e4ddf8fbd3", 0x84}, {&(0x7f00000034c0)="b1450471c0b5c386b10d2c842a0db8c5c3806cd84cac21a098e0f5d94928187130f10aa48f104fa442", 0x29}, {&(0x7f0000003500)="85ba584fa79372c268b42d5e41c31d8efd45f61c047335153e3eb738500e094415a7e9f0d79415ddf610e0cbda1bb12a8e550fff5fa248a3905350b261d887a1b67d873a5ad16d93456c9e01f61bc8393de50b1c6a726b7c55bafb71fac594073080f54071d85a0c480f116643c2503f96c42a93db41e24a92e08eada34eb8d7929d659478fc5b5a188a795c73032f13df6f171a690b1ca98388ad2cfe6cbb7fde", 0xa1}, {&(0x7f00000035c0)="11f53d31455e4ad0617dd337ec38a59ad808fd2e8223ab73b3d3d520e34d1b78d4e902ebc688a623bc5da195c8492522c33f4a048412e148731b951615825add64c8e0d23c7bcc2343584e866b92d9d721d6d621bdb24e4f0d25af2fdaa769c95eeb6a7c061af6ed2f199c51c527549d99b1b28c2b7e18ce5ded4f38586b34ae7be2eb75c7abfc218cd6fbfe", 0x8c}], 0x6, &(0x7f0000003700)={0x38, 0x0, 0x6e1d8a76, "ed6ad7c12a1f17d8e738ac5f4afd0989964bc7813b6d9124a8c3604988005ce8d1528068619e5d9a"}, 0x38, 0x20008881}, {&(0x7f0000003740)={0x27, 0x0, 0x0, 0x7, 0x88, 0x4, "572d6de7a4617dd5eb3258a9bc70f783d942248c0bd47e6b7fb5bb7874b8214fa2fff1651935b58fb76eaf2e96e83a177b33d3929175072132db0945b7013d", 0x38}, 0x60, &(0x7f0000007180)=[{&(0x7f00000037c0)="07b47b67be2eac1c51d5d9aae09340fd7c73ea3a202f5bf7089d787e66bee6a2c141aaf760d77df9b341d9f660f129f8a580cb2d5e2791e76e00e3e8f4fcab56e822ca6094e5f37f53ac2a8b31ae2eb95a260b7d35ec8bff67416d53ddd06a6a023693f0325b11227d7648fb038d15892a1c051fd1e30003e7", 0x79}, {&(0x7f0000003840)="a8cac47a77cf987685661193afee336368be1334e321be4f69d24c1811ca0ced7112fedccbca09cf3dec6e3d42f8be8dd00cbe2b42ee11ac7ec9f0fb31ec366a38b1f1e1f7268d02e5c19fd963fa1b7847e5f7edb1ecf1edc34a1a7e9953e38fd1c2770cb80a7c4be37d41d3afab15433d5bbc680529859fabf32f2feda900817da5de39589771555f4136b11eae", 0x8e}, {&(0x7f0000003900)="db740af9e58450f3d023ea4e9734247a4210143468ab8fd4f83858268ac024f11a92bcc3a58fc57034c180e479ca7f1a1d4ecb8e6dc9f14f2167dcecf312c4306818416cfda5243df8aed4528f27f6ae75067d40c5b9e55556c3622124f3bca3eaf51a9adddefdba91467b9e84903fe933a6b1daf0445abc6b95b390128e905c05b713b2cf3acd24", 0x88}, {&(0x7f00000039c0)="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", 0xfd}, {&(0x7f0000003ac0)="b373fa83", 0x4}, {&(0x7f0000003b00)="a0367d2fcfb318819ca93303cbdeb3aeef343f26c6d3e5fcc7834797e515e1513d22da93be8fff7642cbbeea5b969f63c1727c2942311913d5a93620dd892e0e1192cdee1556b2d70c3d0272924890a66826c366cfbef1df90b88793", 0x5c}, {&(0x7f0000003b80)="d82e7ec94785f685165ea1fc799acde70c3fe30dd6ebbdae34c3c22f22186d47795bee6f53468b22a58cd52d13cbaee8ce361d6cde2ca7ad96f683a25dd4755142729049a19bcbd0990dfda41e57d34e0a4d522a9c68fd2973b3fcf66d18a1395cbb9c3f2112e25395b4400ebbd7ca4089", 0x71}, {&(0x7f0000003c00)="38593476d56498de50b54a9a02a7eb9cbad5d24d097356bfbe94740d46505deb0a447296b86f7387f7950e7eddb9b9fb976dc4e92a3ff7c5382beca448c99edba26dc862edd32cd12ab240e530eeb5ed247b1c96481eec76033bd00afbeb1a00d84d4fd57b15c65cfdd38e3c513db2b6d6e5adc6cda3e738c6", 0x79}, {&(0x7f0000003c80)="42c1e0cd9b13169fb0df83d732f787dd9fd911b7aac0cc1f32b9d4c0cc0a50695d1fd10afd36dabbdb8b4cf9060374643d8349545aeffbac47f255f8ee8cad07", 0x40}, {&(0x7f00000070c0)="9235a9271813a4cc451ce3ac498d7ad6901a51804db25c2d7dd2d3d2378531ce679d64a68af09a1c0a4d654c2dcab02cea3b31de741299a9645b379ed96f4450380f7b344e61bfa237da035943e2bf3bbbf42d954bc835326197ab87aab64cf95e2cc4fe09dd2005840a6f67fc2c84106ffcb8a90f0ca1bdc4fe2af4b3d37337e4dabfa20824539ff1c7dc", 0x8b}], 0xa, &(0x7f0000003d80)={0x50, 0x115, 0xcde, "32edd34d835783f3269c119b7cbed0d0d90502ead853b974e879d8f9c7654738d0430677c01e5ba18fff6c6cddb1c3af05013e0bfd08a3df0b2ea84fc4"}, 0x50, 0x4008000}, {&(0x7f0000003e00)={0x27, 0x1, 0x2, 0x4, 0x6, 0xbb, "39e9ae5b0d8453b87083aa856c9db3525b7b5b3c46b404aacec43eb10340f558de6397ff67dab3a1b3682119b5c73a2c696247b98ed17fc55dc2572fee3fad", 0x4}, 0x60, &(0x7f00000040c0)=[{&(0x7f0000003e80)="83e4d059593300ca8017e2bb53843fe1783e109d4e2c973c5a1386a211aa35ccd318377d7da6c9e6b5006ca6e1eba2a67ffa64c98c3551fda64a37559ca3d725afff72968c090f81f12976d677bbbc189d7bc293b4a762f4b0770e92ff21e39a1396b4521674d2b755992fe7ec41a80884cb325e493e8a461bd47262322f450f27144dabdc0ad553", 0x88}, {&(0x7f0000003f40)="f61e0a2860f0ad5f4494c6859704d5638f849587868e70aa9b7f79088729378e70077c2d77b0189f3eb61a343d9d3b6dc80b9f3f0a8a14ea82f32cfbede6a4c925258d152b20eaa67e8006e80fbc69f81d7f4533a9c9b7ea5c746b2e42fb764f1c244ea45b53bed38a9a8835ddb8077722458d0bae1f423a33b1443d4a42c085d75bacc374427f7b3d1e425e3fc245", 0x8f}, {&(0x7f0000004000)="f7cd087f54e07e65b11a6a682c3d39e3f6db2482c13db29914eee8d32c04a776ece78dc180d2b11862b067c403470ae3d9f415d766d6584452d6b36929eff2b9b8fd7df96b16d5aa5458427787aa0619dcc0bdabca40751f35a78b8b15663938559ec8d98fc968390419169315db76d7976cc8587b6f3da78852c8a9ba891ca32615d6336f0c54cf7c38f934038cf5ccb7825ad411c82d8ea5161923a6f55f40e1822f62886c58b3", 0xa8}], 0x3, &(0x7f0000004100)={0x48, 0x10a, 0x20, "4524822c675ac4568cd52a8f53371ef24a5d8b35905f803fa4d5cfb63876378eb6ce0512c27497087a07296e7358f6a91d26ca"}, 0x48, 0x80d0}, {&(0x7f0000004180)={0x27, 0x1, 0x1, 0x0, 0x2, 0x98, "4314b26acf06f1da965efd3d378977df037736a162fe836cd4af3ebdafbf8036f331e9f4065075f09e6278faa7c02f8c441d57ca4ce54277f99975bb090865", 0x15}, 0x60, &(0x7f0000004500)=[{&(0x7f0000004200)="94d5e347be1be91c5d8cf7bb4724dafc1ec23e58559d8b02c060ca6a7719aebc1cc7cb12fb47b70a43f21f9101d7603eb252f503c1fb3170e87142968b16af5295f18864dea2615c6bb2528de2a0e9e906fa94e7b5973de5b0e1a8c7d4e546eb0a5acef60f4ff9d6ef03e9ba7597fe8b7f0097628710e3233965c30fc4395c5645a920d30e30d68d3bf902070ff734a11e8cf7355f385a07c50999f14a68980c4e0be7bc2b6ab7d914", 0xa9}, {&(0x7f00000042c0)="6965a5f85058a02d9c3678897a227426799aeb2085c3a4df084104861028baec2a3f7ef2b1bc10c223ff15e02f3d188443107882cf81f7e371c4733d73a97addac21b412a4f775e5de72ea84e09c1a598d3a440119ca9b876d161cacf9de92370cb28c732b561396e0d30ad1ef8a909f32340b67bd", 0x75}, {&(0x7f0000004340)="71b84ef2c7c3a7d54e500ec494829e23574d1e6a736ce1124ab9d4dd371d68cbad155373e8701b49af68d76cfe5f32fe83134aece881188cc5373fb1c395c3fd20bab05378c5bc1f9e6b510f4486c90c9d98a1c280aa8c055e9badd5beef0ceb320349dc573df2b8dc7bbbb72a57714e61b346f0b1e1ef6148f1796304a7f850e8fecd673e2aaa4ef2264bde8d983e2de0ae971f33d8e7fb4b94f4f8306e4bea8b286c09e8fa6218fc49512396bd525aae0e53c7faa73034f354aef14ba8652ee8ee27e30c587de1dd46d46e7f08b8359f5cf15fe3c3ed536d7851230c5413a5765730a301e8976f1104f750bb9c5e", 0xef}, {&(0x7f0000004440)="2ace17c9e48311a31089b063df8a75e44a40735188130b06e44a256d5d152664e938e6cd141dc6ecb387be3c42cdaf9b6b7535bf52248a44534a984125cdcef0a506c8e79ad7fafe126b42e1a7f11a6c30a879e03c60b0a0345d7402ee199aabbd71b3432f34394d286ed70f99c45354a2e5b49f3b8ddcbeda5f27b4f2cde76473324e9ad37ecf8cce51a8b3bb50f1c210b1a3046ed20231da805e998fade725e47d49e7f17e33391156385c8e4e7dda84", 0xb1}], 0x4, &(0x7f0000004540)=ANY=[], 0x0, 0x40}, {&(0x7f0000004680)={0x27, 0x0, 0x2, 0x2, 0x6, 0xeb, "70b15ff832a58afa757593c5c434aa341797f53cee9454e1bcb893a591377769ded64e85ecad0aa110c8980dd948f7c9a5288e0b5a5b21bb3a66ba2a76062b", 0x32}, 0x60, &(0x7f00000007c0)=[{&(0x7f0000004700)="f1b26dd0d3fb6cb313f8f208bc84", 0xe}, {&(0x7f0000004740)="cbf88621cfb41839909f0cac92da9778703e2134a9bf2be4561f010874a627450eb9b468c9df304b9a1021", 0x2b}, {&(0x7f0000004540)="d9f34faf371cef074f0a4e0949330ae4548f803024d5e6af2cb8f7198ba23eb5bea84645b0ed33b5c6351487055f03ed4dc56af369e1a01026c1c848a3dc0a16404e562938df6d8c4ce6e23c5daae4137f4cb7fd136ff40d9e978f025f49061455beb437fb5d232461c458048e04f3cdbdeb22faf39a69f1c6303b7bbcdd474705bd332acaaafaa573b73a4d6342848145dc1c2b19c136779513a071253ce5fc271386"}], 0x2, &(0x7f00000047c0)={0x18, 0x102, 0x696, "2d5e591e18c4bb"}, 0x18, 0xc800}, {&(0x7f0000004800)={0x27, 0x7, 0x0, 0x3, 0x71, 0x7f, "1c41d43e9f58a0043b315c25092da0723a3fdd12f41f6576c7bc81890451a46c3dfeb0d2a0469357d39a6749779a3fb7df3572705fb97da98ff7b524821851"}, 0x60, &(0x7f0000005d80)=[{&(0x7f0000004880)="f41b0916287600eb8d3d4b07108016bd9a857233e2cf0b220468e19b947c25ee6676b04fe065faf2ee72cbc644af1395ec30926832d05a3ffe2447715652e79f5a771dc3b629661c6c6f8168f14761d1e8d95b266c2baa311bb92e42b686591b049744bac92808d3336184db588b7d49b1851ed8a3c0e15d56e2c7a66b773089e33d4787400efe2cd349af28f8b2661903e5fd0ab75b69904d051b54827dadcaf845ef841a0b100711691c3742392e2825", 0xb1}, {&(0x7f0000004940)="cb64f337d59125e190f0eab4163158deb2fddc2f9b6192640d1afaaa3e88baefbf87efcfe5949967da2d419f56e857f284af4ce41dd613f8b7d53fa41a04233ac7db6b3d10942ee8f433641db5d3e1138da40dab3c0b29b48c126405f4fa219900aebe56c88fa677ee2f1d1bee49a7642b22eeea870a1be570d9c8c9d1c8dc97f2ee76c4e02d79beda152460059e8f8a9bd75a55b474b80d358afd1bb6f26c5ab14a7e47d8250327fa28becbb0bf27e0121a364b41e3523b1bfe7e23c12d2550152449c40e991caf525fb7b02cd98bc63c1642c3c802d2d6971de5015cdeaafb9a3901", 0xe3}, {&(0x7f0000004a40)="9b9f54c3aaed3bd399164347fa763cdfdfb2cdf2bccefea1051b68702b1210850f437c51f3e290eedb922e667515d97772124d9f559c24d14ee3542c05098ef580aa28c93c7ffc88019a59f756c0c819d77cf358133675", 0x57}, {&(0x7f0000004ac0)="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", 0x1000}, {&(0x7f0000005ac0)="2e6bd86b2c03c5bf77cf0d1162e0d92f3c3847916ca930190d64c3fc09b0b7f92e587c0fab4948ec9652c653ff655621663526ac4c4c1b979dca9a974086b989be019c820ff587a5fd412a0196598cb71e31f503849a606aca2181fa727b48dece097d743560dd35ed6a0405be16d3f8fa8cb732c30e9c97a2c07f559e22d5e57eabeaec1d2d58ad6ba33aa0da7d0e3cebbd78a2c0b21f18cb7ed52ae132d467872d65deaaa9c4bfbee03868149a769ff2e35fb656971352568668d076ebca390a1adfb434f6cf536d16f7f496e4ef4ed5f9638a162dd08eb03b7ac19132935c9c9259", 0xe3}, {&(0x7f0000005bc0)="f746c7b1cd4602c55d4e0e5a5a73e575329ee48d669458d43a2952ed402c4252d744ff84d7a00d4779831bdf99a239412530725795898e970b71ad9ae2004969082d376cb1ac0034fe2b30c929755d7d472be794bff66cde1cdb4cefcdd4b626e3486fcaa26e9bb885cffee3a3f883dd92509dbf57697e9f8dca883a63903f0e8adbf917fae1509ce09f7b982cb96407b79fd4d9937e5f65d80f607cca0bd2097b69f511b290c3b6ff369e66bb8b6cba6517779339", 0xb5}, {&(0x7f0000005c80)="711d3ea454ff5cdc2761ab7a6caec6df1343cbf8631593adba3839b1b5fa7c61c940e82d8d73fed72e55b7a83476e14a41b8aa7d2a712105fba412a558ae76ff510a5e1becf77efa8e69195d2b2b3c9b35297fa014040ee3b84a88aa5f", 0x5d}, {&(0x7f0000005d00)="8901f4d46301184578", 0x9}, {&(0x7f0000005d40)="995b4a7791de60545e9a44fc8e60588f", 0x10}], 0x9, &(0x7f0000005e40)={0x1010, 0x10b, 0x7fffffff, "40e18b00dd0dbe7519ef8ddcf31a6525ebfb28b4dd1a8c5ec3938a457309ac5bdb0f775e3f65334ebaf41ceda19cb33bd64ecffb489c0920abd0ba4a58cfc903d0cbd03a70289740bd14039207960ef7f7a7d802acf44df19b2c93e3b5863f4586291757eea0183490a8f3177d40be373ae8ca81f4606359a194cfe931158f4e34a8d89abc47f1822d75de290ebee24c496c997670e3a7a33db77311505ac4cda05f51819b6fd11536fed399b730c064956a479f7ab367484c45322b843b3dc8d7bdaca99e135ae7ef870c5d1103bc57e57fbfadd2a3772bc11374d576a87be4548ab9992b98ceaa00e10f4714b09bf8400993911450fc77508324dfb8c82038dd01410875e65bacf298b06fd3b055a46e40ca40f723d46f4260f252394129c07f5ee09de67bff1ac457eb5e7f9c5b999c0852c9358464b8255a01636624b793d479881121780f61b5345e5256c97c64e6d01539429e6004f16914389132c6d7206c05564ad8dbe2b1929871ff91d32e135bdf3e3b370fe3d7fe44ab9c4c3fa2db326ba81345fd22b00b136f76fc9ec9b2c4e8e7249841097c0fc57b0aad397a7803d0a02d10b88037bb17d8e95fba4197ab325afd0564e2c8c7c28a99eece261f21d70204912afa81dbeb8f9ca27ae21dd61989d1ffbfd4549d4eec7155ceb4bbfa126d670bdc28e0bb90d69fb791a872c78991c8814f77df76c35a89cd5b1922b22a988cb862a1cffef92331c3263b25d47f3c96deffb9d71dd54ba4fd30f5b9734eadf842ac7fcf7e60fcdb3a35fd23817725160b130fb320a263f05dfdaff7364c4e5896dcf44720237baea69d2ebeaf1edfbc92f0e67ff275b20a68debd4671d0f247011379f47f450852f658b1d34821e270d6369f753cd70b7aabedae3e8ab91fa46f85c9d7f3ebe547508816f0ab2eb4451d65a9f26b566b3f40006e9582fe580fbcd8fe1d80a2cd1118a5302251067d957b0153adca9fcc5e28a5416aaf0320fa1539f48bbbde3fcb5826090feaa2cc6268eacc8e51c51ca52cf0ae8af671d6d1c281ed4933c75caa53a21721547083500fae19e053cde03064843108c349240099978575b30f7a8a4a31f1836951a44cf301aee601297e5f6e8cfdf8d27d1e50f0c6ee40e47be74f60551574782121506f6d6d934353d6a5571f8987dd1aa3bee4b513f1c267b7148b563db98bc7609f540e2d786b00db43cfdf7a2f00b794c5183fe27f2f6148625f0d4cfd10b1c8161c7156dae7d27f497bb7d810b4e6085e6ff1fbf7619b56a8d54489b79054efa30928aa24d9575209ffe45c8f78bd4f2d557e1bde50bdac34bca5e63faabc41f66fc0ca6832b83300d8f0c69d27a75056715eb3e5463b9e5e3157b89d49ed3f570af811f3cf667b8b0afa013c7a93b611608a9bd8a2c13c1944f6a37373dd956e12ccfefd0faed10ae4cd1a1bf2f59e930890e5d5f72bb740eba51bdd3a1d462a657c5f4d373da969597151125b6c563676ed828ad191c620d951a9d4125b4e1d10c51a8c8fd0ec3c1d15100f86e6892d2d984e292319f28e36009151106fe2240d5b948ab41cf18470a478efe324541901f6dd2b728f319e690a044faf3d4e73c5d21700547b05469255c6bf4cbeaa0bc39c40d43ae3adb97f78db5988dafc13717fa41b99c58bb3a5853cc003dfad8680fd6fcb475405f9a72da20cae587ae21d3bfe0e5303c8151279eb570f9d03430ae9b449ad3b0b2a588ac40fbe0a17278d10d4efbc52b54a4be09543576992aeddd4d004deb4adcc1420eaad6a2fd9d377097c062e0d007d1ab28c2572cbed514711ea7e9fdcbfe9af15f06c216f8a1a955c3db074c38ae0e62c0fcbe05b185c635a071b2b7709018f62803cb527cebe21437cd450ee37f31188dca045e92d119efd0f4d53eb7b3fde353764800a3798dc4778a1f7044a56126808549b356f7cbb93d1479a2fa73bb66128e2418870481ab0dddf55f0eea02a6703d7cccd8d3f39b413fc7b3cca669ba8c93fe06e0f1a79312f8428118905d90900b8742b98e1c88570678351d91609e33ec887647e0294ad75dbcc2397d4d8225da2c4421e922200ba2e6f9c6528225f77fc09d8b420b461c39c1b2c8486e1309a78f5c66887188807368a13fa8b8fd4972698470c9bd687f8a95c31beadb071b0636aba5c2e5193e8cdc4db42bc2200f137e1b3c25c1212791d37d3dc98da76b2171371c6fb79484283eb1322bc379eca59b91fb32355754dd781a70213fb919ffbcf6c392e48bd1b1e958c087beab4fb4f7eda583fde9cfb1efc24f65f0df95029591f9d4029c21c6fcdae4535fc2e464272e25fd5f91be00985439801ac0774844f97bfe7369d3baf711c11c8f1d43b16331bea9e055440a2cc6778e87cacb85025699b3db3c75b529e1a9fbf056a5a1127574fa53d5d10258475d54aba82d322ecdc7d80f871d9e76afdc201dfdd710de013b6e36439000fa975e2f87de81ec4bbb3e378bcf535fe7fc9e603ffbc8a2252f2d9da07bca4a1fb15c7a011cc949b0545cd8c98455340fd622a66da527d5ebce49d7a6a4fa13bd08cf155350e5801d4e5f7cd45c65b275842fd35229e8571222a98530c4d38fed5a05d6d9dcde121c24bce90f7267a2c8b2f731734e63e092aa93fb038c5c44a2c9509222e76da6d1b6b2c9f51c81b9afabb0ea674fd657199e439329c67729133588e2b610bf9269e8b3ec32f01360c808e4427642d432aac1d55e12ab2718b9da80f2350cd7480ff602c899c14a2948e48a7571eb310385a5c0277842b685257e871b2280dbff54797d40b380ea4aa542bb18cabe36514ab5d249830d6512ed8599dec68e3b43eda6d53f09878367b4b74db7ea04628ff32cbce5ca9eb795e0f08cebf0cff75fe4eead3a25f772328f2d52bd1844f941cff8348613a0e201f639537028938f542a1da76bf7a247d10d736b413b4ac0b62d98906ab2e08627753dcc8df66bc177b378ab2b0db1383c212d02ced4234f37a68cee6a418efcfd65d4adc2388e44aa8c387d79143209388266e522c231fadbc21dec73eb1cae5526dd753e91c271578e35fdfb37bdeeb5da45614c6c92b64b34651ae94397dd8b7b383a240b803281396e54c9e9e46d10717a623fad84b1df25b58a00a2697339eb984a7b5506edc6a58f89c2b3aa19b36009c1d6ee06e5032d8a76ccd2619172aeeec2c5d932067b4ac6b445a356b85c24aea218fc1a3fae75ac50c5844d91a02e3c45d572a58974d69ce088124053e1779afc8d42a67119d569d9010ff6f9da79dc71fe653587281f87d0441d313f68b1d259616e0fb46d55657bedbf97a342785ba2e32fcd370c616bd01c2a16406e2413ae0c89bf0df696e1165b96d7fb47fd8d9713db9d7d0f8c0355b7fea6b2fcd3888b0b7760543068c610142e1e55c641517c4873b7c2182a118ab0d040df13d956b0c7687a29838a37cb2ec00b3ddc1fe02c3b193ab4d27fe15e1a5bab3a964e7269ad626f60c53bcd69684636391fd9d21c85170b2b9385e87f7f1d342312e5ac72a1cb3b6e0754e922b3993ac32cf8e8fc77f79da95eebd166b9cce5c2597b83313918bd74a13d2014c6f0da7f6236a5a0d725d3624f947874fa86de76da84b8b1b7b0b3b91f2aa6c468cad8c5795ffeb61f1e1e95d58342aa8c81fa41af1d34e53cbc9b96c1ede1d1534172441cee4bb12fefa94392043a94756532ff57f9c6039cf7924d3a391e419abae1ac216eb10f9edc811ef2d5441b4c43191a8a65504aaf58d4ef3cf7c0896968d0b8b93626f8b3af06c48e4e003207b675ff5349aca2b783446dffa0ba7c4da156785451a5d4a72339e1ed0c3562d8eff8476ef912af005e68725b5f6e5b9fa958a8907aec44a22bb709fd0db9467daa5f7ecb76cef4eec711e6eda1625c5a9bbb8959f05aeb04743c92fc4d52e45a6177e09d725a35591abde8ddc3f6caba419a614d81b5b73cc94b4ebe0f81e9febb5dfaf0ec98e54e5be7a298051e792763fa185272cf3406beae7a6e9ea4697802d48c358311d59425f321b3500a1f7cfe236cf08dd00ace7eb306e198922774ba09de68cb9064ad3a2f47b93e64f028c306e32d943f9b8642810723c719a653db0ed313bc6b3e42355d9ae45cbe452b434ce39456e75eafe4dffcfec4d804a6aa98396a8b8f9866b3536419e3c9edf1af59b867aeec9fc274ca50df5b80c6a653f1c4ac77ffb25e66312088ce2280f9a0eb4044ec90368aadcb67fe5eb5164a466c458c28f5f7bc028ff762b31dcd748bf015b01ce3077896992a010f3c233cab7acf62a0b112438eadc01d240871a4559f53f08dae954e93cf9058cf121116657c20bfcffb53299c3a108a8b68fa3034e46dd4c3092e0c59877b3870749d965b871cfe0ee570ff322cb5df57b15802a2c601851e8f99dd21df520d94c6b3dc62b07ce873bf19137bf3544401ad59185f396c051e6c779a80ac7eec31b36f870739d167d645f74c3a0b9021ca8b72612ca0783312728a5c60db232e37074ad71584ebf0c93c240b4b7ba1eae0963b5628eeb527b64cbf780ff6f57854784f53349eb1b22db2899754c1f499fd9d1b7197f023335d779e8eef752405ccd96ec402bb65a595273f8f5f8d086fcee82e8f2aff157bb321a996b2c70e4572f52573ea7b435f6ccf9a9accf488dacb8b79d49323df21087558357d708acc4286d151acacfe5d132caef3b7062affb71ab1ba6f1e1cab9c049d7ee096271e33d1e6a48fa3afd493c7e7e52e30652caadcdf3941e4d11d48e9f9f53bd518f3223c1bb97a936373ef43e8a48b1aad16045f70f576d40e0e9e3aebe25ecaa163c5ebac14765a2a589e03bac372233473fabadac3711f9c44370a4cb5fab46a2ec634038545b8d60b54f806a05f829e7328468438fa827579d0c40aa2be525d3a7d081ae55ff75770c81ae9f9a757b023dd54a1025a17cc55f1c948cc185bf5bba393f0f6806b13ef9e9bc9d3dc7a5980c40204a210f65fbc9ce3d7146f5c8bcd47d38ec9175469a10b4b885cea26e0f20f60e6c4dd92e2f24c0c821f552dc3d45b9221ddc657d04710bad3ce66adf948eec380823cece1eaed49a75cbf2f0489a4dd64f826b49a45a183b0900ed808ea3bf1466294a563ccc7ab307e7e48417458ce098aa4114771ce6b3d88930be24d0ba3e06158de83e12274927c742b637c382575e671a783cdf9e154881c6f453cdcc01be0f8e42efd61bc00045afd6ba4f89841264a9e1dab39b8098ed2a083b1e02e36b64b574df48aeec5288fa1902339dc22e6f9676af938f9e7869612966ee7d6207a2ecbfc75ed3fa57a961633e1d74ceba84c3b8f929be90582c7a88db04726052da6f89e365218e82abf0fa880981ed91a36fcf718f8b0ff129001377c537329b7a7dc8c1fedbac39853df9f457a4eb42b639f5500b4c593e6e149b7b1717713c9cde99b2dbebf49c3339ab3c6224d97934d929277021cc906e9c79ed361d35c8ff73c304d674b2a73571d1d7bdf517520ede804c08c52460d72f7230cffd2929cae83325ff72690aaf92dc834d3ed059d1e572b971dc1685982af1b2a86e9efe4f49e431fc28760352e338d790eb364ab84a8c8c2c549a12e44b01a0671c7c1930b1bab568533bd4553eba3b5fdfbd7b149becb2d38739350432cc7a482bad199bb0765f92424dc464147866c4a83eaa6c449249a79a80327adca8a3eacb2005cc7e88fb6ace89f003731d743f45aab4ad68d03e32e58c937bd4d82c0d71c57d39cac76c7ecf363bd64fd4bb"}, 0x1010, 0x81}], 0xa, 0x44880) r7 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x20000, 0x0) getsockname$netrom(r8, &(0x7f0000000100)={{0x3, @bcast}, [@remote, @remote, @null, @netrom, @default, @default, @rose, @netrom]}, &(0x7f0000000080)=0x48) r9 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) 19:47:14 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) dup(r3) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) r7 = dup(r0) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, r9) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) 19:47:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r9) flistxattr(r9, &(0x7f0000000280)=""/202, 0xca) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) getcwd(&(0x7f0000000380)=""/254, 0xfe) 19:47:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCGSOFTCAR(r8, 0x5419, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, 0x0, 0x0) r9 = getpgrp(0x0) ioctl$TIOCSPGRP(r5, 0x5410, &(0x7f0000000100)=r9) r10 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:14 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$binfmt_aout(r0, &(0x7f0000000280)={{0x108, 0x4, 0x40, 0x3c4, 0x263, 0xfffffffe, 0x3ad}, "80ec20022b9862fd3acef8d6caf38f2847d8c2802668137711f060f650d2420276b97880300d68c7f4ef47343d1f099103ea0eec98ea1f4e93824b021c53771d46feca2f939766b950ea86310a92fe3452a4871940155582c6f3258b0d6e57afdbc9611078980474a27dfb467b2448e5afa9475afb9723d0131f4c11b738063017cbc49d69388062b9a36b237ed870429993dc774fe7c9ced38f737f0c2c8643ab24882a697b83b45be0ebe84bc0d32ae7ce9fcc2878bbd768975a397a85", [[]]}, 0x1de) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) 19:47:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) r7 = accept(r6, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_getrule={0x1c, 0x22, 0x400, 0x70bd2c, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x1, 0x6, 0x0, 0x0, 0x3, 0x10004}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) 19:47:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000080)={0x0, 0x80000, r8}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = inotify_init() write$binfmt_script(r8, &(0x7f0000000280)={'#! ', './file0', [{0x20, ',^%'}, {0x20, '*'}, {0x20, '/dev/dri/card#\x00'}, {0x20, 'em1eth0'}, {0x20, '&[@'}, {0x20, '/dev/ion\x00'}, {0x20, '/dev/dri/card#\x00'}, {0x20, '/dev/ion\x00'}, {0x20, 'self'}], 0xa, "077c3c6d0baef24783be2c4337da283cf9eae53dbbe8be349d54b916b60414320396bc501e7600c9bbe280f27cd557a2d82bb5d096f8a62df0f2665f32c454751e3839083d745493a690a985cd2cc426d8daff091993ccbba0877fab77c99856de89bb060e3e158ad3c4238ea57eb421c55f446de4da323381b4ccd9ead743556d450f948bf5ebece6272f22a6e479bdfbd760763e3a13993771b830878a917e766f4ec8256c2adb4b99c06ea8904e43efdec905eb9532fbd4f184992b5cc854a6201c4a6c2c17df589434d2c91166d19ff0f06726f7244e41049d1caa6354d005dee0"}, 0x139) r9 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x20000, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f0000000100)={r2, 0x9}) r3 = dup(r1) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7fffffff, 0x40) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) 19:47:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$BLKROGET(r10, 0x125e, &(0x7f0000000080)) 19:47:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000280)=""/172, 0xac}, &(0x7f00000001c0), 0x40}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1a8c1, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000100)=0x8) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r8 = dup(r7) r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) 19:47:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000280)=""/172, 0xac}, &(0x7f00000001c0), 0x40}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1a8c1, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000100)=0x8) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r8 = dup(r7) r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) 19:47:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000280)=""/172, 0xac}, &(0x7f00000001c0), 0x40}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1a8c1, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000100)=0x8) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r8 = dup(r7) r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) 19:47:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000280)=""/172, 0xac}, &(0x7f00000001c0), 0x40}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1a8c1, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000100)=0x8) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) dup(r7) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) 19:47:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000280)=""/172, 0xac}, &(0x7f00000001c0), 0x40}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1a8c1, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000100)=0x8) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) dup(r7) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r9) 19:47:15 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000280)=""/172, 0xac}, &(0x7f00000001c0), 0x40}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1a8c1, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000100)=0x8) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) dup(r7) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) 19:47:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000280)=""/172, 0xac}, &(0x7f00000001c0), 0x40}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1a8c1, 0x0) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000100)=0x8) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) dup(r7) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) 19:47:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000280)=""/172, 0xac}, &(0x7f00000001c0), 0x40}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1, 0xffffffffffffffff}) dup(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1a8c1, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000100)=0x8) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) dup(r6) syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) 19:47:16 executing program 3: write$P9_RSTAT(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000180)={r0, 0x9, 0x4, 0x100, 0x1, 0x1ad, 0xb94f, 0x7, 0x0, 0x7ff, 0x3, 0x20}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000080)={r0, 0x8001, 0x40, 0x10000, 0x1f, 0x9, 0x768, 0x4c8, 0x4175, 0xa9dc, 0x35c, 0x9}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r8}) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:47:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000280)=""/172, 0xac}, &(0x7f00000001c0), 0x40}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1, 0xffffffffffffffff}) dup(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1a8c1, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000100)=0x8) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) dup(r6) 19:47:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000280)=""/172, 0xac}, &(0x7f00000001c0), 0x40}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1, 0xffffffffffffffff}) dup(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1a8c1, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000100)=0x8) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x100, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:47:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000280)=""/172, 0xac}, &(0x7f00000001c0), 0x40}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1, 0xffffffffffffffff}) dup(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1a8c1, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000100)=0x8) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x100, 0x0) 19:47:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000280)=""/172, 0xac}, &(0x7f00000001c0), 0x40}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1, 0xffffffffffffffff}) dup(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1a8c1, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000100)=0x8) 19:47:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000280)=""/172, 0xac}, &(0x7f00000001c0), 0x40}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1, 0xffffffffffffffff}) dup(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1a8c1, 0x0) 19:47:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000280)=""/172, 0xac}, &(0x7f00000001c0), 0x40}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1, 0xffffffffffffffff}) dup(r3) 19:47:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000280)=""/172, 0xac}, &(0x7f00000001c0), 0x40}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000003c0)=0x5, 0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x7) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000001c0)={0x1, 0x2, 0x1000, 0xa3, &(0x7f0000000080)="a2f16d806abbf615142a6844697cbec76014bbf4ba54cdf2a556f3b77a14c8935de26463642bc6fdf6bed20abbd20b0b2dfae6c94fc5b772a5fe7fedaa50b1bb55a91784a3b32770cc17c289e500b79aabeaf94e394af166851683c8790c6f715dd1dfa79d336d85fb7d3fb4c814c0ebd7d1f4827776a7ec9e7e88bb4fb5bd6bdc06b1a655050f87ae0932146e5ef42da107be73c7c9577ee4396fb2b30b73a1696391", 0x95, 0x0, &(0x7f0000000280)="e67cebfa13c42d46d576d24fdacba8fe7a2cb16db678966bb19902d0158c28382627d9a047e1114eb8acdbe4596013c7da33373b16895d23da884467b66193e301c83ca96fb60b8c22228e45908fe3244af618fc41053f49d119d234a9286450046995c33c8588a2f8160797c04efbcd0fadf1e8d7d414faba4aff767a3c801a44291801e3c9e34a63aa5866acc474188b8f32860a"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000340)={0xffffffc0, 0x0, 0xf13e, {0x101, 0xffff8001}, 0x0, 0x5ff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000000)={0x3, 0x27}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001480)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r8, 0x301}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r8, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc4f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xc76e}]}, 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x20008080) 19:47:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) 19:47:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x800) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080)) 19:47:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f00000000c0)={0x1, 0x1000, {0x53, 0x7fff, 0x40, {0x9, 0x4}, {0x101}, @period={0x58, 0x2, 0x2, 0x9, 0x6, {0x0, 0x2, 0x4, 0x5}, 0x5, &(0x7f0000000040)=[0x49, 0x7f, 0x2c, 0x7fff, 0x200]}}, {0x52, 0x8001, 0x0, {0x7, 0x8}, {0x1, 0x5}, @rumble={0x9, 0xf854}}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000080)={0x5, 0x2b, 0x0, r6}) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x66, 0x600c00) 19:47:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:17 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) setsockopt$inet_group_source_req(r8, 0x0, 0x2c, &(0x7f0000000280)={0x80000001, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}}}, 0x108) r9 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:18 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x7fffffff, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) dup(0xffffffffffffffff) 19:47:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:18 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x80003, 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0xd9, &(0x7f00000011c0), 0x7}}], 0x4000000000000ce, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000080)) 19:47:18 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:18 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:18 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x801, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6f68fde88b5084ff0010eefffa0000004029588171101000720155fd36f2b8209b0c404fa5691030ebf51c8e00ff030100029fbd6cc1afd19be875cff009d165acb292ec02cc7ce49ad1f723d04afe57d7d5f178a93d329a0706108be82f6e671ade4b81e4a1ba747d5f91cbbc1801125bd837e86ab69979522a7e0aaa4892f580149e255d123528a1cf3a62eec0fb026884487427ddcf49ee9c93cb59ae305bfeeb6887e05345dda12681ac808de1502ebfcd7ec2de64464085ad352ce82c178da12c17a6c11308392559ab758a7dedab5e50aee33084975741bf1699122d61362065df282d9ed63c86"], 0x47) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) syz_open_procfs(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) dup(0xffffffffffffffff) getsockname$unix(0xffffffffffffffff, &(0x7f0000000040), 0x0) 19:47:18 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:18 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:18 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:18 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x513a, 0x8c}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x8}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0xfffffdf6) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x5, 0x48, 0x0, 0x80000001, 0x1fc0000000000, 0xffffffffffffffff, 0x10000, 0x6, 0x8}, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6(0xa, 0x20000000080002, 0x88) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="e400000000fcd9ed1387290c7900"}, 0x1c) socket$inet6(0xa, 0x0, 0x0) 19:47:18 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:18 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:18 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:19 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:19 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:19 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:19 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:19 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:19 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000100)=0x0) rt_tgsigqueueinfo(0x0, r5, 0x13, &(0x7f00000001c0)={0x28, 0x9}) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r11}) 19:47:19 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:19 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:19 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000100)=0x0) rt_tgsigqueueinfo(0x0, r5, 0x13, &(0x7f00000001c0)={0x28, 0x9}) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000080)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r11}) 19:47:19 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:19 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5afbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05752981", @ANYRES32=0x0, @ANYBLOB="b3ef461584d1f8f0"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r10}}, 0x20}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@newtclass={0x34, 0x28, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x10}, {0xb, 0x8}, {0xa, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0xfd}}, @TCA_RATE={0x6, 0x5, {0x9, 0xc4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x401}, 0x800) ioctl$SOUND_MIXER_WRITE_VOLUME(r8, 0xc0044d04, &(0x7f0000000080)=0x1c) 19:47:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:20 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="310000000000020000000000000000153d83bb1cde86864f9e4000ca007709e641500700000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x113) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000000)=""/91, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_GETXATTR(r2, &(0x7f0000000180)={0x18, 0x0, 0x3, {0xffffffff}}, 0x18) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 557.475846] mmap: syz-executor.3 (23889) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 19:47:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:20 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:20 executing program 3: syz_mount_image$xfs(&(0x7f00000001c0)='xfs\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6c6f67627566733d30303030303030303030303030303030303030332c0035562d41a0c162942360fc5e1ee481d106cd4a1b6bb4f7cc4c2046ffa5f34c7540b78ad938830a877d810007f7e72c585b26beed8cacc0089024b1003fc644774f012361e79b9f65537ff7a9518a16964a7fd4e1533f64d0a9ef438c3e5e2dac14fcebb992202463d76c5a9b1ef8757ed1f75d84519b8592bb29b54c19b961ff05e5d6b396868d2a06b409eb32dcd2bc521a44b8a5ae82edd2767c7051"]) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x2002, 0x0) 19:47:20 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:20 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 557.986628] XFS (loop3): Invalid superblock magic number 19:47:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 558.116484] XFS (loop3): Invalid superblock magic number 19:47:20 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 19:47:20 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ttyS3\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, r2, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000100)={{0x6, 0x2, 0x3, 0xba, 'syz0\x00', 0xfffffffd}, 0x2, 0x30, 0x200, r2, 0x0, 0x8, 'syz0\x00', &(0x7f0000000040), 0x0, [], [0x800, 0x3f, 0x4, 0x8e]}) ioctl$TCSETX(r0, 0x5433, &(0x7f0000001540)) 19:47:21 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x2b, 0x1}) 19:47:21 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001500)='/dev/ttyS3\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, r2, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000100)={{0x6, 0x2, 0x3, 0xba, 'syz0\x00', 0xfffffffd}, 0x2, 0x30, 0x200, r2, 0x0, 0x8, 'syz0\x00', &(0x7f0000000040), 0x0, [], [0x800, 0x3f, 0x4, 0x8e]}) ioctl$TCSETX(r0, 0x5433, &(0x7f0000001540)) 19:47:21 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x2b, 0x1}) 19:47:21 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x2b, 0x1}) 19:47:21 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000000)) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='vegas\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={{0x77359400}, {r3, r4/1000+30000}}) r5 = socket$kcm(0x10, 0x2, 0x4) inotify_init1(0x80000) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="4c000000120081ae08060c0f006b10007f03e37b00000000000000ca1b4e0906a6bd7c49d8413080b41b4da456331dbf64700169a1049b5464e64d275d5c3ef0381ad6e74703c48f93b8446b", 0x4c}], 0x1}, 0x0) 19:47:21 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x0, 0x1}) 19:47:21 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x0, 0x1}) 19:47:21 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x0, 0x1}) 19:47:21 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x0, 0x1}) 19:47:21 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x0, 0x1}) 19:47:21 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x0, 0x1}) 19:47:21 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b}) 19:47:21 executing program 3: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c010000100013070000000000000000fe880000000000000000000000000001ff0100000000000000000000000000010000000000000000000000efffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000006000020063626328646573335f65646529000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000008a6042e48859d57da92f868d02677be7cd7bfdc9018db9fa1c0004000000000000000000ff010000000000000000000000000001"], 0x16c}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCADDDLCI(r2, 0x8980, &(0x7f0000000040)={'caif0\x00', 0x101}) socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0xf1, 0x0) 19:47:21 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b}) 19:47:21 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b}) 19:47:22 executing program 0 (fault-call:4 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) [ 559.402844] FAULT_INJECTION: forcing a failure. [ 559.402844] name failslab, interval 1, probability 0, space 0, times 0 [ 559.435285] CPU: 0 PID: 23999 Comm: syz-executor.0 Not tainted 4.14.174-syzkaller #0 [ 559.443219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 19:47:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VHOST_GET_VRING_ENDIAN(r4, 0x4008af14, &(0x7f0000001140)={0x1, 0x6}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000001100)={0xfffffff, 0x7, 0x1, r0, 0x0, &(0x7f0000001180)={0x990af6, 0x5, [], @ptr=0x9}}) ioctl$TIOCGSERIAL(r5, 0x541e, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/4087}) [ 559.452583] Call Trace: [ 559.455188] dump_stack+0x13e/0x194 [ 559.458914] should_fail.cold+0x10a/0x14b [ 559.463071] should_failslab+0xd6/0x130 [ 559.467049] kmem_cache_alloc_trace+0x2db/0x7b0 [ 559.471736] ion_alloc+0x16a/0x7d0 [ 559.475310] ? ion_dma_buf_release+0x40/0x40 [ 559.479750] ? __might_fault+0x177/0x1b0 [ 559.483833] ion_ioctl+0xef/0x1f8 [ 559.487293] ? ion_alloc.cold+0x3d/0x3d [ 559.491281] ? selinux_file_ioctl+0x3f7/0x560 [ 559.495784] ? ion_alloc.cold+0x3d/0x3d [ 559.499766] do_vfs_ioctl+0x75a/0xfe0 [ 559.504531] ? selinux_file_mprotect+0x5c0/0x5c0 [ 559.509300] ? ioctl_preallocate+0x1a0/0x1a0 [ 559.514332] ? security_file_ioctl+0x76/0xb0 [ 559.518755] ? security_file_ioctl+0x83/0xb0 [ 559.523259] SyS_ioctl+0x7f/0xb0 [ 559.526626] ? do_vfs_ioctl+0xfe0/0xfe0 [ 559.530621] do_syscall_64+0x1d5/0x640 [ 559.534519] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 559.539707] RIP: 0033:0x45c849 [ 559.542898] RSP: 002b:00007f95126f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:47:22 executing program 3: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r4 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x401}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff2b}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x70}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000091}, 0x8080) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000080) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x3, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$FUSE_POLL(r7, &(0x7f00000001c0)={0x18, 0x8000000000000020, 0x2, {0x1}}, 0x18) sendmmsg(r0, &(0x7f0000002cc0), 0x1a3, 0x0) [ 559.550638] RAX: ffffffffffffffda RBX: 00007f95126f26d4 RCX: 000000000045c849 [ 559.557907] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 559.565178] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 559.572468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 559.579741] R13: 0000000000000364 R14: 00000000004c5d48 R15: 0000000000000000 19:47:22 executing program 0 (fault-call:4 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) [ 559.692740] FAULT_INJECTION: forcing a failure. [ 559.692740] name failslab, interval 1, probability 0, space 0, times 0 [ 559.744429] CPU: 0 PID: 24008 Comm: syz-executor.0 Not tainted 4.14.174-syzkaller #0 [ 559.752364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.761719] Call Trace: [ 559.764321] dump_stack+0x13e/0x194 [ 559.767956] should_fail.cold+0x10a/0x14b [ 559.772112] should_failslab+0xd6/0x130 [ 559.776086] kmem_cache_alloc_trace+0x2db/0x7b0 [ 559.780762] ? ion_page_pool_remove+0x19d/0x280 [ 559.785439] ion_system_heap_allocate+0x34a/0x8d0 [ 559.790292] ? rcu_read_lock_sched_held+0x10a/0x130 [ 559.795316] ? kmem_cache_alloc_trace+0x63e/0x7b0 [ 559.800171] ? ion_system_heap_free+0x240/0x240 [ 559.804868] ion_alloc+0x1e9/0x7d0 [ 559.808421] ? ion_dma_buf_release+0x40/0x40 [ 559.812840] ? __might_fault+0x177/0x1b0 [ 559.816906] ion_ioctl+0xef/0x1f8 [ 559.820373] ? ion_alloc.cold+0x3d/0x3d [ 559.824350] ? selinux_file_ioctl+0x3f7/0x560 [ 559.828849] ? ion_alloc.cold+0x3d/0x3d [ 559.832826] do_vfs_ioctl+0x75a/0xfe0 [ 559.836630] ? selinux_file_mprotect+0x5c0/0x5c0 [ 559.841389] ? ioctl_preallocate+0x1a0/0x1a0 [ 559.845810] ? security_file_ioctl+0x76/0xb0 [ 559.850219] ? security_file_ioctl+0x83/0xb0 [ 559.854650] SyS_ioctl+0x7f/0xb0 [ 559.858034] ? do_vfs_ioctl+0xfe0/0xfe0 [ 559.862015] do_syscall_64+0x1d5/0x640 [ 559.865914] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 559.871104] RIP: 0033:0x45c849 [ 559.874295] RSP: 002b:00007f95126f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 559.882005] RAX: ffffffffffffffda RBX: 00007f95126f26d4 RCX: 000000000045c849 [ 559.889276] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 559.896546] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 559.903835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 559.911106] R13: 0000000000000364 R14: 00000000004c5d48 R15: 0000000000000001 19:47:23 executing program 0 (fault-call:4 fault-nth:2): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) [ 560.547586] FAULT_INJECTION: forcing a failure. [ 560.547586] name failslab, interval 1, probability 0, space 0, times 0 [ 560.575622] CPU: 0 PID: 24014 Comm: syz-executor.0 Not tainted 4.14.174-syzkaller #0 [ 560.583536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.593024] Call Trace: [ 560.595622] dump_stack+0x13e/0x194 [ 560.599272] should_fail.cold+0x10a/0x14b [ 560.603455] should_failslab+0xd6/0x130 [ 560.607441] __kmalloc+0x2e9/0x7c0 [ 560.610994] ? sg_kmalloc+0x26/0x60 [ 560.614637] sg_kmalloc+0x26/0x60 [ 560.618107] __sg_alloc_table+0x25c/0x3a0 [ 560.622259] ? sgl_alloc+0x30/0x30 [ 560.625804] sg_alloc_table+0x36/0x230 [ 560.629703] ion_system_heap_allocate+0x36c/0x8d0 [ 560.634560] ? rcu_read_lock_sched_held+0x10a/0x130 [ 560.639669] ? ion_system_heap_free+0x240/0x240 [ 560.644350] ion_alloc+0x1e9/0x7d0 [ 560.647900] ? ion_dma_buf_release+0x40/0x40 [ 560.652319] ? __might_fault+0x177/0x1b0 [ 560.656387] ion_ioctl+0xef/0x1f8 [ 560.659848] ? ion_alloc.cold+0x3d/0x3d [ 560.663832] ? selinux_file_ioctl+0x3f7/0x560 [ 560.668332] ? ion_alloc.cold+0x3d/0x3d [ 560.672316] do_vfs_ioctl+0x75a/0xfe0 [ 560.676134] ? selinux_file_mprotect+0x5c0/0x5c0 [ 560.680930] ? ioctl_preallocate+0x1a0/0x1a0 [ 560.685360] ? security_file_ioctl+0x76/0xb0 [ 560.689775] ? security_file_ioctl+0x83/0xb0 [ 560.694190] SyS_ioctl+0x7f/0xb0 [ 560.697563] ? do_vfs_ioctl+0xfe0/0xfe0 [ 560.701565] do_syscall_64+0x1d5/0x640 [ 560.705478] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 560.710668] RIP: 0033:0x45c849 [ 560.713857] RSP: 002b:00007f95126f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.721571] RAX: ffffffffffffffda RBX: 00007f95126f26d4 RCX: 000000000045c849 [ 560.728842] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 560.736113] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 560.743384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 560.750653] R13: 0000000000000364 R14: 00000000004c5d48 R15: 0000000000000002 19:47:23 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x44182) r1 = memfd_create(&(0x7f0000000380)='.^\xc5\xe3\xe8\x02\xa7\xe4/l\xbc\xc3x\xc93\xcaS\xbb\x1a\xaa\xaf\x02fpP\xfc\xc4\xd0^Rc-\r\f\xad\xf3\xd5_;\x1b\xb1C0f\x10\xfe\xca\xa4!\xa8\x1e\x9fn\x99\xcc\xe1\xb4u@\x15o\x8c\x8c6M\xce\x80\xe9\xa6\"ils.\xc0JK\xea\xf3\x97\"f\xc7\xc4\xfc\xa1\x17h\xeb\a`\xa5\x11\x89\xd8\xf5\xfbt\xc4\x8f^2\xec\x0e\xad\xfdX\r:\xfe\x03\xbd\x1b\xd5gX\xe2\xe1\xae\xd1\xd0\xfb\xafn0\xc2w\xd7\x04t\xbe\x04\f\xa2\xb9\xd7\xb8r\xa0*\xff\x88.E', 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3da, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x9, @local}}}, 0x30) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00'}) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r2 = fcntl$getown(0xffffffffffffffff, 0x9) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x3ffc00, @ipv4={[], [], @remote}, 0x7fffffff}, 0x1c) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0xc214, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1}, 0x2, 0x7, 0x9, 0x0, 0x100000001, 0x3}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_open_procfs(r2, &(0x7f0000000000)='loginuid\x00') getpeername$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) dup(0xffffffffffffffff) 19:47:23 executing program 0 (fault-call:4 fault-nth:3): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) [ 560.962794] FAULT_INJECTION: forcing a failure. [ 560.962794] name failslab, interval 1, probability 0, space 0, times 0 [ 560.996778] CPU: 1 PID: 24021 Comm: syz-executor.0 Not tainted 4.14.174-syzkaller #0 [ 561.004696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.014054] Call Trace: [ 561.016655] dump_stack+0x13e/0x194 [ 561.020329] should_fail.cold+0x10a/0x14b [ 561.024491] should_failslab+0xd6/0x130 [ 561.028470] __kmalloc+0x2e9/0x7c0 [ 561.032013] ? dma_buf_export+0x229/0xa10 [ 561.036172] ? lock_downgrade+0x6e0/0x6e0 [ 561.040332] dma_buf_export+0x229/0xa10 [ 561.044327] ion_alloc+0x2be/0x7d0 [ 561.047881] ? ion_dma_buf_release+0x40/0x40 [ 561.052312] ? __might_fault+0x177/0x1b0 [ 561.056384] ion_ioctl+0xef/0x1f8 [ 561.059844] ? ion_alloc.cold+0x3d/0x3d [ 561.063829] ? selinux_file_ioctl+0x3f7/0x560 [ 561.068338] ? ion_alloc.cold+0x3d/0x3d [ 561.072322] do_vfs_ioctl+0x75a/0xfe0 [ 561.076143] ? selinux_file_mprotect+0x5c0/0x5c0 [ 561.080920] ? ioctl_preallocate+0x1a0/0x1a0 [ 561.085346] ? security_file_ioctl+0x76/0xb0 [ 561.089772] ? security_file_ioctl+0x83/0xb0 [ 561.094200] SyS_ioctl+0x7f/0xb0 [ 561.097575] ? do_vfs_ioctl+0xfe0/0xfe0 [ 561.101581] do_syscall_64+0x1d5/0x640 [ 561.105483] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 561.110683] RIP: 0033:0x45c849 [ 561.113881] RSP: 002b:00007f95126f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.121593] RAX: ffffffffffffffda RBX: 00007f95126f26d4 RCX: 000000000045c849 [ 561.128868] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 561.136250] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 561.143523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 561.150803] R13: 0000000000000364 R14: 00000000004c5d48 R15: 0000000000000003 19:47:23 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000480)=0x10, 0x80000) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000540)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}}}, 0x48) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000080)={0xf, 0x8, 0xfa00, {r2, 0x12}}, 0x10) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x5, 0x2b, 0x9e89a586627d2183, 0xffffffffffffffff}) r6 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003740)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000126bd7000fddbdf25070080000800050001753a6f626a6563745f723a666f6e74735f743a73300000000008000500ac14142b14000300fe8800000000000000000000000000f304000100010000000500010001002a00"], 0x6c}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=0x0, @ANYBLOB="100025bd7000fbdbdf250800000014000200ff02000000000000000000000000000114000600766c616e31000000000000000000000008000400ffffffff050001000000000014000600776731000000000000000000000000000500010001000400ac14140d2300070073797374656d5f753a6f626a6563745f723a7661725f72756e5f743a7330000008000400ac14140d0500010000000000db685d50b0f9745a"], 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) r8 = dup(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$UFFDIO_ZEROPAGE(r10, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) 19:47:24 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4000, 0x800) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x80002, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="cd8a1d62a4b5c48ee875447a6a7d3bbfec2d715f82715649c6e14d10428dee4f678831ed422581396ca1537ff4b5e697376506bd4fa4024a789e05e751963c0f9a37c6e1efd44ba01185caca8a316be98c1087028cb3d2ec16ef707a559f06fbe3e9b56238562a9f7b1d6f5104276929c0d7f71da61b6408707e55e36d0fe231cd48c36249acda"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x62682, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvme-fabrics\x00', 0x40202, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x8, 0xf, "b3054a9f76f16ee6bef145fb7671c444a7fb2b"}) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x2, 0x2d, 0x1, 0xffffffffffffffff}) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KDDELIO(r8, 0x4b35, 0x8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000300), 0x4) r9 = dup(r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) 19:47:24 executing program 0 (fault-call:4 fault-nth:4): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = dup(r8) r10 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0xffdffffffffff001, 0x626040) ioctl$void(r1, 0x5450) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000500)={0x0, 0x80000, r9}) r12 = dup(r11) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r12}) dup(0xffffffffffffffff) [ 561.456179] FAULT_INJECTION: forcing a failure. [ 561.456179] name failslab, interval 1, probability 0, space 0, times 0 [ 561.492665] CPU: 1 PID: 24041 Comm: syz-executor.0 Not tainted 4.14.174-syzkaller #0 [ 561.500609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.509971] Call Trace: [ 561.512578] dump_stack+0x13e/0x194 [ 561.516236] should_fail.cold+0x10a/0x14b [ 561.520413] should_failslab+0xd6/0x130 [ 561.524400] kmem_cache_alloc+0x2b5/0x770 [ 561.528555] ? fs_reclaim_acquire+0x10/0x10 [ 561.532897] __d_alloc+0x2a/0x9b0 [ 561.536369] anon_inode_getfile+0x101/0x2f0 [ 561.540696] ? reverse_path_check_proc.cold+0x1a/0x1a [ 561.545987] ? __lockdep_init_map+0x100/0x560 [ 561.550669] ? __lockdep_init_map+0x100/0x560 [ 561.555177] dma_buf_export+0x4e6/0xa10 [ 561.559166] ion_alloc+0x2be/0x7d0 [ 561.562718] ? ion_dma_buf_release+0x40/0x40 [ 561.567137] ? __might_fault+0x177/0x1b0 [ 561.571208] ion_ioctl+0xef/0x1f8 [ 561.574665] ? ion_alloc.cold+0x3d/0x3d [ 561.578653] ? selinux_file_ioctl+0x3f7/0x560 [ 561.583152] ? ion_alloc.cold+0x3d/0x3d [ 561.587133] do_vfs_ioctl+0x75a/0xfe0 [ 561.590935] ? selinux_file_mprotect+0x5c0/0x5c0 [ 561.595699] ? ioctl_preallocate+0x1a0/0x1a0 [ 561.600122] ? security_file_ioctl+0x76/0xb0 [ 561.604533] ? security_file_ioctl+0x83/0xb0 [ 561.608954] SyS_ioctl+0x7f/0xb0 [ 561.612329] ? do_vfs_ioctl+0xfe0/0xfe0 [ 561.616323] do_syscall_64+0x1d5/0x640 [ 561.620226] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 561.625428] RIP: 0033:0x45c849 [ 561.628626] RSP: 002b:00007f95126f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.636341] RAX: ffffffffffffffda RBX: 00007f95126f26d4 RCX: 000000000045c849 [ 561.643618] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 561.650896] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 561.658169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 561.665443] R13: 0000000000000364 R14: 00000000004c5d48 R15: 0000000000000004 19:47:24 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000140)={0x6, 0x4, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r3}) r7 = dup(r6) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x240c2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) 19:47:24 executing program 0 (fault-call:4 fault-nth:5): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:24 executing program 3: mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000580)=ANY=[]) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f00000002c0)=0xe8) setuid(r1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fffff7ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000f5254020e4be214b50f27500005c7840e7c73547a9aa0903219ff500000000000000000000000000000000000000000000fbf18a71e1f25a9d151089e3d57a4193022bb40c44c84e9a624f14137efaeb532d8a2196ef5ae271e8122caa441487e5f4e7ba8553c63d0b566a872cdc48d2a985a321c35a133344a005918258b3acc55ce08f2141641c8023b9f6f5ebf42c4ad2c212a10e80a0337cced4a28ab29e407600f5e86947dfe1d41db73dc0acd6ebf8e4213d085787b99f424481f2ea3dc11a1e8f87a703424e104abee4ef712be348c7f8407e712ca60079df4ffb1b922d5bc146e7b61d165d9b0bebf71bcecf987411d8e08f465100ee505194fad1175221474b8a00da6913bc84ba8761c3baa2f282b5628f725ad883055043b4383d0b613a73aa23e59e"]}, 0x1fe) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) dup3(r0, r2, 0x80000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f0000002600), &(0x7f0000002640)=0x28) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x20000, 0x0) ioctl$FS_IOC_FSGETXATTR(r6, 0x801c581f, &(0x7f0000000280)={0x1, 0x20, 0x7, 0x20, 0x20003ff}) lsetxattr$security_capability(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f00000000c0)=@v2={0x2000000, [{0x8}, {0xa33, 0x8000}]}, 0x14, 0x0) r7 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(0xffffffffffffffff, &(0x7f0000000180)='.//ile0\x00', r7, &(0x7f00000007c0)='./file0/f.le.\x00') [ 561.909013] FAULT_INJECTION: forcing a failure. [ 561.909013] name failslab, interval 1, probability 0, space 0, times 0 [ 561.920594] overlayfs: missing 'lowerdir' [ 561.926216] CPU: 0 PID: 24052 Comm: syz-executor.0 Not tainted 4.14.174-syzkaller #0 [ 561.934114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.943472] Call Trace: [ 561.946076] dump_stack+0x13e/0x194 [ 561.949721] should_fail.cold+0x10a/0x14b [ 561.953876] should_failslab+0xd6/0x130 [ 561.957852] kmem_cache_alloc+0x2b5/0x770 [ 561.962012] get_empty_filp+0x86/0x3e0 [ 561.965928] alloc_file+0x23/0x440 [ 561.969477] anon_inode_getfile+0x163/0x2f0 [ 561.973811] ? reverse_path_check_proc.cold+0x1a/0x1a [ 561.979024] ? __lockdep_init_map+0x100/0x560 [ 561.983533] dma_buf_export+0x4e6/0xa10 [ 561.987528] ion_alloc+0x2be/0x7d0 [ 561.991430] ? ion_dma_buf_release+0x40/0x40 [ 561.995847] ? __might_fault+0x177/0x1b0 [ 561.999916] ion_ioctl+0xef/0x1f8 [ 562.003375] ? ion_alloc.cold+0x3d/0x3d [ 562.007357] ? selinux_file_ioctl+0x3f7/0x560 [ 562.011856] ? ion_alloc.cold+0x3d/0x3d [ 562.015834] do_vfs_ioctl+0x75a/0xfe0 [ 562.019654] ? selinux_file_mprotect+0x5c0/0x5c0 [ 562.024413] ? ioctl_preallocate+0x1a0/0x1a0 [ 562.028831] ? security_file_ioctl+0x76/0xb0 [ 562.033240] ? security_file_ioctl+0x83/0xb0 [ 562.037653] SyS_ioctl+0x7f/0xb0 [ 562.041026] ? do_vfs_ioctl+0xfe0/0xfe0 [ 562.045006] do_syscall_64+0x1d5/0x640 [ 562.048918] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 562.054109] RIP: 0033:0x45c849 19:47:24 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0200fffe070000000000f286005b0830"], 0xd) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000580)=0x80000001, 0x4) recvmmsg(r1, &(0x7f0000008500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x280000, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000200)=""/11, &(0x7f0000000280)=0xb) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, r6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r3}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, 0x1407, 0x20, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c000) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000180)={0x80000, 0x0, [0x4, 0x0, 0x6, 0xffff, 0x100000001, 0xffffffff, 0xfffffffffffffffe, 0xfa46]}) r8 = dup(r7) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x303100, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) 19:47:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x20}}, 0x0) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000540)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x3}}, @hci={0x1f, 0x2, 0x2}, @can, 0xff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80000000, 0x3}) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r6, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r8, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000100)={r8, 0x5}, &(0x7f0000000200)=0x8) sendmsg$inet(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @empty}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@cipso={0x86, 0x1d, 0x6de8924e02073d1b, [{0x5, 0xd, "4dd9307e05b0b4daec5550"}, {0x0, 0xa, "91dff9b0314f1e8f"}]}, @rr={0x7, 0x13, 0x32, [@local, @broadcast, @broadcast, @remote]}, @lsrr={0x83, 0x7, 0xd9, [@loopback]}, @rr={0x7, 0x23, 0xaa, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x70, 0x3, 0x1, [{@rand_addr=0x380e, 0x5}, {@dev={0xac, 0x14, 0x14, 0x44}}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x61}}, @ip_retopts={{0x94, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xe6, 0x0, 0x1, [0x2, 0x0]}, @generic={0x89, 0x9, "9f8515283fbd43"}, @timestamp={0x44, 0x10, 0x6b, 0x0, 0x4, [0x9, 0x5, 0x3]}, @ssrr={0x89, 0x13, 0x3d, [@loopback, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0x14, 0x3c, 0x0, 0x6, [0x5, 0x10001, 0x5, 0x1]}, @end, @ra={0x94, 0x4, 0x1}, @end, @timestamp_addr={0x44, 0x2c, 0xb4, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0xfeb, 0x1}, {}, {@empty, 0x7}, {@broadcast, 0x7ff}]}]}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x15, 0x0, 0x5, [0x400, 0xfffffffb, 0xfff, 0x6, 0x608, 0x7a16]}, @rr={0x7, 0xb, 0xad, [@multicast1, @local]}]}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x1c, 0x40, 0x1, 0xe, [{@broadcast, 0x62fb76d4}, {@rand_addr=0x3, 0x7}, {@empty, 0x8}]}, @noop, @timestamp={0x44, 0xc, 0xd4, 0x0, 0x6, [0x5, 0x335]}, @timestamp={0x44, 0x14, 0x21, 0x0, 0xe, [0x10000, 0x8, 0xab3, 0x200]}, @generic={0x89, 0x6, "a707bfd6"}, @timestamp_prespec={0x44, 0x3c, 0xc8, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x38}}, {@multicast2, 0x1d5}, {@multicast2, 0xe7}, {@multicast1, 0xa510}, {@multicast2, 0x1}, {@loopback, 0xfffffff9}, {@broadcast, 0x1000}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x250}, 0x4040) r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r11 = dup(r10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r11}) dup(0xffffffffffffffff) [ 562.057296] RSP: 002b:00007f95126f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.065008] RAX: ffffffffffffffda RBX: 00007f95126f26d4 RCX: 000000000045c849 [ 562.072298] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 562.079582] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 562.086858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 562.094134] R13: 0000000000000364 R14: 00000000004c5d48 R15: 0000000000000005 19:47:24 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setns(r2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x204042) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) r7 = dup(r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) setsockopt$netrom_NETROM_T2(r7, 0x103, 0x2, &(0x7f0000000080)=0x1, 0x4) dup(0xffffffffffffffff) 19:47:24 executing program 3: socket$nl_route(0x10, 0x3, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x280082, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) unshare(0x40040400) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x141, 0x0, 0xfb2e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpid() r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000080)={0x1, "abcb390508aadfc08be70933a964fdad66049a51a448ac4020490b8b65786f57", 0x4, 0xff, 0xffff, 0x2, 0x5}) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000040)=0x2, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 19:47:25 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) dup(0xffffffffffffffff) 19:47:25 executing program 0 (fault-call:4 fault-nth:6): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:25 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000280)={0x0, 0x0, 0x1, 0x0, [], [{0x7ff, 0x1, 0x9ce0, 0x6, 0x0, 0x3}, {0xda, 0x4, 0x1, 0x8, 0x49, 0x1000000000000005}], [[]]}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000180)={0x4, 0x30}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) fsetxattr$trusted_overlay_origin(r7, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f0000000100)='y\x00', 0x2, 0x0) syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x9, 0x101040) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) r9 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) [ 562.388916] FAULT_INJECTION: forcing a failure. [ 562.388916] name failslab, interval 1, probability 0, space 0, times 0 [ 562.415454] IPVS: ftp: loaded support on port[0] = 21 [ 562.420136] CPU: 0 PID: 24076 Comm: syz-executor.0 Not tainted 4.14.174-syzkaller #0 [ 562.428589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.437952] Call Trace: [ 562.440552] dump_stack+0x13e/0x194 [ 562.444219] should_fail.cold+0x10a/0x14b [ 562.448404] should_failslab+0xd6/0x130 [ 562.452390] kmem_cache_alloc+0x2b5/0x770 [ 562.456546] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 562.462015] ? rcu_read_lock_sched_held+0x10a/0x130 [ 562.467044] selinux_file_alloc_security+0xaf/0x190 [ 562.472242] security_file_alloc+0x66/0xa0 [ 562.476485] ? selinux_is_enabled+0x5/0x50 [ 562.480724] get_empty_filp+0x15c/0x3e0 [ 562.484742] alloc_file+0x23/0x440 [ 562.488299] anon_inode_getfile+0x163/0x2f0 [ 562.492672] ? reverse_path_check_proc.cold+0x1a/0x1a [ 562.497871] ? __lockdep_init_map+0x100/0x560 [ 562.502379] dma_buf_export+0x4e6/0xa10 [ 562.506362] ion_alloc+0x2be/0x7d0 [ 562.509906] ? ion_dma_buf_release+0x40/0x40 [ 562.514319] ? __might_fault+0x177/0x1b0 [ 562.518386] ion_ioctl+0xef/0x1f8 [ 562.521842] ? ion_alloc.cold+0x3d/0x3d [ 562.525819] ? selinux_file_ioctl+0x3f7/0x560 [ 562.530312] ? ion_alloc.cold+0x3d/0x3d [ 562.534291] do_vfs_ioctl+0x75a/0xfe0 [ 562.538100] ? selinux_file_mprotect+0x5c0/0x5c0 [ 562.542855] ? ioctl_preallocate+0x1a0/0x1a0 [ 562.547271] ? security_file_ioctl+0x76/0xb0 [ 562.551685] ? security_file_ioctl+0x83/0xb0 [ 562.556104] SyS_ioctl+0x7f/0xb0 [ 562.559481] ? do_vfs_ioctl+0xfe0/0xfe0 [ 562.563466] do_syscall_64+0x1d5/0x640 [ 562.567375] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 562.572566] RIP: 0033:0x45c849 [ 562.575757] RSP: 002b:00007f95126f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 19:47:25 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r2, &(0x7f0000000280)}, 0x20) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) r7 = dup(r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r8, 0x400, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x13, 0x1, '/dev/dri/card#\x00'}, @NLBL_MGMT_A_DOMAIN={0x1d, 0x1, '\\vboxnet1)wlan1-procppp0\x00'}, @NLBL_MGMT_A_DOMAIN={0x13, 0x1, '/dev/dri/card#\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000011}, 0x40008084) dup(0xffffffffffffffff) 19:47:25 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair(0x25, 0x800, 0x10000, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x74, 0x5, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x10000011}, 0x800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r3 = dup(r2) r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r3}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000f9ffffff00000000000040000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000deee57c541584600000000000000000000000000000000000000000000000000000000000000000004ff"]}, 0x108) r7 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r8) dup3(r7, r8, 0x0) r9 = dup(r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) [ 562.583469] RAX: ffffffffffffffda RBX: 00007f95126f26d4 RCX: 000000000045c849 [ 562.590749] RDX: 0000000020000040 RSI: 00000000c0184900 RDI: 0000000000000003 [ 562.598024] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 562.605304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 562.612581] R13: 0000000000000364 R14: 00000000004c5d48 R15: 0000000000000006 19:47:25 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x80000, r6}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x4801c0, 0x0) 19:47:25 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x22400, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x2, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) getsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100), 0x10) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) 19:47:25 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000100)=""/228, &(0x7f0000000080)=0xe4) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f0000000540)={[0x8001, 0x1, 0x5, 0x800, 0x80, 0x7, 0xcc, 0xfeca, 0xad, 0x1, 0xb2b, 0x9, 0x2, 0x81, 0x1, 0x7, 0x6, 0x1ff, 0x7fff, 0x3f, 0x5, 0x4e, 0x1, 0x3ff, 0x4, 0x6, 0x7fff, 0x80, 0x9, 0x6, 0x7, 0x6, 0x4, 0xe19, 0xd8, 0x3, 0x8, 0x9, 0x4, 0x9, 0xffff4e71, 0x1, 0xfff, 0x191d, 0x7, 0x20, 0x64b3, 0x5, 0x0, 0xb1d8, 0x10001, 0x9, 0x28, 0x7fffffff, 0x0, 0x1, 0x8, 0x9, 0x4, 0x5e, 0x9, 0x3ff, 0x8, 0x8, 0x4, 0x81, 0x7, 0x1, 0x9, 0x18d9, 0xfffffffc, 0x8000, 0x6e1, 0x4, 0x8, 0xfffffff9, 0x10000, 0x20, 0x7f, 0x9, 0x3ff, 0x2, 0x101, 0x0, 0x2, 0x0, 0x7, 0x6, 0xbdb, 0x4, 0x80000000, 0x1, 0x5, 0x4, 0x4, 0x96b1f5f0, 0x401, 0x0, 0x0, 0x9, 0x7, 0x400, 0x1, 0x3, 0x4, 0x80, 0xeb68, 0x2, 0x3f, 0x0, 0x0, 0x6, 0xfffffff7, 0x6, 0x1f, 0x7, 0x7fff, 0x60c, 0xfff, 0x80000000, 0x6, 0x2, 0x1, 0x4, 0x9, 0xd, 0x20, 0xffffffff, 0x8, 0x7ff, 0x8, 0x81, 0x8, 0x1, 0x5, 0x760, 0x1000, 0x7, 0xffffff43, 0x9, 0x1, 0x0, 0x4, 0x1, 0x3f, 0xfffff001, 0x0, 0x9, 0x20946187, 0x0, 0x8, 0x4, 0x9, 0x8, 0x6, 0x2, 0x20, 0x400, 0x1000, 0x6, 0x8, 0x6, 0x1ff, 0x800, 0x7fff, 0xffff7fff, 0x3, 0x7, 0x2, 0x81, 0x3f, 0x0, 0x8c2a, 0x4, 0xffff, 0x1, 0x9, 0x2e, 0x42, 0x2, 0x5, 0x6, 0x3, 0x0, 0x3, 0xfff, 0x4, 0x0, 0xab73, 0x2, 0x4, 0x0, 0xc4, 0x3, 0x5e61, 0x3, 0x20, 0x1f, 0x9, 0x8, 0x7, 0x4, 0x2, 0x2, 0x800, 0xfffffffe, 0x3, 0x3ff, 0x6, 0x80000000, 0x101, 0x4, 0x4, 0x0, 0x8000, 0x10001, 0x7, 0x4, 0x0, 0xfffffffd, 0x3, 0x5, 0x400, 0x2, 0x9, 0x7fff, 0x3, 0x6860, 0x3, 0x8001, 0x4, 0x3, 0x24c, 0x200000, 0x8, 0x80000001, 0x64a, 0x8000, 0x4, 0x10001, 0x7c, 0x5cdd, 0x3, 0x36f2, 0x8fc, 0x7, 0x3, 0xffffffff, 0x1, 0x1f, 0x1, 0x1, 0x7fff, 0x9, 0x3, 0x8, 0x10000, 0x400, 0x1, 0xfffff0ee, 0x1, 0x0, 0x1, 0xf5d, 0x4, 0x9, 0xfff, 0x1, 0x1ff, 0x3f, 0x3, 0x1, 0xf3b, 0x2e7c, 0x4, 0x100, 0x4, 0x0, 0x8, 0x84a4, 0x3, 0x0, 0xffffff01, 0x1c, 0x1, 0xb41, 0x4, 0x8, 0xfff, 0x10001, 0x7, 0x6, 0x80000000, 0x9, 0x4, 0x2, 0x23, 0xb8, 0x8, 0x4, 0x5, 0x3, 0x0, 0x8001, 0xfff, 0x800, 0x9, 0x0, 0x3, 0x81, 0x0, 0x1, 0x3ff, 0x7, 0x7, 0x1f, 0x1, 0x8, 0x8, 0x7, 0x800, 0x4, 0x3ff, 0x10001, 0x8001, 0xfffffffd, 0x5, 0x3ff, 0x53, 0x2, 0x7, 0x6, 0x8000, 0x7, 0x6, 0x7ff, 0x1, 0x9, 0x7, 0xa8, 0x8000, 0xffff, 0xba6e, 0xf214, 0x10001, 0x556, 0x8, 0x5, 0x7, 0x9, 0x9, 0x9, 0x8, 0x7, 0x2, 0x8, 0xb7, 0x100000, 0x7fffffff, 0x7fffffff, 0xffffffff, 0x8000, 0x0, 0x3f, 0x800, 0x40, 0x8c, 0xe62, 0xbd29, 0x2, 0xcd0, 0x7, 0x0, 0x2, 0x5, 0x0, 0x7, 0xffffeda4, 0xffffffff, 0x1d1, 0x2, 0x3, 0x6, 0xfffffffb, 0x1f, 0x6, 0x27000, 0x800, 0x546ee725, 0x80, 0x9, 0x1, 0x6, 0x1ff, 0xff, 0x0, 0xf6d, 0x1, 0x5, 0x1, 0x1f, 0x1ff, 0xffff7fff, 0x7fff, 0x1, 0xd24, 0x7, 0x7ff, 0x4, 0xaf91, 0xffffff88, 0x285, 0x94b, 0xce76, 0x43f3f25a, 0x6, 0x800, 0x8000, 0xd1, 0x0, 0x3, 0x8602, 0x1, 0x9, 0x0, 0x8, 0x0, 0x3, 0x0, 0x101, 0x3, 0x0, 0x101, 0x2, 0x9c8000, 0x7fffffff, 0x80, 0x629c, 0x6, 0xa23, 0x6, 0x5261, 0x556, 0x4, 0x1, 0x4, 0x1, 0x2, 0xff, 0x80000001, 0x0, 0xffff, 0x3ff, 0xc00, 0xfffffffb, 0x2, 0x3, 0x80, 0x3, 0x80000000, 0x4c1, 0x7ff, 0x2, 0x39, 0x53, 0x6, 0x7fffffff, 0x10001, 0x5, 0x47, 0x9, 0x5, 0xce4, 0x1, 0x80000000, 0x1f, 0x80000001, 0x5224e87e, 0x8000, 0x80000001, 0x826, 0x80, 0xfffffc01, 0x9, 0x1, 0x6, 0x9, 0xd4d6, 0x5, 0x2, 0x7fffffff, 0x1, 0x8000, 0x8, 0x8, 0x81, 0x0, 0x6, 0x7, 0x40, 0x1, 0xff, 0x32a6, 0xa2dd, 0x4, 0x5, 0x9, 0x4, 0x7fffffff, 0x4d6, 0x7, 0x5, 0xe8, 0x9, 0x1, 0x8, 0x6, 0x1, 0xb05, 0x9, 0x6, 0x101, 0x4, 0x4, 0x1, 0x3, 0x8001, 0x8, 0x2, 0x7fff, 0x7, 0x6, 0x9, 0x9, 0x3ff, 0x9, 0xe09, 0x5, 0x0, 0x4, 0x3, 0x7fffffff, 0xfffffffa, 0x0, 0x244, 0xffff1db6, 0x3ea7, 0x101, 0x5, 0x3f, 0x8, 0x80, 0x9d48, 0x9, 0xfffffffd, 0x8, 0x2, 0x0, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0x1, 0x9, 0x4, 0x200, 0x6, 0x280, 0xff, 0x9, 0x83, 0x3, 0x4, 0xcbc, 0x4, 0x1, 0x1, 0x9, 0x5, 0x1, 0x2, 0x0, 0x4, 0xe501, 0xa0, 0x7, 0x1ff, 0xb23, 0x2f10, 0x1, 0x6, 0x0, 0xda3a, 0xc7, 0xf585, 0xffffffff, 0x4, 0xd, 0x1ee, 0x6, 0x3, 0x1, 0x1, 0xf791, 0x7, 0x1ff, 0x8001, 0x9, 0xeb0, 0x800, 0x2, 0xffff5a63, 0x1, 0x2, 0x800, 0x4, 0xd13e, 0xfff, 0xffff, 0x3, 0x4, 0x5, 0x0, 0xffffffff, 0x8001, 0x10001, 0x80000000, 0x3, 0x5ae0, 0x100, 0x5, 0x1ff, 0xffffff00, 0x3, 0x7ff, 0x5, 0x7, 0x6e, 0x7fffffff, 0x2dd, 0x2, 0x101, 0x4, 0x8000, 0x0, 0x0, 0xfffffffa, 0x0, 0x7fc, 0x5, 0x2, 0x4, 0x7, 0x9, 0x3, 0x7f, 0xffff, 0x100, 0x9, 0x3, 0xffffffff, 0x1, 0x3000, 0x80, 0x10001, 0x4, 0x5, 0x6, 0x1, 0x8, 0x3, 0x2, 0x5, 0x6, 0x3ff, 0x3, 0x7, 0x5, 0x9, 0xacd, 0x40, 0x10001, 0x1, 0x8001, 0x2, 0x2, 0x4, 0x6, 0x3, 0x4, 0x7, 0xdc, 0x958, 0x7f, 0x9, 0xffffffff, 0xfb, 0x8, 0xffffffff, 0x7, 0x5, 0x3, 0x7702b842, 0x9b82, 0x3, 0x7fffffff, 0xcf8, 0x382, 0x1, 0x3ff, 0xc379, 0xa7, 0x6, 0xffff, 0x80000000, 0x10000, 0xfffffffb, 0x3, 0x6, 0x3ec7, 0x5, 0x1, 0x8ac, 0x0, 0x45a1, 0x0, 0x3, 0x3, 0x100, 0x4, 0x200, 0x10001, 0x3ff, 0x1, 0x6, 0x400, 0x6, 0x2, 0x4, 0x20, 0x8, 0x0, 0x400, 0x401, 0x8000, 0x9, 0x7, 0xdf, 0x8001, 0x4, 0xfff, 0x6, 0x88fe, 0x6, 0x3396, 0x40, 0x800, 0x3, 0xffffffff, 0x3, 0x4, 0xc4a, 0x8, 0x8000, 0x3ff, 0x9, 0x1, 0x7f, 0x1, 0x800, 0x3, 0x100, 0x7, 0x1, 0x5, 0x1, 0xffff, 0x80000001, 0x81, 0xbfb0, 0x2, 0x4, 0x8, 0x4, 0x6, 0x5, 0x3, 0x3f, 0x8ea, 0x100, 0x4, 0x400, 0x6, 0x7, 0x0, 0x10000, 0x6, 0x60, 0x0, 0xec4, 0x7fffffff, 0xfffffffb, 0x3, 0x7, 0x0, 0x6, 0x2c, 0x1, 0xe613, 0xffffff1d, 0x2, 0xa7c, 0xa4d, 0x8, 0x8, 0x8, 0x1, 0xf0b0, 0x9, 0xef254b8a, 0x3, 0xfffffff9, 0x9f, 0x7d6ec11a, 0x1, 0x800, 0x7, 0x400, 0x7, 0x5, 0x7, 0x3ff, 0x423a, 0x7, 0x9, 0x7f, 0x8, 0x6, 0x7, 0x98d, 0x9, 0x20, 0x1, 0x800, 0x9, 0x1, 0x7, 0x8, 0x7, 0x1, 0x3ff, 0x5, 0xba1, 0xc24, 0x9, 0x7fffffff, 0x3, 0x4, 0xa3, 0x8, 0x8000, 0x8, 0x0, 0x6, 0x1400000, 0x8, 0x8, 0x0, 0x8001, 0x4, 0x3, 0xd2c, 0x75, 0x3, 0x4, 0x0, 0x2, 0xc7, 0x5, 0x5, 0x8000, 0x8, 0xfffffff9, 0x0, 0x7, 0x101, 0x6, 0x3, 0x46ab, 0x0, 0xfffff7dd, 0x2, 0x7fff, 0x7fff, 0x9, 0xff, 0x4db0, 0x8, 0x400, 0x3, 0x9960, 0x1000, 0x10001, 0x2, 0xfff, 0x5, 0x5, 0xfffffff8, 0x0, 0x8000, 0x6, 0x1f, 0xffff, 0x2, 0x1, 0x7fffffff, 0x2, 0x80000, 0x4, 0x8001, 0x45c, 0x8000, 0x200, 0x1, 0x5, 0x1, 0x8, 0x9, 0x26e, 0x101, 0x800, 0x6, 0x5, 0xffff, 0x4, 0x101, 0x8, 0x2, 0x2, 0x2, 0x1f, 0x400, 0x8, 0x8, 0x40675d7b, 0x1, 0xf105, 0xff, 0x9, 0x4e, 0xffff, 0x20, 0x4, 0x7fff, 0x9, 0x8, 0x8, 0x0, 0x254, 0x8, 0x1, 0xfff, 0x80, 0x5, 0x1ff, 0x7, 0x8, 0x24e, 0xffffffff, 0x4, 0x3, 0xfffffff9, 0xfffffff8, 0x5, 0x9, 0x1, 0x9, 0x10000, 0x6, 0x400, 0x401, 0x533, 0x7aee2838, 0x80000001, 0x6, 0x3, 0xfffffff9, 0x3, 0x4, 0x0, 0x5, 0x40, 0x0, 0xb1, 0xffffffff, 0xfffffffa, 0x6, 0x40, 0x913, 0x9, 0xab9, 0x1, 0x8000, 0x7f, 0x5, 0x1000, 0x5, 0xffff, 0x8, 0x3, 0x8, 0x7, 0x9, 0x10000, 0x8, 0x2, 0x2, 0x1, 0x8001, 0x9, 0x7, 0xff]}) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r8 = dup(r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) 19:47:25 executing program 0 (fault-call:4 fault-nth:7): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:25 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x244002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f00000000c0)={0x990000, 0x45a1a34, 0x5, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9b090b, 0xa4, [], @string=&(0x7f0000000000)=0x3}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x3) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa09, 0xb}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x9, 0x40) ioctl$TUNSETLINK(r6, 0x400454cd, 0x110) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x408640, 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, &(0x7f0000000280)={0x3, 0x7, 0x8, 0x3, 0x18}) ioctl$EVIOCGLED(r6, 0x80404519, &(0x7f0000000100)=""/91) [ 563.156312] IPVS: ftp: loaded support on port[0] = 21 19:47:26 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) ioctl$VIDIOC_DQBUF(r1, 0xc0585611, &(0x7f0000000080)={0x472165c2, 0x2, 0x4, 0x8, 0x1f, {0x0, 0x2710}, {0x1, 0x1, 0x3, 0x3, 0x5b, 0x1, "11d56761"}, 0x7ff, 0x4, @offset=0x81, 0xa7, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x1b451d70, 0x2b}) 19:47:26 executing program 3: pipe(&(0x7f0000000140)) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r2, &(0x7f0000000180)="8963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d598fa5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33667467bc1ae6d55e05f4d8d6f7f1c18859b90f87d5e99fae70bfe7bbd9620bc87417f6c8730e6406638c03ffc502b79d043428804e716f2ee53c9c9a86025fb4bd311d9a976312d3bf8b9fee7f8923500a727a0cdc916e22ecee1bcdbead846b79d9973774ffa0", 0xa9) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x11, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000000)='./control\x00') r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='./control\x00', 0xa4000972) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) 19:47:26 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r6}}, 0x48) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r6, 0x1}}, 0x18) 19:47:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x10001, 0xff, 0x67, 0xf6, 0x0, 0x7f, 0x6, 0x9f, 0x6, 0x9, 0x3, 0x4, 0x8}, {0x0, 0xe09d, 0x0, 0x5, 0x0, 0x1, 0x1f, 0xa3, 0x7f, 0x6, 0x4, 0x43, 0x3}, {0x58c, 0x40, 0x34, 0x8, 0xde, 0x81, 0x4, 0xd8, 0xfe, 0x25, 0x2e, 0xfa, 0x8}], 0x10001}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b200080000001028e6c467144d2fa833"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000000000"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1}}, [@filter_kind_options=@f_basic={{0xa, 0x1, 'basic\x00'}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{}, '\x00'}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}]}]}}]}, 0x54}}, 0x0) 19:47:26 executing program 3: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$int_out(r0, 0x2, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x170, r2, 0x4107, 0x0, 0x0, {{}, {0x0, 0x2}}}, 0x3f0}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x0) 19:47:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000080)) 19:47:27 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000200)={0xc0000000, 0x105, "1f91c962f3103c0528682944e01568f790be2892c99de4dcee8d744a355b0da2", 0x66e07e, 0x2, 0x3, 0x8000, 0x80, 0xbb51, 0xfffff000, 0x6, [0xe6, 0x5, 0x76, 0x9]}) r1 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendto$inet6(r1, &(0x7f0000000340)="5895499df78a35f5dea1b54d7d1b6c114216660bb5c761142974e056e101accbf646173a11b4e3b7167394dc56b6476a481a7dc726eb93918863fbe8166aaafc05640c623aa169f6d35cf5cf5d1be8c9b0052e71b9ed92bc3590e211a2df165a3c2c22a1c0c47b1f92359205f0f40697bf24a5cf13a7d2cee1b1c6fd368667f5a36db01ecd59b26e215d68c4051a29a9617efcc97c68ff2c765d134ca296462100827ec9c9f4b33c8bfd0498466b5fc87da7fa1eab1f8b831de20234b63c9f017846a4bb91d1b2ce71d53bde3bc9acfd79aa32f6e7fb37fae2b7883c", 0xdc, 0x4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfff}, 0x1c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5500000018007f6000fe01b2403b7bbb0a600000ffa84302910000003900050035000c00020000000d000500000000000000c78b800823090000009d566885b167320b00dc1338d54400009b84136ef75afb83de44", 0x72}], 0x1}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x9) setgid(r6) setgid(r6) 19:47:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x10, 0x1}) 19:47:27 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f00000021c0)=[{0x0, 0x0, 0x20}]) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40040, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xbb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bsg\x00', 0x418201, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/meminfo\x00', 0x0, 0x0) dup(r1) lseek(0xffffffffffffffff, 0x40e5, 0x0) close(0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000240)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @dev={0xfe, 0x80, [0x0, 0x0, 0x8]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) sendto$inet6(r2, 0x0, 0x0, 0x88fe, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000000c0)={0x0, 'syz_tun\x00', {}, 0x1}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5cd0}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x5, 0x70, 0xb8, 0x4, 0x0, 0x2, 0x0, 0x0, 0xf099, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0xfffffffffffffffd}, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) socket(0x5, 0x1, 0x2) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000200)=0xc) setreuid(0x0, r8) 19:47:27 executing program 0: ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000000)) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x311440, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000280)=""/4096) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:27 executing program 3: syz_mount_image$xfs(&(0x7f0000000100)='xfs\x00', &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f646973636172642c2ad5dedef8f813096b00"]) [ 565.114692] XFS (loop3): unknown mount option [*ÕÞÞøø k]. 19:47:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000000)=0x7) r5 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, r5, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, r5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9, &(0x7f00000000c0)='/dev/ion\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r5, r4, 0x0, 0xb, &(0x7f0000000080)='self/}eth0\x00', r6}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x800000805, 0x0) write$uinput_user_dev(r1, &(0x7f0000000880)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_EVBIT(r1, 0x40045566, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socket$inet6(0xa, 0x3, 0xfff) mq_timedreceive(r3, &(0x7f0000000480)=""/218, 0xda, 0x8, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5afbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05752981", @ANYRES32=0x0, @ANYBLOB="b3ef461584d1f8f0"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r5}}, 0x20}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="7de053c9d2bf5a74d1a52ac44e8faebafc21abe2c9db8949cda4cbc9e6c0cdee58a147bd7534a19531473661afef819eb6fd4aafdaf478da9d05d5e893d39ef2d2f849e09adab64a1ee4d444150d6ceb0c993a6a91a8fabfea7dc69c7ae5d6991b51d7f3c1600242f481e7", 0x6b, 0x80, &(0x7f0000000300)={0x11, 0xf6, r5, 0x1, 0x4, 0x6, @dev={[], 0x38}}, 0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ocfs2_control\x00', 0x10b800, 0x0) ioctl$EVIOCSABS20(r6, 0x401845e0, &(0x7f00000001c0)={0x9, 0x1ff, 0xffff, 0x50, 0x2, 0xfa0}) [ 565.320619] input: syz0 as /devices/virtual/input/input10 [ 565.445980] input: syz0 as /devices/virtual/input/input11 19:47:28 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000380)) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus/file1\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400203) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$IMGETVERSION(r4, 0x80044942, &(0x7f0000000140)) r5 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="6c6f7765726469723d2e2f62757368896fe12d0c65733d2e2f66696c65dd23312c75707065726469723d2e2f66696c6530"]) lsetxattr$system_posix_acl(&(0x7f0000000100)='./bus/file1\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="000644844b000000541000000000000000a64235b8d665adbdf2f4542000"/39], 0x24, 0x0) [ 565.631051] overlayfs: missing 'workdir' [ 565.671384] overlayfs: missing 'workdir' 19:47:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000000)=0x1000, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001580)=[{&(0x7f00000000c0)="64ff5184ee68cf584fa1508e33d8eab6e9181002cc5a2b665006eec0e4be9ccb6eb8b214847e944c8ed833233430a72ae2f0789c1da03fcab03cfff1181def03059b4ef1555988476c65a5ad511944f9e6070673c5ccb4889338b0765ea59b9390666542326ac41cc5d7d4ca56ace545a1", 0x71}, {&(0x7f0000000280)="9f20307c17706ee7cf0d6080df25bc917013ae6da4230d7e8ef792f99679b2651c2760e04644d8abd0a5325c4088a0995c58e1de4dc16f49fced413fc81b2c486c79969c889a8d563f43984b932cb9563ed79b0ba36c66fe7214dca05d54a899a6f5b7928cd8103fd43c820b677150732167b16b919dd04329cdc5de7cac171b7d20", 0x82}, {&(0x7f00000001c0)="f515a938006e3f89fbaec77d917931772e62693c68ae3559e77133921170625a7b6cac8941f6906e8dd34edf7e6ea56966f380cec848c03587263109b9253a26e9471c99b8ddf7320ffdd9ab8c75feed318868f5c6e554cb4b30de8fc32d114159d2bb4ea17cf2d63bfa37ff7e6a959e4b", 0x71}, {&(0x7f0000000340)="f6080a30e1b2b41f7e11acae261c409af95ffd1d44e12c0a33f78ae0a68737e78e85a03379315f15af3838d1a01e9c317d81166862761e607d75c869828190ebc9d01119b19c09b9d6b10424e8bfb68f1b74f23dd437e44e120fae04304161abaf4d0e8be09875b5f86366165aae618786a0a7d2cb99482dc770c31d8304d011dd17d9ace9a51d0c3587cd47af9731b8331dde6f76cb362770717fea1ddf078bbaf12f2b232a91b2a38b32d91bc9456e405227f5abc4cc659c964b4c2a9f9c54536ea0700197e82e814fe3", 0xcb}, {&(0x7f0000000440)="9931079bdfe861005f80bf4d2fbcba8932bfb6eec6d0228c3a5bbfd2486363d0d47eaf374a531dcf1f475f1b7cb392e806943857650be73dc6912be4bb9c8c0c482d67c276c3e3f53632b3cb9f85e24a5071422341ee95e1fecc49fda8c6e0979f55d6928a3b826b87b99df7a59e774d70b57576671d6fd53b", 0x79}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="a7eef5c6aac6120758ccd459dac892900e942d7d3f9aa171eb9dd71662ccddb583d8d604c8aa69f2ed018fb8ddb181a7ad12f9b6cce59c0c69e3e0deb5ae67c9567bb8b104f31f30e9079a1d29583a0723e54bdbf8270bc993434b5b73718e6b556d8f9dee73603386626c93a498f0b3b15ca20b4a1c4b409d51d9f61b27f8ad22647c17f8739ea6b7113bf55ba0dea7", 0x90}], 0x7, &(0x7f0000001600)=[@ip_retopts={{0x4c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x3c, 0xd6, 0x3, 0xc, [{@loopback, 0x7f}, {@local, 0x5}, {@rand_addr=0x80000000, 0x8}, {@multicast1, 0x1f}, {@loopback}, {@local, 0x400}, {@remote, 0x1f}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x80}, 0x40000) 19:47:28 executing program 3: sendmsg$key(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c00000010001fff000054680000000000000000", @ANYRES32=0x0, @ANYBLOB="09fb5056d8df39cf540012800b000100627269646765001344000280050019000800000006000600080000000c002300f8ffffffffffffff0500180000000000080015003f00000005006500000000000c002000070000000000000008000a00", @ANYRES32, @ANYBLOB="05ee3b121ed6a9fad85a6c699205661cdb20e16e2edef8a64cc587bd91a21521419447cc62304e2a4edfceb898e2218bc15979a2bc4531f46fb281dbd508968493d4a426"], 0x7c}, 0x1, 0x0, 0x0, 0x44002}, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000001340)={'veth1_to_team\x00', {0x2, 0x4e24, @remote}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5afbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05752981", @ANYRES32=0x0, @ANYBLOB="b3ef461584d1f8f0"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r7}}, 0x20}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x10c8, 0x13, 0x2, 0x70bd2b, 0x25dfdbfe, {0x1e, 0x7f, 0xff, 0x9, {0x4e23, 0x4e24, [0xffffffff, 0x6, 0x0, 0x6], [0xff, 0x3, 0x10001, 0x100], r7, [0x6, 0x70fa]}, 0x6, 0xb1}, [@INET_DIAG_REQ_BYTECODE={0x75, 0x1, "baa10e85678ef3b2c712c51d72264c47316307c774f70ab7a247af97b434e30c7031203b5391ea0f9293800477cdba23a258465f4af42f7399b8b10b72eafe78696ace48d8df7f87c78d08adc412de166992275ac43f98721172d9add99c893a29f64e279a15255501c66d184c484fc4b6"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x4010}, 0x24000810) 19:47:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x2200, 0x0) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000100)) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1, r4}) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) [ 565.992533] device bridge1 entered promiscuous mode [ 566.186795] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 19:47:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) [ 566.333207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7797 sclass=netlink_route_socket pig=24207 comm=syz-executor.3 [ 566.359611] device bridge1 entered promiscuous mode 19:47:29 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) [ 566.465570] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 19:47:29 executing program 3: sendmsg$key(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c00000010001fff000054680000000000000000", @ANYRES32=0x0, @ANYBLOB="09fb5056d8df39cf540012800b000100627269646765001344000280050019000800000006000600080000000c002300f8ffffffffffffff0500180000000000080015003f00000005006500000000000c002000070000000000000008000a00", @ANYRES32, @ANYBLOB="05ee3b121ed6a9fad85a6c699205661cdb20e16e2edef8a64cc587bd91a21521419447cc62304e2a4edfceb898e2218bc15979a2bc4531f46fb281dbd508968493d4a426"], 0x7c}, 0x1, 0x0, 0x0, 0x44002}, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000001340)={'veth1_to_team\x00', {0x2, 0x4e24, @remote}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5afbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05752981", @ANYRES32=0x0, @ANYBLOB="b3ef461584d1f8f0"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r7}}, 0x20}}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x10c8, 0x13, 0x2, 0x70bd2b, 0x25dfdbfe, {0x1e, 0x7f, 0xff, 0x9, {0x4e23, 0x4e24, [0xffffffff, 0x6, 0x0, 0x6], [0xff, 0x3, 0x10001, 0x100], r7, [0x6, 0x70fa]}, 0x6, 0xb1}, [@INET_DIAG_REQ_BYTECODE={0x75, 0x1, "baa10e85678ef3b2c712c51d72264c47316307c774f70ab7a247af97b434e30c7031203b5391ea0f9293800477cdba23a258465f4af42f7399b8b10b72eafe78696ace48d8df7f87c78d08adc412de166992275ac43f98721172d9add99c893a29f64e279a15255501c66d184c484fc4b6"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x10c8}, 0x1, 0x0, 0x0, 0x4010}, 0x24000810) 19:47:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x9}, 0x8) fcntl$setstatus(r3, 0x4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet(0x2, 0x800, 0xfffffe03) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) [ 566.775463] device bridge1 entered promiscuous mode [ 566.949247] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 19:47:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8001, 0x400) r2 = dup(r1) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) bind$unix(r3, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) dup(r1) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000000)=0x9, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:30 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f00000001c0)={r5, 0x1, 0x6}, 0x10) r6 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000280)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x198, 0x258, 0x198, 0x2f0, 0x198, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x7f, 0x2}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@set={{0x40, 'set\x00'}, {{0x0, [0x4, 0x1, 0x1, 0x3, 0x3], 0x1, 0x5}}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8001, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}, {{@ip={@loopback, @loopback, 0xff000000, 0xffffffff, 'veth1_virt_wifi\x00', 'vcan0\x00', {0xff}, {}, 0x62, 0x1, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xd}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x40}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x1}}}, {{@ip={@local, @loopback, 0xffffffff, 0x0, 'rose0\x00', 'lo\x00', {}, {}, 0x84, 0x0, 0x600e4786cce3e3bf}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}, {0x0, 0x4}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x18}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x0, 0x3}, {0x1, 0x6}}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000000)={0x3f, 0x0, 0x1}) 19:47:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x6000c0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x0, 0x2b, 0x1, r4}) 19:47:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2000, 0x0) write$P9_RCLUNK(r3, &(0x7f0000000080)={0x7, 0x79, 0x1}, 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x230b40, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="b0756b10feb86a1cb400f591", 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:30 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x5, 0x228000) bind$netrom(r2, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:31 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$OSF_MSG_REMOVE(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x964, 0x1, 0x5, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [{{0x254, 0x1, {{0x2, 0x1}, 0xe0, 0x0, 0x9, 0x9, 0x5, 'syz1\x00', "203873f44be5cf67b1b51fcf1ba64d650538f7040ba223551ac128e3451b6ea6", "12d5fa769b11840c7021edaea12fa55a8fedf29d4ceee38d4b85961a5d9a949a", [{0x5, 0x100, {0x1, 0xff}}, {0xff, 0xfffa, {0x0, 0x9}}, {0x5, 0x81, {0x1, 0x5}}, {0x100, 0x8, {0x0, 0x61}}, {0x7, 0x85f9, {0x1, 0x952}}, {0xffe1, 0x1, {0x0, 0x81}}, {0x3, 0xc76, {0x0, 0x5df2}}, {0x5, 0x6, {0x0, 0x7f}}, {0x3, 0xdc4, {0x3, 0x40}}, {0x4, 0x61, {0x3, 0x717}}, {0x9, 0x3, {0x1, 0x7fffffff}}, {0x2, 0x8000, {0x0, 0x1000}}, {0x3, 0xb, {0x0, 0x2}}, {0x7fff, 0x7, {0x0, 0x7}}, {0x99, 0xef1e, {0x3, 0x4}}, {0x6, 0x8, {0x0, 0x10000}}, {0x6, 0x3f, {0x0, 0xe1}}, {0x2, 0x9, {0x0, 0x1}}, {0x5, 0x6, {0x0, 0x80000001}}, {0x8, 0x21d, {0x2, 0x2}}, {0x400, 0x6, {0x2, 0x1ff}}, {0xfffd, 0x3, {0x3, 0x52f}}, {0x0, 0x8000, {0x2, 0x3}}, {0x7fff, 0x3, {0x1, 0x4}}, {0x9, 0x80, {0x2, 0x1}}, {0xfd8, 0x400, {0x1, 0x29eb}}, {0x200, 0x7fff, {0x2, 0x5}}, {0x2, 0x9, {0x2, 0x10001}}, {0x4, 0x9, {0x1, 0x8}}, {0x7, 0xa8, {0x0, 0x8}}, {0x2bf, 0x9, {0x1, 0xfff}}, {0x0, 0x1, {0x0, 0x3da}}, {0x0, 0x9a, {0x1, 0x6}}, {0xe562, 0x32b, {0x1, 0x4}}, {0x2, 0x1f, {0x1, 0x7}}, {0x7, 0x4}, {0xfff, 0x0, {0x2, 0x1000}}, {0x10c, 0x200, {0x1}}, {0x2, 0x8, {0x1, 0xfffffff8}}, {0x20, 0x5, {0x2, 0x6407558f}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x2, 0x52, 0x0, 0x9, 0xe, 'syz0\x00', "4c8b9afd705623319bafa85c6b7f43e3c479b20de854a14523466d7882219424", "3ad34b674d7d598bfad29a2c133a3c0104305e7912d9b3b0effe0b65f87b0d7c", [{0x8001, 0x7ff, {0x4b24aaf707278271, 0x5}}, {0x7fff, 0x8, {0x2, 0x3}}, {0x0, 0x8, {0x3, 0x3}}, {0x6, 0x1, {0x3, 0x2}}, {0x2, 0x7, {0x2, 0x16e}}, {0x1, 0x0, {0x1, 0x1ff}}, {0x3, 0x3, {0x0, 0x1f}}, {0x4, 0x3, {0x3, 0x8d3}}, {0x3, 0x5, {0x1, 0x6}}, {0x7f, 0x4, {0x3, 0xea7}}, {0x6, 0x0, {0x3, 0x7fff}}, {0x5, 0x81, {0x0, 0x19}}, {0xe2, 0x4, {0x1, 0x400}}, {0x1ff, 0xbac5, {0x1, 0x4b}}, {0x1f, 0x8000, {0x1, 0x160}}, {0x100, 0x101, {0x1, 0x8}}, {0x8, 0x3b, {0x0, 0x80000001}}, {0x4, 0x9f, {0x1, 0x1d}}, {0x8, 0x0, {0x3, 0xa7}}, {0xff, 0x7, {0x2, 0x6}}, {0x8, 0x3f, {0x1, 0x100000}}, {0x40, 0x3580, {0x1, 0x7fff}}, {0x39b2, 0x0, {0x0, 0x9}}, {0x6, 0x1000, {0x2, 0x9}}, {0x6, 0xfff9, {0x0, 0x1}}, {0xffc0, 0x8, {0x3, 0x490}}, {0xb7c, 0xd9, {0x0, 0xfffffffa}}, {0xff, 0x0, {0x3, 0x8000}}, {0x5, 0x3131, {0x3, 0x8}}, {0x8, 0xe15, {0x3, 0xb38}}, {0x5, 0x4, {0x3, 0x7}}, {0x400, 0xcfea, {0x3}}, {0x6, 0xedc2, {0x1, 0x800}}, {0x60, 0x1, {0x2, 0x4}}, {0xff00, 0x4, {0x2, 0x3ff}}, {0x1, 0x0, {0x3, 0x1}}, {0x19, 0x894b, {0x1, 0x1ff}}, {0x0, 0x7f, {0x3}}, {0x4, 0x8aad, {0x3, 0x9}}, {0x4, 0x3, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x80}, 0x1, 0x88, 0x6, 0x40, 0x24, 'syz1\x00', "1141e6439fef05f82fba7d2d1c318e0e8a7cc784b14052e9745fae48c2721eb3", "bfb142426fbb8d853b85e466509905136558bbbad4e899d970a84eba0d9a6e7e", [{0x7fff, 0xfff8, {0x0, 0x2fce}}, {0x1, 0x6, {0x3, 0x1ff}}, {0x2, 0x100, {0x2, 0xffff}}, {0x8, 0x3, {0x2, 0xff}}, {0x3, 0x5, {0x1, 0x20}}, {0x400, 0xeba, {0x2, 0x8}}, {0x1a2, 0x1, {0x3, 0x1f9e}}, {0x7, 0x1, {0x3, 0xfffffffd}}, {0x4, 0x6, {0x3, 0xfc15}}, {0x20, 0x8000, {0x3, 0x10001}}, {0x3f, 0x6, {0x0, 0x8}}, {0x4, 0xa000, {0x2, 0x101}}, {0x81, 0x7, {0x1, 0x4}}, {0x7fff, 0xfff7, {0x0, 0x1ff}}, {0x100, 0x8, {0x0, 0x2}}, {0x401, 0x1, {0x1, 0x100}}, {0x1000, 0x100, {0x0, 0xab3}}, {0x0, 0x794, {0x1, 0xb5}}, {0x5240, 0x9, {0x3, 0x5}}, {0x0, 0x7, {0x1, 0x40}}, {0x4, 0x3, {0x3}}, {0x7fff, 0x7, {0x0, 0x7}}, {0x1, 0x4, {0x3, 0x10001}}, {0x29, 0x8, {0x3, 0x3}}, {0x7c5, 0x101, {0x1, 0x401}}, {0x9, 0x5, {0x0, 0x100}}, {0xf44, 0x6, {0x2, 0x5}}, {0x1f, 0xa4}, {0x6, 0x8, {0x3, 0xfffffff7}}, {0x4, 0x7f, {0x0, 0xfffffffe}}, {0x5, 0x81, {0x0, 0x1}}, {0x1f, 0xf994, {0x0, 0x3000}}, {0x2599, 0x3, {0x1, 0x1da}}, {0x78, 0x9, {0x0, 0xd43}}, {0xc42, 0x9cf, {0x2, 0x80000000}}, {0xc4, 0xc2e}, {0x7ff, 0x101, {0x0, 0x5}}, {0x8b4, 0xfeff, {0x0, 0x2}}, {0x3, 0x1, {0x3, 0x200}}, {0x0, 0x80, {0x0, 0x10000}}]}}}, {{0x254, 0x1, {{0x0, 0xe3e5}, 0x0, 0x81, 0x200, 0x9, 0x1a, 'syz1\x00', "33e908fd80d9151e01ba435695f29b109834908233adb529bcee87ed2fea1f10", "ce16a3788d342e667c584c5cd8a18e6beffcaef6d5ff46647091f72e3e90be40", [{0x3, 0x3, {0x1, 0x20}}, {0x3f, 0x82, {0x1, 0xfffffffa}}, {0xff01, 0x9, {0x2, 0x38e}}, {0x1, 0xffff, {0x0, 0x9}}, {0x100, 0x9, {0x3, 0x2}}, {0xb81, 0x4, {0x0, 0x10000}}, {0x7, 0x1, {0x0, 0x401}}, {0x5, 0x7, {0x1, 0x8}}, {0xfff, 0x1f, {0x1, 0x8}}, {0x1, 0x2, {0x0, 0x9}}, {0x0, 0x2, {0x1, 0x10001}}, {0x8, 0x3, {0x3, 0x7}}, {0x5, 0x401, {0x2, 0xfffffffa}}, {0x70, 0x5, {0x2, 0x82}}, {0x0, 0xd78, {0x3, 0x2}}, {0x1, 0x145c, {0x0, 0x3}}, {0xff, 0x9, {0x0, 0x7fffffff}}, {0xced, 0x400, {0x3, 0xffffffff}}, {0x9, 0x401, {0x0, 0x9}}, {0x2, 0x8000, {0x2, 0x8}}, {0x8, 0x1000, {0x0, 0x1f}}, {0x0, 0x0, {0x2}}, {0x2, 0x101, {0x1, 0x2}}, {0x5, 0x6, {0x2, 0x81}}, {0x5, 0x9}, {0xc5, 0x8001, {0x1, 0x1}}, {0x0, 0x9, {0x2, 0x3}}, {0x1, 0x1ff, {0x3}}, {0xfff, 0x200, {0x0, 0x33}}, {0x7, 0x1, {0x2, 0x9}}, {0x5, 0x5, {0x3, 0x4}}, {0x2ba3, 0x4718, {0x3, 0x2}}, {0xd7, 0x8001, {0x1, 0x3}}, {0x6, 0x4, {0x3}}, {0x7b78, 0x7, {0x2, 0xfffffffa}}, {0x8, 0x5, {0x1, 0x3}}, {0x7ff, 0x7, {0x3, 0x7fff}}, {0x101, 0x5}, {0x401, 0x401, {0x3, 0xc4}}, {0x7, 0x6, {0x2}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x20048000}, 0x40000) pipe(&(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$int_out(r4, 0x2, &(0x7f0000000140)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:31 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:31 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x37, 0x1, r2}) 19:47:31 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0x8, 0x0, 0x2021, 0x9, 0x2, 0x2, 0x1, 0x1}}) 19:47:31 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BLKFRASET(r6, 0x1264, &(0x7f0000000100)=0x1) getpeername$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000080)=0x20) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETAW(r2, 0x5407, &(0x7f00000000c0)={0x5, 0x8001, 0x81, 0x6, 0xe, "ae0c757ba5a74ce2"}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:31 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x618041, 0x0) nanosleep(&(0x7f0000000140)={0x0, 0x989680}, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) fsetxattr$trusted_overlay_nlink(r3, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000100)={'L+', 0x5}, 0x16, 0x2) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x8000, 0x2b}) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)=@builtin='builtin_trusted\x00') keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000200)={r4, 0x7e, 0x70}, 0x0, &(0x7f0000000240)="03a507d4c6bd6983d5d66898d1bf02ab8aa74c6d64eb664bb65784d4c5ea13c550888622debd6d391d8369bfef62881abca9848da7915a3e2402443252bdf1daf571afec36aa26cf554ea9f16047d1b167e9cfc21eecf2fea603deee60ffba7f38e872ea80139f9dfd0de751c715093a797035e9e7a2399a50efa1e8faab", &(0x7f00000002c0)=""/112) 19:47:32 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x27, 0x805, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5afbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05752981", @ANYRES32=0x0, @ANYBLOB="9cef461584d1f8f0"], 0x48}}, 0x0) r8 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000003c0), &(0x7f0000000480)=0x4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)=@builtin='builtin_trusted\x00') keyctl$update(0x2, r8, &(0x7f00000002c0)="00636d474feb02f422a0187b0262a698748b2eb6190f5728666a24d78b16c17acec44c121b72a9b212c30ee91c9e0c7520b212f73412ee8ae8215a79f43c48ddf4eb942ce9b0f86d54129938e948ed726cb93c6e46020418cb86806af3a2960255351779fe3dcf3a0a544315b363b255e155c771f6bf06cff9ff70fd2acba5ea22064e5e23d708bb32aa7074352f92a403f8a148efabeceee156acc2560b9eb525d9353347c1d0c13adf4f49d0e3f6be69fb4fcc695396a85cf0f9d06f36796216e802b7009ca4e6", 0xc8) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001000250800000048a01d4f094beb3b4336d1f5622b2c73038d25000000000000000000", @ANYRES32=r7, @ANYBLOB="00225c7c350ad35bc8e914eb000080000000000800f2c5559b0000"], 0x3}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000000000000000300", @ANYRES32=r7, @ANYBLOB="a5e47dbda63a56cc"], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', r7}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) [ 569.375203] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 569.425949] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 19:47:32 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x626200, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001480)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r6, 0x301}, 0x14}}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x8810) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0xa0040, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400202) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x7) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000004c0)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r7, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r9, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x1, 0x8}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={r9, 0x58, &(0x7f0000000440)=[@in={0x2, 0x4e24, @rand_addr=0x2}, @in6={0xa, 0x4e21, 0x9, @rand_addr="efbe1230c223a6165356bc25130cd30e", 0x905d}, @in6={0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0x36}, 0x7}, @in={0x2, 0x4e23, @rand_addr=0x5}]}, &(0x7f0000000100)=0x10) 19:47:33 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000000)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x1, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x2000, 0x4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f00000007c0)={{}, {0x1, 0x6}, [{0x2, 0x2}, {0x2, 0x5}, {0x2, 0x2}, {0x2, 0x1}, {}, {0x2, 0x4}], {0x4, 0x6}, [{0x8, 0x4}, {0x8, 0x1}, {0x8, 0x2}, {0x8, 0x5, r8}], {0x10, 0x7}}, 0x74, 0x2) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r11 = dup(r9) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000, r11}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup(r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000140)={r12, 0x80000, r14}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000080)=0x2, 0x1) 19:47:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000180)="45b16a65587ffe09ceb9419eb5b925b9f7802e52ac4113ca69bbec97a657af788a2479e24c5be3ec8a401d19a3858fac3e11979ee3e2688f7c05189ac87b976fb9c7e400cb5705ed788aa188df172a5a71b7332b759eed92937d285803dc4ac59fd07845bc89d2bc5075e5a39352487172d13bbe6d8ced4160a3ee0e904a3c09586a51a775f0c9a7ef9246e862ccce7e99431ef9cb69d609625cf7f86886b06c3685fc192101cdbc5b53e4ccaaa80c5e4de274c751ca89c4d6", 0xb9}, {&(0x7f0000000280)="aa1ae35398a9468df74061d36695e77889ee59e423eaeff1cb25328c1605c090ba4013bcc0ffbbd3d35d3179bcfcdde2f1026de34710d1acca167a0942c452c7d1a74e91fa344adb7cc2d686b17071c74aebb775092847e23d609b2a541d653c38603e49ef50391c1aa448ce5057c40a5ed404a6d54ea034be5b8d6be01f61c6cfa4a9e80f12fbd546ee735180bd66d1330bfbe2c60a47e022c1ac8c4b46f300c52a740e2f7aa44da8bce3243c5c24d3c89aeeaf06369b25b9d1fdc03fa12efed0dc45316cb423e3d67d3cbdc518ec0b7c7a9a6ef0d0fc3b542f84af3c558c6e8a4d2af1e6488800000000", 0xeb}, {&(0x7f0000000540)="07dcbbc9147a5cb898d7483b187c375c1acf7bb15780f82c0d3b4eabafb30d5f35c2a73955539cdb821c1681f95ccd98f931fe5e7b8d33507d524e447a50b2a77c452a044bd60ceb41413156a28ea45b5212b34d1bae768c5e540eb6359db4696e3ffe16592805f50211383b8c1e8f8700f1900fb1c85783d4347d94898d9d79466c9c0d592360dedfd194916c53cd6470e6b9e6f22e6a730c54fb1a4e94150300a888c2712a3a7ec40b8e8f0d08ff093697922962ca39c944e104d8a5c0c5a2ed79188531f8a26a2b4bad04ef39196ed34467c8c55b8ccd79148b6479dbe4bbd7eb75aef66267", 0xe7}, {&(0x7f0000000640)="1b914eaebf6b3e37c682250a35ceeaa5876fdb679e405c5c603650f455fd1e4c28109c5f11725b89886bd7fe5e7eea3ae23614d596eb36f396c0343e1880547a48a0b6b44cb3bd6886419ff8d6e4e42214520bdd28cd9b633f579c1c156606f7b58193077ba726b2413852400ed1208615c800db52a1e30a650cc3988faa036985995273f6f952a9e7106cfa55b5dc874976f41fbcc9f48d0aa3f3871d67af66a4f608d27ced87b26bab492b22a562c8a4e4acc8a12de61fea6625fe7138837a3c6471d32dcd0e37da963bff165489db08", 0xd1}], 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="200000000000000001000000010000005d44b9a65430d4dfa64f05cff500f76424815a040d75ae14ea92af6592019fb499cb02f0c8854f18badc3914fa2c6a95ae12f5705b676d487deb50b9f6c5565ad515a6783e2942c75ade92670e8cec936866c06feb9cec935cc2a34dd10baa6762013be0d9a025b337737817a478e427ca07479d61df3e208fd1771ad0a376cc5ac4f1e6ab4d9b7d8b3ef3710f21bd5cfe60726476860438f20b48a78e257baeee8284e27c56b3aef90000000000000000006d70a0a32d94e7fed21c5115344d60d22cbcfae23d6409d6d8d2f30843d3c1b7b5fbf2eb863027d89bb9feab1f47bb79f833b1b7b7", @ANYRES32=r9, @ANYRES32, @ANYRES32=r11, @ANYRES32=r13], 0x74}, 0x4004082) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) sendmsg$NFT_BATCH(r10, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x280, 0x18, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0xec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x51e}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xf4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa4bd85e1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x3c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x301, 0x0, 0x0, {0x5a5ab757cb47fd78, 0x0, 0x9}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x10}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1ff}]}, @NFT_MSG_NEWCHAIN={0x124, 0x3, 0xa, 0xd01, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffff9d7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7ff}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x60}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x200}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffff}]}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}]}]}], {0x14}}, 0x410}, 0x1, 0x0, 0x0, 0x4c884}, 0x20004040) r11 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x9, 0x6, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r5, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r7, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000280)={r7, 0x1000, "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"}, &(0x7f0000000000)=0x1008) 19:47:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_PRIORITY(r4, 0x40045644, 0x0) 19:47:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x1a002, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) r4 = dup(0xffffffffffffffff) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r8 = dup(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) socketpair(0x27, 0x6, 0x8, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000db000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000008364000000000000000000ffffffff00"/144]}, 0x108) finit_module(0xffffffffffffffff, &(0x7f00000001c0)='/dev/dri/card#\x00', 0x2) recvmsg$can_raw(r11, &(0x7f0000001600)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000001540), 0x0, &(0x7f00000015c0)=""/2, 0x2}, 0x40012001) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) 19:47:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/user\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) socketpair(0x4, 0x6, 0x2, &(0x7f0000000100)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r4, 0x8921, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TCSETAW(r6, 0x5407, &(0x7f00000001c0)={0x8, 0x4, 0x8, 0x3f, 0x1a, "0b5d2a1d74c7fa21"}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e24, 0x104, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80}, {0xa, 0x4e23, 0xff, @empty, 0xfffffffd}, 0x0, [0x8, 0x800, 0x7f, 0xffffffff, 0x2, 0xa6, 0x3, 0xe3b]}, 0x5c) r4 = dup(r1) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x200000, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) r11 = dup(r10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) 19:47:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000080)={0x80, "7c34772d61e729fbafd7c0eb65388d7f4ca9ec84a943ddcd260ca2ff9312d8ab", 0x1, 0xffffb00a, 0x5, 0x4, 0x5}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) r4 = dup(r0) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8905, &(0x7f0000000200)) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$NL80211_CMD_SET_KEY(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5f30ef49c0ce2099d6c03dbf3c"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "d977"}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "3f9eeb"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0xb, 0xa, "93bffb05151c5b"}, @NL80211_ATTR_KEY_SEQ={0x7, 0xa, "33f784"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x805}, 0x4004000) r10 = dup(r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1822802887f0ab"], 0x18}, 0x1, 0x0, 0x0, 0x24004005}, 0x200040c0) 19:47:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x40000) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x28000) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) munlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:34 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x8, 0x8, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x1, 0x4240) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000100)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r13 = dup(r12) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r13}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:34 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000080)={0x0, "9ee93b69cbbd0081a925db28c907fa7a97a06342bb042ae0e7e5c42250db814cb76de3833e37077052fabe10449678aa503193cc8b6c9642a1e7271b3d27fb1e", {0x8001, 0xffffffffffffffff}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:35 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r4, 0x301, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="e25ff9c5", @ANYRES16=r4, @ANYBLOB="00042bbd7000fddbdf250d00000008003b0001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0xc005) 19:47:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x26c0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={0x0, r5}, 0x10) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) r6 = dup(0xffffffffffffffff) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0x0, 0x38, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r12 = dup(r11) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r12}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) 19:47:35 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x8c080) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[{0x7, 0x5, 0x3, 0x1}, {0x6, 0x80, 0xb, 0x4}, {0x0, 0x40, 0x7, 0x40}, {0x0, 0x1a, 0x40, 0x7}, {0x1, 0x1, 0x8, 0x8}]}) r4 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ion\x00', 0xc7a2abff1d0733f5, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000080)={0x1}) ioctl$SNDRV_TIMER_IOCTL_GINFO(r8, 0xc0f85403, &(0x7f0000000280)={{0x1, 0x2, 0x1c000, 0x0, 0x4}, 0x40, 0x7, 'id0\x00', 'timer1\x00', 0x0, 0xffffffff, 0x8, 0x0, 0x8}) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ion\x00', 0x12004, 0x0) ioctl(0xffffffffffffffff, 0x20003, &(0x7f00000001c0)="bde186de684e7bfe3c3d4a2b8aeed4952e5468d644bd576135305144eef688c3") ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x80000, r2}) r11 = dup(r10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r11}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r11, 0xc06c4124, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$PPPIOCDISCONN(r0, 0x7439) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000080)=[0x40, 0xfffffe00]) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:35 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000080)=""/246, 0xf6}], 0x2, 0x100001) 19:47:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5afbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05752981", @ANYRES32=0x0, @ANYBLOB="b3ef461584d1f8f0"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000a4000300"/23, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_VLANID={0x6}]}, 0x5c}}, 0x60000000) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r11 = dup(r10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:35 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f0000000080)={0x3, 0x1, {0xfffffffffffffffc, 0x2, 0x3, 0x2, 0x1}, 0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2a, 0x1}) 19:47:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000080)={0x40, 0x14, [0x9, 0x3f4, 0xe8000000, 0x9, 0x7]}) 19:47:35 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x20600, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x100000000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x3f, 0x888491e3b194b7ea, 0x1}) 19:47:35 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_JPEGCOMP(r3, 0x808c563d, &(0x7f0000000100)) r4 = dup(r1) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) r11 = dup(r10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) 19:47:35 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvme-fabrics\x00', 0x80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r5, 0x3, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x8, 0x70bd3d, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4014) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x41) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000080)={0x40000000}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5afbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05752981", @ANYRES32=0x0, @ANYBLOB="b3ef461584d1f8f0"], 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r9, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x28}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r9}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', r9}) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r10, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r10, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfff}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x6}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}]}, 0x68}, 0x1, 0x0, 0x0, 0x4010}, 0x20040801) 19:47:36 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x490800, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40a00, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x39, 0x2b, 0x1, r5}) 19:47:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0x80010, r1, 0x265c7000) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:36 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x80000001) 19:47:37 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) clone(0x80, &(0x7f0000000080)="cc5245ef5f91f5df87c66dd59cf2913ba44bbf4f4c08ab380b61c606935778c0f98ae097313b3e1d62e58daf81a352dca84138e07ab1beebcd1c77059f208c691652f9cfab7eb5a3173fbdaf6d1814eed5db80f21b679101dead34f3a78e839e43dcab1d3dd609a735ca0cd17e7f66e7249f96b412fecc9be87c70aa04c127925205c54117fe0189ef8551730b38a48487b5ff5d58379b5ccb93e4315bf8878ba27e3b8157", &(0x7f0000000000), &(0x7f0000000140), &(0x7f00000001c0)="ef5da94bff54b46f7092fcc454e70738dc45d8423aef88744a5ec41d41f266fef5b807981bef3783b49c7bb9b5febc1b4884cfd2f8ee80406936219b4c565025c259492bbc575ff97544c37ecbdc1d8935c57bbfb89f4b693461e8d0337379b212f653d8ce") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000001480)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0103000000000000000002000000"], 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r3, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000426bd7000fcdbdf250200000014000100fe8000000000000000000000000000aa050005000000000005000500010000000800030001000000000000000000000000000d14000100ff01000000000000000000000000000105000500030000000500050004000000"], 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4000000400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000280)={0xfffffffd, 0x2b, 0x1, r9}) 19:47:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000280)={0x3ff, 0x1f, 0x0, {0x0, 0x80000001}, 0xc40, 0x9}) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)={0x3b, "927217693d70bc8e710a855189a0671c998f7a3c22012ec7a75d60f3b569660559c44b6cc72c57cfc93047ac2bd85ce0c338e112f0089bc3dd8d09"}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) r6 = fcntl$dupfd(r4, 0x0, r5) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x8, 0x0}, &(0x7f0000000300)=0x10) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r7, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r9, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)=ANY=[@ANYRES32=r9, @ANYBLOB="2b0000001c5690a9a442a98a82e06f7b376ba7b230289b18578c51d98b4dbc00"/47], &(0x7f00000000c0)=0x33) getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000100)={r10, 0xff}, &(0x7f0000000140)=0x8) 19:47:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x3f, 0x2b, 0x1}) 19:47:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000280)={0x3f, 0x2a}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) init_module(&(0x7f00000000c0)='/dev/ion\x00', 0x9, &(0x7f0000000140)='/dev/ion\x00') r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r5, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r7, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r7, 0x2}, 0x8) 19:47:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x8000000000400200) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x1f, 0x3, 0x5, 0xffffffff}]}) r4 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) poll(&(0x7f00000001c0)=[{r0, 0x33}, {r6, 0x10}, {r0, 0x500c}, {r0, 0x44}, {r8}], 0x5, 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) setsockopt$inet_dccp_buf(r10, 0x21, 0x80, &(0x7f0000000280)="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", 0x124) 19:47:38 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:39 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0xe, &(0x7f0000000300), &(0x7f00000002c0)=0x2) bind(r1, &(0x7f0000000100)=@un=@file={0x1, './file1\x00'}, 0x80) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fanotify_init(0x0, 0x0) fanotify_mark(r3, 0x2000000000000011, 0x2, r2, 0x0) fanotify_init(0x0, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x2, r4, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x4b48d6e1a2337d20, 0x4) write$P9_RREADLINK(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="ffff030000005b7213f6012e669060983f52e6d6205a68173fdb32d069708d851dc1e55fbdd20f679e1700d7529c05000000009301005e3da4b6ee2e9468940ad8b2bb90c5f1ebfb75cb1e21d415288823d4ed3479585f102b8f263ec8947922e008cd68dbfd46b80d12f623833ca7b3558f4493b6fc4f5ecdc6e1e56ae53439b306eda7e8803c1e64df7c1a45e0b34e996c8cf87b2f81c42c5ff323bded289aebe1fddbf8612c72e00a259abadd716aa4cad178"], 0x2a) sendfile(r5, r5, &(0x7f0000000240), 0x7fff) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) 19:47:39 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x6, 0x0, 0x1c, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_x_nat_t_type={0x1, 0x14, 0x4}, @sadb_x_sec_ctx={0x19, 0x18, 0x81, 0x8, 0xc0, "570cec8008ed5612197574fab8b48db94055fd9dd9ed3c789276724b6f93da63eab2646e4018fba0645dd88c0cb0084e0880c46dbb9f9b89236ece0d681f3e5b8163370130c0b77902a22272b0937edcb0f95e282319e215fea7b44b01fc3fca1a21083f61be131d810a8538ec6b19662568945f49694276a14d1907647fa114e5fdfa5778c0112edfe0516a2cad6f4674aea87fc1a2da619e503a6d6f39042b6e4e12b32fe850f7f77756c3150b454e7058089e8ed5aa6ad96e9b830664185b"}]}, 0xe0}}, 0x10) [ 576.436011] audit: type=1804 audit(1584906459.127:88): pid=24493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir062278519/syzkaller.NS7wsA/807/file0/file0" dev="sda1" ino=16589 res=1 19:47:39 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) umount2(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x0, 0x0, r2}) 19:47:39 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f00000001c0)={0xb02, "12b512269be22ca1be389e127c6f718ca47fd4672c1990dba24fcc2021a60a2d", 0x80, 0xfffffffa, 0x0, 0x8, 0x5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$pptp(r5, &(0x7f0000000280)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1e) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x8bb861e3b76da37f, 0x0, 0x7}, [""]}, 0x14}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:39 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_EMULATED_CPUID(r4, 0xc008ae09, &(0x7f0000000000)=""/49) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:39 executing program 0: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:39 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x2, 0x98600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_ORIGINATORS(r5, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\r\x00\x00\b', @ANYRES16=0x0, @ANYBLOB="00232abd7000fbdbdf250800003905000603154e52587d8a96f7000006002800"/44], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x40005) r6 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) readlink(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=""/87, 0x57) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xfffffffffffffff7, 0x2b, 0x1, r8}) 19:47:39 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000080)={{0x0, 0x0, @identifier="af3db13a1fda6a0328b79432afc96a13"}}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x40000400282) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000)='batadv\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, r6, 0x301, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x111}, 0x0) 19:47:40 executing program 0: syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x20000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000140)={0x9d0000, 0x41, 0x2, r1, 0x0, &(0x7f0000000100)={0x9909cf, 0x7, [], @p_u16=&(0x7f0000000000)=0xdb}}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10, 0x80c00) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r6, 0xc0385650, &(0x7f00000000c0)={{0x0, @addr=0x6}, 0x8, 0x4004, 0x4}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:40 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000080)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:40 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(r1, 0x0, 0x26e1, 0x0) r3 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x401}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff2b}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x70}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000091}, 0x8080) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r6, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r8, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000280)={r8, @in={{0x2, 0x4e20, @multicast1}}, 0x5, 0x1f}, &(0x7f00000001c0)=0x90) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r4, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xfffffffa}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x40}, @NL80211_TXQ_ATTR_TXOP={0x6}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x3}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x9}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x40}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x7fff}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0xa3}, @NL80211_TXQ_ATTR_CWMAX={0x6}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0x8001}]}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x20008080) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x80800, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000200)={0x100000, 0x109000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000000701020000000010000000010000000c00034000000000000000030900010073797a050c0002400000000000007b7d08000540000000020c00024000000000442485d0"], 0x1}}, 0x40008805) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$SNDRV_PCM_IOCTL_DELAY(r5, 0x80084121, &(0x7f0000000400)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000080)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', r8}) r9 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:41 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) recvfrom$netrom(r2, &(0x7f0000000280)=""/4096, 0x1000, 0x2000, &(0x7f0000001280)={{0x3, @null, 0x8}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @default, @default]}, 0x48) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c, 0x80000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r4, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r6, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={r6, 0x40}, 0x8) 19:47:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2f, 0x1}) 19:47:42 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080)='NLBL_CIPSOv4\x00') sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000d0ed94c601e1c200639c821eecc03d32529ba2346dec10e5fbf9a4ec2cf815e7e68697fda74215808d23d5457e7c7d26471502ac6264ac26d7", @ANYRES16=r2, @ANYBLOB="00022bbd7000fcdbdf3502000000080001000100000008d102000100000008000100010000010c00048005000000000000a70071b6baee568517eabd2d9c63cf2f2880a2376fe11d264f1b5ab5e1ea70b68fd31b15f745885b6ac9fd6cfc80e04f43c5ab8bc8437b4ca0cf32d44e79f23200007fa872e2ea0369de7102d605e7f19bf8e43bcb4aa9a3a06b3ac3b744419709d9444c39684b4c49dd9a4ce2edc880c1f46435a1cb268b4bed73fec1f43676e64f3c6ee168c8d58ae8311cce808aaad28cc0f6c3710f84b716f6938908d6fc30c00ce78a9f422291c32f913f5b2c683bced58627594450b07caf7a385731638d7a84861b35"], 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7f}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}], 0x68) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) fchmod(r6, 0x4) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x404000, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000200)={0x3, @bcast, r5}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f00000002c0)='./file0\x00', 0x61c2, 0x1, &(0x7f0000001300)=[{&(0x7f0000000300)="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", 0x1000}], 0x11812, &(0x7f0000001340)={[{@errors_continue='errors=continue'}, {@mblk_io_submit='mblk_io_submit'}, {@bsdgroups='bsdgroups'}], [{@dont_hash='dont_hash'}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x63, 0x64, 0x63, 0x66, 0x30, 0x30, 0x63], 0x2d, [0x65, 0x35, 0x62], 0x2d, [0x62, 0x63, 0x66, 0x62], 0x2d, [0x30, 0x61, 0x39, 0x61], 0x2d, [0x64, 0x32, 0x9827026ae6d5a93f, 0x39, 0x65, 0x36, 0x0, 0x61]}}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@appraise_type='appraise_type=imasig'}, {@subj_type={'subj_type', 0x3d, '\x00'}}, {@fowner_eq={'fowner'}}, {@obj_type={'obj_type', 0x3d, 'broute\x00'}}]}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x2, 0x1ff, 0x1, 0x2, 0x10000], 0x5, 0x80000, 0x0, r8}) 19:47:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80000, 0x0) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) pread64(r1, &(0x7f00000000c0)=""/9, 0x9, 0x401) 19:47:42 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = accept4(r1, &(0x7f0000000080)=@alg, &(0x7f0000000000)=0x80, 0x81000) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r4, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0xeca7}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x50}}, 0x4000080) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:43 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="9c95c7d8c393232153e2a86da0f82405b6d69d974cfd656cd2348d9e58d767d5adb676de58069657f4c86695fc8ed3f339030d86456c4e3e09b81465518142671f60b75fff9b99fa534e1bed559d078d2a1e65e751572eb53ddf479b7e16d47f70ec0150a9ce0c94e47c340ea5d3e88ab2e457ba7f72b684f5b1077be690dec855476134475d90e6779ea61162296be14d93e877209a9692824274cbd790102158698d", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r3, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r5, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000280)={r5, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3f}}}}, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) fcntl$setlease(r6, 0x400, 0x0) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$OSF_MSG_REMOVE(r9, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x964}, 0x1, 0x0, 0x0, 0x844}, 0xc0) sendmsg$AUDIT_GET(r7, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x800, 0x70bd2d, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004000) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400004001f9) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x0, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x15c8, 0x5, 0x7, 0x201, 0x70bd2a, 0x25dfdbfb, {0x3, 0x0, 0x7}, [@typed={0x1004, 0x91, 0x0, 0x0, @binary="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"}, @generic="1b6cb19d7178168362821b49348c8d67966ccd104a538674ec5d506e7bbdd1df891764d956f52c8f26c96ccde0c90bd4943ebd90c17305679650ed63c4813da098c7e42a784332507b93eb6a67439286922df7384434a0b6817f21bcd11551f5b7ef7fea927a0fe5467cc02d232d84551ba513a7642db6cc0821148930a5bdce523a44a14c0ebafe50700bf85252852e24ff768c51880cd21cc1860a6921130c992492060aab60", @typed={0xe, 0x14, 0x0, 0x0, @str='@security\x00'}, @typed={0x14, 0x15, 0x0, 0x0, @ipv6=@remote}, @generic="ac5e45ca4bc15261cb3d0bfa9f4c1b1f09b7ea169b6dbe1c7f66b96f68c1735d4e15e9fa52a7e9202e22f68f7a7bc3a07c1d5906c239164b257b3e287949aa57bc52c0122a089e82c34f385463f5ed6c4232ade096a102b7cbcd4856c6bb3d3d9aba882fcf773408a0cc4ef0597acd4dc10adce5ea1ca794c5ced56b66ceda525e14d1771414f35fcc259a6e5d17c36533f46c1fa4c5c223505d73d24b99182b8e06a55747e4c158626ba5b6353148cb43b5d025350f39d1bf6112dc470b0eeeb0f58c73c6", @typed={0x8, 0x90, 0x0, 0x0, @ipv4=@local}, @generic="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", @generic="b707ac67ae5be13e7a3402fb3c7e51323584be4e0ea66b1faca10d4be654166ff7bb8ddf55994bb50947324d7a6dba3083d32e8901815b1963ed92e1fd670fdb53339a7efceee860886ef4acc980ff325861eb9426253a27174e528161772fb1b813376154b918d092e65bc4d3926ea2c810a9e5a05b290e619b2739ae52d7373fdd247e0e59667466ccd46726e4c720f76fb0e200524557e87ea758d10104af9dc6ecfc4228fb88ed02754b53a0cfa3016900b02dcff4411bb45f249d4d0bc63918f73f688ac324168eba8bac8bb30850581b830cab", @nested={0x157, 0x48, 0x0, 0x1, [@generic="93817f7e04f1a39447ed8165a67aba36798e8c5064bc5e7dbcdeaa5e8b470c0ec218cf1a5feb615fc0d185919ea2dda21ac5c61e47726ea1229f0241758393f89199a7bf97adb2476492ca156ed26260431487e117f8be17588289a68bf0e5e50bd10d8f49ca587a06a890ebc60c28f68af8f7d696d056b339bac814cd70274ed62e3080e67d73b4bb04565e05f71ba8a289dc3e0ae7394c211ad76075c930fea0101401484f0855edfc7ceb0c824ecd1a141c5ca744141fc815d13056efc90fcbb307568710454d177dd758141988528398391e4fd15c39305d576c038a6f", @generic="67f32e92b9ea22b83409e92b7a5e98bf174431b3b369dd016bb7e4ae39ba20ad438b6cbd28b80df18af892d871f0461bac1e6c9041a38c2d7054acb09b6c8baa2f2be869db3991b05abefb445efc4fdbe528555965e2e2d557119b81d18558d2586a6e143ccfdb528d1b8b0cbf4ebcd2", @typed={0x4, 0x83}]}, @typed={0xe9, 0x3f, 0x0, 0x0, @binary="c44798e64bdd9adcd81315eba5e766a3cdb890a4e6da3650cbd351efb80cfb4a522e765c7d9a4f2c888abe9b0f1ac556c085fafe3cd59147511a86c78fd407e348f7b900216b2d6436e2ea52540b583f3f1cccca09fd7ce41538c0e948150488b8db5d36f1ee2e6ed562c6af8ead89112751e9a73cb009b1352c210dc3ccfa3514335520159a7655cabaf399748f6c49c650f86cf1268caafd871a8fc2c88bae535f1bbb73f29a74eb65818a0ff63a9659c56d336f17340b6f058cf72cfc135515b04c9a5a9e71469cc900d7debb20f8143c9e65d99f0a3ee314f18f6d885f62f49d549104"}]}, 0x15c8}, 0x1, 0x0, 0x0, 0xc040}, 0x84) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:44 executing program 0: mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000080)={{0x80, 0x7}, {0x9, 0xff}, 0x8, 0x1, 0xfd}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) flock(r1, 0x2) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r8, @ANYBLOB="00042abd7000ffdbdf2502000000080002000200000008000100030000000800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="000000000800020002fff200e89e1225d6b921de1b628333a7d008e813bdce812e3646560a593c18039969b10bba1615364552fd28726d93eac3f7e7ebf49bf3d76cb5b07547ec790bc49760580000941c"], 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x3c}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_DIRTYFB(r6, 0xc01864b1, &(0x7f0000000080)={0x1, 0x0, 0x914a, 0x4, &(0x7f0000000000)=[{0xf0, 0x400, 0x8, 0x14}, {0x6, 0x7, 0x2, 0x9}, {0x8001, 0x800, 0x800, 0xffff}, {0x4, 0x9, 0x2, 0x2}]}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x7ef4, 0x21, 0x1, r4}) 19:47:44 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x20000, 0x0) getsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000140)=0x8a2, &(0x7f00000001c0)=0x2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000000)=0x78) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) 19:47:45 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x3f, 0x2b, 0x1}) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2040001}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x4, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8d14}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8080}, 0x10000) 19:47:45 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000470bbf33df5741f7029c1b0aef4bd900000000018000000000000000000000000000ffffffff00000000"]}, 0x117) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0x3f, 0x14, 0x1}) 19:47:45 executing program 0: socket$inet6(0x10, 0x3, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) getuid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockname$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x20) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) mknod$loop(&(0x7f0000000000)='.//ile0\x00', 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = open(&(0x7f0000000080)='./file0/f.le./file0\x00', 0x0, 0x10) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') [ 582.759576] overlayfs: filesystem on './file0' not supported as upperdir 19:47:45 executing program 0: r0 = epoll_create1(0x0) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@v1={0x2, "dfea200a179492492924e83469162c2e6792a8"}, 0x14, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r4, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r6, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f00000001c0)={r6, 0x1, 0x9}, 0x8) r7 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000001500)) 19:47:46 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x45, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000000080)={0xffffffffffff32a5, 0x0, 0x10000, 0x7fff}) ioctl$DRM_IOCTL_AGP_ALLOC(r7, 0xc0206434, &(0x7f0000000100)={0x715, r8, 0x1, 0x40}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r9, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001800)={r10}, 0xc) r11 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x208}, {0xffffffffffffffff, 0x2010}, {0xffffffffffffffff, 0x403}, {r11, 0x100}], 0x4, &(0x7f00000002c0), &(0x7f0000000300), 0x8) r12 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r12}) 19:47:46 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) unshare(0x8000400) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = open(&(0x7f0000000000)='./file0\x00', 0x40, 0x0) mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x3, 0x2, 0xec, 0x7, 0x0, 0x2, 0x82102, 0xf, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffffe1, 0x1, @perf_config_ext, 0x808, 0x8, 0x6, 0x0, 0x74e, 0x724c1029, 0x7}, r2, 0xb, r1, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 19:47:46 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) 19:47:46 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) clock_adjtime(0x1, &(0x7f0000000100)={0x7fffffff, 0x0, 0x4, 0x7, 0x8, 0x9, 0x2, 0xffffffffffffffff, 0x3f, 0x32a9, 0x0, 0x9, 0x20, 0x7, 0x6f9b, 0x45ef, 0x63, 0x800, 0x81, 0x800, 0x80, 0x7d4d, 0x7fff, 0x7fffffff, 0x9, 0x5}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) 19:47:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x1000, 0x100000100, 0x0, 0x2}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0xff, 0x9e}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="66648d", @ANYRESHEX=r2, @ANYBLOB="2c07006f746d6f64653d30303030f7511830303030725f69643d0000000000000000000000fd37000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c5e743f262559d78161f012eb9dbcb900"]) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000100)=0xfffffffe) writev(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000300)) r3 = creat(0x0, 0x0) fallocate(r3, 0x0, 0x0, 0x96) 19:47:46 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) 19:47:46 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x4) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) 19:47:46 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) getsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000080), &(0x7f0000000100)=0x4) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r8 = dup(r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) 19:47:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000009280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/208, 0xd0}, {&(0x7f00000003c0)=""/198, 0xc6}, {&(0x7f00000004c0)=""/162, 0xa2}, {&(0x7f0000000640)=""/195, 0xc3}], 0x4}, 0x2}, {{&(0x7f00000094c0)=@isdn, 0x80, &(0x7f0000003000)=[{0x0}, {&(0x7f0000001d00)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000140)=""/42, 0x2a}, {0x0}, {&(0x7f0000002ec0)=""/87, 0x57}, {&(0x7f0000002fc0)=""/40, 0x28}], 0x7}, 0x6}, {{&(0x7f00000030c0)=@pptp, 0x80, &(0x7f0000003600)}}, {{&(0x7f00000036c0)=@sco, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003840)=""/122, 0x7a}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000003a40)=""/8, 0x8}, {0x0}], 0x7}, 0x3}, {{&(0x7f0000003d40)=@caif, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000007540)=[{&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000000740)=""/246, 0xf6}, {0x0}, {&(0x7f0000006280)=""/94, 0x5e}, {&(0x7f0000000880)=""/4109, 0x100d}, {0x0}, {&(0x7f00000073c0)=""/137, 0x89}, {&(0x7f0000007480)=""/173, 0xad}], 0x8, &(0x7f0000000180)=""/99, 0x63}}, {{&(0x7f0000007d80)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000009140)=[{&(0x7f0000007e00)=""/4093, 0xffd}, {&(0x7f0000008e00)=""/126, 0x7e}, {0x0}, {&(0x7f0000008f80)=""/46, 0x2e}], 0x4}, 0xfff00}], 0x7, 0x0, 0x0) socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000880}, 0x20040001) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6d18af15637eebe9}, 0x8000000200036150, 0x800007b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 19:47:47 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x100000000000005, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0xb, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) 19:47:47 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000140)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x4002, 0x0) read$char_usb(r7, &(0x7f0000000100)=""/41, 0x29) 19:47:47 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x12, r6, 0x0) r7 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, r7, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, r7, 0x0) ptrace$pokeuser(0x6, r7, 0x4, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000000)=0x0) fcntl$lock(r8, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x1cf, 0x6868, r9}) r10 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$EXT4_IOC_MOVE_EXT(r10, 0xc028660f, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x7fff, 0xd4d, 0x2, 0x1}) 19:47:47 executing program 0: stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 19:47:47 executing program 0: sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x4}]}}]}, @IFLA_GROUP={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x44}}, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="61c39374798cd9a8c418b198a8", 0xd) [ 584.935632] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 584.969651] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 19:47:47 executing program 3: open(0x0, 0x0, 0x0) lsetxattr$trusted_overlay_nlink(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0xfffffffffffeffff}, 0x0, 0x0, 0xff, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8020005) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fallocate(r2, 0x0, 0x8003, 0x8020001) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000005c0)='security.evm\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="0500040000001e00bc8e51d2c261f51cb550360544153c2e821bab25ded839ae207e86b61e2927866850c1e0e9b2fbaaced5dafad8a3a31c102fcf5c6a1ee76a470937d9ada791845b06a3c7f1a51b963f03dd0d9f6e9b4b96f830c13abe7d31da72f151de1f6a936821bccd616e9a46255da6238484555178a3190fef592dffd583c1fed666e01f3db09481be40a0c562b6173466228969d4fa5d97ed4586099b6a087737f1c147c796bc87c6ca633e57d75802a7ddaa6832c9cf5041f42bb8d2ff70ca0b"], 0xc5, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r5) readahead(r5, 0x6, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r4, 0xc0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x5}, 0x0, 0x0, &(0x7f0000000140)={0x3, 0xa, 0x80000000, 0x3}, &(0x7f0000000180)=0xff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=0x7}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x10, &(0x7f0000000300)={&(0x7f0000000080)=""/125, 0x7d, r6}}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000380)=""/74, 0x4a}, {&(0x7f0000000400)=""/58, 0x3a}, {&(0x7f0000000440)=""/207, 0xcf}], 0x4, 0x401) socketpair$unix(0x1, 0x2, 0x0, 0x0) [ 584.985867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 585.085234] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 585.102124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 585.109604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 19:47:47 executing program 0: sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x4}]}}]}, @IFLA_GROUP={0x8}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x44}}, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="61c39374798cd9a8c418b198a8", 0xd) 19:47:48 executing program 3: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r3 = dup3(r1, r2, 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000040)=r5) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000003c0)='autofs\x00', 0x0, &(0x7f0000000400)) [ 585.247868] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 585.278732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 585.288256] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 585.401981] autofs4:pid:24742:autofs4_fill_super: could not open pipe file descriptor 19:47:48 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0xff, 0x0, 0x50d, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0xff17}, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x1039c) socket$packet(0x11, 0x0, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f00000002c0)) sendto$inet(r0, 0x0, 0xffffffffffffff12, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r2 = dup(0xffffffffffffffff) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000200)=@netrom={'nr', 0x0}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d003f00efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0xffffffffffffffd0, 0x401c005, 0x0, 0xffffffffffffff36) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) [ 585.466921] autofs4:pid:24743:autofs4_fill_super: could not open pipe file descriptor 19:47:48 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x7fff, 0x8006, 0x5, 0x4, 0x101, 0x2, 0x7b, r4}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r5, r6, 0x0, 0xf03b0000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 19:47:48 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x5, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000680)='./bus\x00', 0x0) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, r0, 0x800) fcntl$setstatus(r1, 0x4, 0x6900) ftruncate(r1, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000000)=0xffffffff, 0x4) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) ptrace$setopts(0xffffffffffffffff, r3, 0x7ff, 0x1) lseek(r1, 0x0, 0x2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r4, 0x0, 0x8001) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000080)={0x1, 0x31324d59, 0x1, @discrete={0xfe7}}) r5 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) dup3(0xffffffffffffffff, r5, 0x80000) syz_open_procfs(0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) [ 585.754694] audit: type=1804 audit(1584906468.447:89): pid=24755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir062278519/syzkaller.NS7wsA/853/bus" dev="sda1" ino=16620 res=1 [ 585.958484] audit: type=1804 audit(1584906468.647:90): pid=24756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.0" name="/root/syzkaller-testdir062278519/syzkaller.NS7wsA/853/bus" dev="sda1" ino=16620 res=1 19:47:48 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x161182) r1 = memfd_create(&(0x7f0000000240)='\x11^\xc5', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="b8", 0x1}], 0x1, 0x1000) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24000000) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x460080, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000200)={0x7, 0x7, 0x1}, &(0x7f0000000280)=0x28) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f00000002c0)='./file0\x00', r6}, 0x10) r7 = dup(0xffffffffffffffff) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000000000)) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000080)=r7) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x3a24, 0x206, 0x0, 0x5}, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) 19:47:48 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) lseek(0xffffffffffffffff, 0x0, 0x7) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000200)={0x9, 0x80, "066e7bdc375068e62d4f63ae454fe5a8a7b4b8bc562e7887", {0xffffffff, 0x10000}, 0x3}) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r3, 0x4, 0x44800) io_submit(r4, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000000, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x8200}]) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000400)={'raw\x00'}, &(0x7f0000000480)=0x54) ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000003c0)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000280)=""/27, 0x1b}, {&(0x7f00000002c0)=""/191, 0xbf}], 0x2) 19:47:49 executing program 3: socketpair$unix(0x1, 0x0, 0x0, 0x0) dup(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000013c0)={{{@in=@rand_addr=0x610000, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0x2, 0xff, 0x7ff}}, 0xe8) getgid() sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, &(0x7f0000a8a000)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0xe, &(0x7f000059aff8)={r1}, &(0x7f000034f000)=0x2059b38b) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x401, 0x3, 0x2, 0x1, r1}, &(0x7f0000000080)=0x10) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="0001"], 0x6) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0207000902000000a8a988ea0000007ba79574350379f4e1894cdddb4e667263a7192ff58ab16f88b9668b145e6313f3ee41e2f28204de687a25340b61976cae3a9a9e90785afd31885d362411ef23cd8f5f819b383803f6c871ceef4aa6dac6acb5ded04e543506a3bfcb71eda4bf258d5e649caab8d914916ee79d501a3aa4f0972e376bb9f94c5268f7ff158864d444d4bf66e8d85cc74a0000000000000000000000781f1a3ea4c057bfc8af28e2b90e1d3dd7fe6e38d2d29be9a5adff"], 0x10}}, 0x0) 19:47:49 executing program 0: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xff3b, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b005b0010000000000004140e000a0002000000dc2976d153b4", 0x235}], 0x1}, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) lseek(0xffffffffffffffff, 0x0, 0x7) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000200)={0x9, 0x80, "066e7bdc375068e62d4f63ae454fe5a8a7b4b8bc562e7887", {0xffffffff, 0x10000}, 0x3}) r3 = creat(&(0x7f0000000180)='./bus\x00', 0x0) io_setup(0x83, &(0x7f00000003c0)=0x0) fcntl$setstatus(r3, 0x4, 0x44800) io_submit(r4, 0x6, &(0x7f0000000540)=[&(0x7f00000000c0)={0x2703000000000000, 0x0, 0x3, 0x1, 0x0, r3, &(0x7f0000000000), 0x8200}]) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000400)={'raw\x00'}, &(0x7f0000000480)=0x54) ioctl$TIOCGETD(r3, 0x5424, &(0x7f00000003c0)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000280)=""/27, 0x1b}, {&(0x7f00000002c0)=""/191, 0xbf}], 0x2) 19:47:50 executing program 3: gettid() timer_create(0x0, 0x0, 0x0) tkill(0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000000)="120000001a00e5ff007b00000000008000", 0x11, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x3a4, 0x0}}], 0x11, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0xe1, 0x0, 0x0, 0x4, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000, 0x5, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0xd, &(0x7f0000001a40)={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast}, 0xc) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev, 0x6}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x100000002, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/softnet_stat\x00') write$FUSE_STATFS(r4, &(0x7f0000000400)={0x60, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x5ee1ddab, 0x9, 0x10000, 0x7, 0xfffffffe, 0x9}}}, 0x60) setpriority(0x0, 0x0, 0xffff) clone(0x44485fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)={0x1, 'bridge0\x00', {}, 0x6}) mount(&(0x7f00000001c0)=ANY=[@ANYBLOB="2f6465762f6e756c6c6230005c0000be09c411e5c2e07b618570e426f61200cf23df0ca34bdaa89f0213d168d28265a8fde3ac4868518a650001000000000000cbc6ae4cd601982c6f9315f5572fc871ade98f9092000000000000002011c9000000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) 19:47:50 executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x2}, r4, 0x2, r2, 0x0) getpid() bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x11, &(0x7f0000000780)=ANY=[@ANYBLOB="b702007cf5ea6e8a86f5f8f6e8ecd33afafd000b000000bfa30000000000000703000000feffff7a0af0fff885cc07a6a4f0ff00000000cc060000ffff4000000000000000000065040400010000000404000001007d60b7030000000000146a0a00fe00000000850000000d3f32996ce3c05d9e0000009500000000000000f4c3bd3df581799a04d9afc8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x37, 0x0, &(0x7f0000000040)=0xc00) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x13, &(0x7f0000000480)=ANY=[@ANYRES16, @ANYRES16, @ANYRESOCT=r5, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRES64, @ANYRES64, @ANYRES16], @ANYRESDEC, @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES32=0x0], @ANYRESDEC=0x0], @ANYRES64, @ANYRESDEC, @ANYBLOB="6f6734595f30335ea6324027d4ec3ea07bcfd9f1f3453d0112414514036228a5242d60d8fc1c35697225b82d0df9d0c2c1ebdcf6a39621a5284dda7927c14bca98122b42637fa557256012", @ANYPTR, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000f000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0x135, 0x0, &(0x7f0000000980)="b9ff0300000d698cb89e40f000001fffffff00004000632f77281fc1dc7da1e59b9b032c503f4e4ea1fd944fe7a09bbf2ead865452a4b94875026e09f10e2d6afcedd1c104d7df88658950d11a6452e69f886ba59d4d05b036bfc300bfec3ac6acbbcdfa05a4562aba538511d0da195eb847e3be97841b6343113d5d2d5f60781645825474f82c90779a131c309590cb726a1a06cf4d9e93c32bbd4c00cd08c1f7a54da8834a0bb747be09d8fd05000000000000000aedfd29577eb1de6d2c5b3ccc8349fdf017b9063789adac4fd5f8492d97f011d8c8530be088546f8edbebd19070d59870216a8afffeffffffffffff8c39902a70e8a2f44a7c44582844bc0fe1aad54983bd0000e2b756866b309733a064c0c74939e85f5ce95176b22b710a970fb2de8a36a012947dc856dce500e34e945d28", 0x0, 0x8, 0x6000000000000000, 0x87, 0x0, &(0x7f0000000600)="4287f44ab08498ef4cc85c92b5294abc4746bc44e9c2c53f1078549f1843c312b1c6d0ec9b86cdb9f3dced5faf78e910d75530be0c46bf2ad4fa692803c6287abf3300168a564874e607b5208a79624b935fce41ba1efaed78d74d732930952661af8c2ed87fc790e2d461b3fa21db9e58baa781573ea0e5340000000000000000000000000002"}, 0x40) [ 587.761303] ceph: device name is missing path (no : separator in /dev/nullb0) [ 587.848549] audit: type=1400 audit(1584906470.537:91): avc: denied { getopt } for pid=24822 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 19:47:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockname$packet(r1, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010800000000000000000000100000f94a14dd9ec5f92558111be16f101611f12bd70235729b855a4693021df613a18e3d8b33f641866699959a55f22fae769c", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004800f3f9f36276b656a894d90f721524d1cc5ed5163fb410efaa4bb238c61bd4f85baa200b95c9ee95a29381cd465d3207fb2d14266798d9d5e866ac599f639c8cdde1ebc64c89a257561edfa87fffdd98bc32f8bfffca268e8f035377b5cbb3aff1517266c92fc9f131d5db547c9f33a45731c1d473f3180ba92de376d079853dd1392", @ANYRES32=r2, @ANYBLOB="1400030076657468315f6d616376746170000000"], 0x3c}, 0x1, 0x0, 0x0, 0xd0}, 0xc4) 19:47:50 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0xf}, 0x1c) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) sendfile(r0, r0, &(0x7f0000000040)=0x3, 0x2114) sendmmsg(r1, &(0x7f0000006d00)=[{{0x0, 0x1002000, 0x0}}], 0xc6, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000080)={r1}) getsockopt$inet6_dccp_buf(r4, 0x21, 0xd, &(0x7f0000000100)=""/163, &(0x7f00000001c0)=0xa3) getpid() [ 588.002607] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 19:47:51 executing program 0: r0 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, r0, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, r0, 0x0) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/mnt\x00') r2 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x401}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff2b}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x70}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000091}, 0x8080) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5afbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05752981", @ANYRES32=0x0, @ANYBLOB="b3ef461584d1f8f0"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r8}}, 0x20}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000100)={0x4c0, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x101}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IE_ASSOC_RESP={0x49b, 0x80, "aec6b75c6bec4795eaea3802ccb46db59b2560806f4c373832ed6ec6835c11a6a44ec858d396ca46bb299c3df54ff6b824d7dae1f76707b9af12e76cd7875d7c5ffd309c739c0ad58dc2054fa4dd4929ab9c8356d82a8c36f7de3f0d1d3fac2700592bf5498d3f651ffa07d854abf7a38dba63abf50d52032993eaf9d416450f745cb45756a1ba7eb05f3a2066cf71389b1e917ae14f6c1f56e929ca5ad289009b322e5f04a27f490faca30ba5c67c262093499e60df4b27f98e0582a8d2b983db066b84740a90826276fd76f0e8a93868e12694220c8bfa632784d3f5dc76bc7f3b0bcba538e82e7590a6a901656f17c6f4a49b6e6175c8a357886edddbbae63cc02f1f9fdd75dc35269d1e2cdb7e01a8d06ec74350fb2a96e9e1279b3770de21b591d325b2302e204af21e062a81a29cd8f325352297538fe09a27eb3eabe7e878f199b91437f1a1eb99e38d249dba3e6c130c52dfdbce0d5031dd313742f507a2517327b88521e73f7124ee5955970e13ddb376c580214c43b2571ea37412bb920e119ed327e99f6a5e9cb665f032264620a5f7045e811daf251cf1f9db8cabb4bbe886344cff625866be3eba05301a51ca898bad0293b07c554b19b717b3a34ef9556344c6f2fdfe23468786e7cd6ecef74640728964a8822a07a4f8f3f2743baa67687ed6504c9b645afbf05e52c265992714340307eb81430520cf5333fcc23e39c05da62af9955c1707aaab5d36439261ca9cd07193b5e4215670c185bf1b634081ab502f51235c522267f564b953489808bb535f125fd0b2b56686d31063e2566088b296d897224ca2568f0cabf4fc2e5150d87dffc2e936f996594c81f5c87ff99a75c6b84553fd929fecdd1a6823c1c05ef1b80e5506f4810000fae5d66bb049410c3b4be980a8a6155b98ea96740578a68dd6fb86d7352314e14f2f56e2934202d9eb4322ffcaf93a2387292f0b9412136a43dda16683feebe1068945471316cb13218eb854aaf7105ba46e06f9ef62b548ef86e7f7f85dcc965c2922264de8fbf13ac4e3a290d615318f1006b58bb7d59d2d3a7565bf2c85f1fa84f0c59ec9947d12b38f8ce9cc9cf574c746609e180b84a0b8fe1804e9c02e8664a2c8066c5a1e32e7902bd40a00a92967e5af854d0da6b356d6f6512e9924759fc41eedd1f1eac9efb809d218247e4dc7b5ff51b8d65156ed6105ff285c3ccbccdb149c0bc72c0da49de015117797021defbd0cd0f4c40bb0996cee35037e0d93ac3b4973f18c110200740c1f03a29cd2d8fca1d3e1949c1ce5106ce752fd4411dc2f2e1ab0972fc2956a645ac1cf1fbb436335731ed0e73c750031013c2f2a2a7aa2324d983451834ec655dd5483f01a66f9bdd997ed60654110734d6b2316377c1798c3899fe75ae483ae5d4dfebca249c81d52467c0eeaeaff948ab2a1dd44ccee3cbf04d40086a034a47932b50b4c4f79514bcb282e8e08daa5a0e45098c2c19bc3e2dffe829edc459f8bd18e9c545be90879f5bec7b41298d0cdfdf21e64114d1703235ef24fbb30f2428dece6db39ec3322d4f8d54a33be29a16c587a0f05eebfae5e004aec49790daad3ba730f5f3cde38dc38c0c388be3686d2fd571d80303fb82023162f0cec8e552b673761db444404c750"}]}, 0x4c0}}, 0x240008c0) ioctl$TUNSETSNDBUF(r1, 0xb701, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r9, 0x227b, &(0x7f0000000080)) [ 588.465310] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 19:47:51 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_emit_ethernet(0x10e, &(0x7f0000000300)={@empty, @broadcast, @val={@val={0x9100, 0x1, 0x1, 0x1}, {0x8100, 0x6, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0xab, 0x0, "8d", "943984", 0x883e, "aff6b494e2c48d195c0bc28cc3e62a0c0a3229afcf5669786d15f549539119d5ad36937bd2c1677d39916dc08b58b698c283e403cb38e648d98fd9ee254bb355770d6f8010a2717243410a8ebbe9758d54149fcee124641c48cd8aa97942b6a28cc3619a163c04286bf2fcd09364a1fcdb90ff19b3ea4d4fdfb6e0e15db305dfded7035d45d92a227999faa3143ef1ab38d9fc4a8ae3aced9a9ec0f3d74f49e97fc5e20887a0b974dc0104065bac25c17cb2916e69e2a3eda048afccab1e0caeb0ba4e6c4ff353773f91fd404676b872892537d2ddb744a2eb7649ef0e4457bc58c095f1421dceee16ef09d3e1061389"}}}}}, &(0x7f0000000040)={0x0, 0x3, [0x625, 0x123, 0x768, 0x384]}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$overlay(0x400019, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2b6972c92e2f62757b2c6c826965726400043d2e2f6275732165b935648df3047751c24770e779c561ca3fcf5003ecdd5cba898dfefeabe5a2ab66a4cbdb579036fba0f4a3f994d5f69f105a1cf49839f62bf3bef6f37da0d1cf74c90d290bf7b4e23befd7773597292dc899221a446512966a6189a5ea663c98f81db9848d03bc570d97f3bab6e7d26864b29cd257ceecb1f24d9f85454ee9dc39"]) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r2, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r4, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={r4, 0xfc01, 0x7, [0x7, 0x5, 0x6, 0x6, 0x1, 0x3ff, 0x2]}, &(0x7f00000000c0)=0x16) [ 588.579964] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 19:47:51 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@numtail='nonumtail=0'}, {@uni_xlateno='uni_xlate=0'}, {@shortname_lower='shortname=lower'}]}) 19:47:51 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0xd5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000008, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x8ce67fc4149fab68, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) getsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000240)={@loopback, @loopback}, &(0x7f0000000280)=0x8) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x3, 0x3, 0x201, 0x0, 0x0, {0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7f}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x1ff}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x8001}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c080}, 0x80) [ 588.745827] FAT-fs (loop0): bogus number of reserved sectors [ 588.756403] FAT-fs (loop0): Can't find a valid FAT filesystem [ 588.819166] FAT-fs (loop0): bogus number of reserved sectors [ 588.829593] FAT-fs (loop0): Can't find a valid FAT filesystem 19:47:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)) r2 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffd, 0x6d1a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup2(r6, r2) epoll_pwait(r7, &(0x7f0000000080)=[{}, {}, {}], 0x3, 0x80, &(0x7f0000000140)={[0x4]}, 0x8) sendto$inet(r4, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r4, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x9000000) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vsock\x00', 0x83, 0x0) ioctl$PPPIOCGDEBUG(r8, 0x80047441, &(0x7f00000002c0)) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000300)={0xb68, {{0xa, 0x4e24, 0x9, @loopback, 0x3ff}}}, 0x88) [ 589.081082] Unknown ioctl -2147191743 19:47:52 executing program 0: r0 = socket$inet(0x2, 0x80803, 0x4) r1 = socket(0x10, 0x1, 0x1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f00000001c0)=0xe8) r5 = socket(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) accept4$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0xa5016, &(0x7f0000000640)=ANY=[@ANYBLOB='mode=00000000000000000000006,mode=00000000000000000000000,mode=00000000000000000000001,dont_appraise,rootcontext=sysadm_u,smackfsdef=%system,uid>', @ANYRESDEC=r2, @ANYBLOB=',uid>', @ANYRESDEC=r4, @ANYRES64=r1, @ANYRESOCT=r8, @ANYBLOB="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"]) r9 = socket$inet(0x2, 0x80803, 0x4) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000000)=0x1, 0x4) dup3(r0, r9, 0x0) 19:47:52 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}], {0x14}}, 0xb0}}, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200000, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x6) 19:47:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001700)='cpuacct.usage_user\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000001c0)="0f6ce3f3", 0x4}], 0x1) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x7, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8001}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7fff}]}, 0x54}, 0x1, 0x0, 0x0, 0x8801}, 0x15) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000040)={0x80000001}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 19:47:52 executing program 0: socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x1}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x2, 0x100000b8, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000000980), 0x10a9) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r5, 0x4, 0x46000) lseek(r5, 0x4200, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x1ff, &(0x7f00000004c0)=0x0) r8 = open(&(0x7f0000000180)='./bus\x00', 0x143042, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x8000000}) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) r9 = open(&(0x7f0000000080)='./bus\x00', 0x58000, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000000)={0x10, 0x0, 0x1000000}, 0xfffffffffffffddc}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0}, 0x40) r11 = dup(r10) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000600)) open_by_handle_at(r11, &(0x7f00000003c0)=ANY=[@ANYBLOB="dcd725780000006305000050ac3d99c7fe46ea0c30dc5fb003ce57abf581589a1fa2875f465fd4216af0736698b0ccffb28d0d3248c76e4000000c72bce933ebf6430c98c67d1f6027651a764f48d3332493d610bf512d4cbf955f8de59053cc6f6125c3af48130f4e75e60a9ac5c0bcd7840accd81156000000000ca4fca55d8a60f4a5dff4cb28f5518fa69b5afa473d41e6d648da15e67bdf68ce0eb143ce9d766409588ba9c5cc18925a5f092b84177f9ceaefcf3a62191affaf9aec8eaab033f4de1ecf4110a40949eb7cbec3d3013e68382a901b90b7c8beba88cd29e11a37f2a8845a4db427b49d6f"], 0x12da00) sendfile(r5, r9, 0x0, 0x8400fffffffb) sendfile(r4, r4, &(0x7f0000000100), 0x8080fffffffe) 19:47:53 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r11 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={r12, 0x0, r2}) r13 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r13}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000100)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r7) ioctl$int_out(r7, 0x2, &(0x7f0000000080)) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r10 = dup(r9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) r11 = dup(0xffffffffffffffff) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x1c, 0x0, 0x301, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00501068864c07dfbad81a9fd9ebd4cad6c0840cd7bb2ead1a84f7a006d45f75e124be6fb804604e13eac266668e6a48a98a7df000fa32d14547c2c754a66de5d44f9d0425c2f00000000000000000000000000000e67da57e604465310aa93fd8e2a5d5", @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf250400000005002d0000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:54 executing program 0: socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5afbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05752981", @ANYRES32=0x0, @ANYBLOB="b3ef461584d1f8f0"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r8}}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@bridge_newneigh={0x30, 0x1c, 0x200, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x0, r8, 0x8, 0xc, 0x4}, [@NDA_LLADDR={0xa, 0x2, @broadcast}, @NDA_PROBES={0x8, 0x4, 0x2e1}]}, 0x30}}, 0x0) [ 591.344435] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 19:47:54 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000100)=""/179) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) connect$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, @any, 0x7}, 0xa) r7 = dup(r6) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000001c0)={0x0, 0x0, r4}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x2) r11 = dup(r10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) [ 591.422921] bridge0: port 4(veth9) entered blocking state [ 591.432186] bridge0: port 4(veth9) entered disabled state [ 591.441615] device veth9 entered promiscuous mode [ 591.460457] device veth9 left promiscuous mode [ 591.465275] bridge0: port 4(veth9) entered disabled state 19:47:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) dup(r1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r4 = dup(r3) close(r0) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x42) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000140)={{0xffffffffffffffff, 0xe3e4009ed5119c84, 0x9, 0x1, 0xfffffff9}}) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r8}) r9 = dup(r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) [ 591.569738] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 591.619439] bridge0: port 4(veth9) entered blocking state [ 591.626789] bridge0: port 4(veth9) entered disabled state [ 591.654337] device veth9 entered promiscuous mode [ 591.689965] device veth9 left promiscuous mode [ 591.694743] bridge0: port 4(veth9) entered disabled state 19:47:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x30c580) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000080)={0x7, 0xd, 0x1, 0xffffffffffffffff}) r7 = dup(r6) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r11 = dup(r10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) 19:47:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x800, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000100)={0x2}) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000140)=0x5, 0x4) r3 = dup(r2) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r6 = dup(r5) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r3}) r10 = dup(r9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) 19:47:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r7 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r7, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r9 = dup(r8) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r10) r11 = fcntl$getown(r10, 0x9) write$P9_RGETLOCK(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='-\x00\x00\x00\x00\x00', @ANYRES32=r11, @ANYBLOB="0f002f6465762f6472692f636172642300"], 0x2d) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:54 executing program 0: syz_mount_image$msdos(&(0x7f0000000080)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xffc00000, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="0400000000000000666174000404090a0200027400f801", 0x17}], 0x0, &(0x7f0000000000)={[{@fat=@nfs='nfs'}]}) r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) getresuid(&(0x7f00000001c0), &(0x7f0000000340)=0x0, &(0x7f0000000380)) lstat(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x255, 0x3, &(0x7f0000000140)=[{&(0x7f0000000400)="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", 0x1000, 0x2}, {&(0x7f0000000240)="9912f93da33911ede23a0d9543df1ae0a778d5a7cf7b184344fbad36b472bccd5a0be5d8a97f0e077944e53681c3f302b9369ca4bf90fc39d3d72c46e1d35d4291e43f900bc92e6eec56010eccdd829868be7681f24f966b92703843010b2a3fe089e4e8a252eacb77745f36fa445f44d4bbf1e613ac5c785de439d3f54ba213093586b8bc19461fcf5f4dc6fbce9135785c5c93054f6943e0c488c49e62fbeb7186cbd1abfd3414a9a351cea2906801a6dfc4c7c397428de5a088beb08c2a8668eacfb338f12fd58bdac72eecce006c963225c751246b2f", 0xd8, 0x75}, {&(0x7f0000001400)="e11889ed5b2b23b2ec03229dfd16b6644ea7d7d6b2c34aca8871f3107a37206f8f6dc7ed3025b5de6d6963bb8e34744ec3177129e88a0f5f214b08ace754d906093a5dbc4f36812d7085da5392640058bdc94ebbd43b565dab85ea49e90c4e464b2e9b4886242c663714bb50af79d667f0e4816e1d9371d1f456c82e9eba09c2eb38c33d3591f1a841318fb0867f40f1e05683b8025afe613fe6a70d9c4be6f0a6cfe234e8ae674dfa64b74f7d3859202f895b75abe77c0b263e2de65da46a59275e62a8e42ab1d7a02ec769f9a56677e7871b611ca34d245517fb40ece39a1aa4367e2130ec", 0xe6, 0x1}], 0x21000, &(0x7f00000015c0)={[{@thread_pool={'thread_pool', 0x3d, 0x94}}, {@nossd_spread='nossd_spread'}, {@compress='compress'}, {@autodefrag='autodefrag'}, {@acl='acl'}], [{@uid_eq={'uid', 0x3d, r1}}, {@fowner_gt={'fowner>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nfs'}}, {@pcr={'pcr', 0x3d, 0x1d}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@uid_eq={'uid', 0x3d, r3}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TUNGETIFF(r5, 0x800454d2, &(0x7f00000016c0)) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5afbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05752981", @ANYRES32=0x0, @ANYBLOB="b3ef461584d1f8f0"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2802000010d2f00dfe00"/20, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x3}}, 0x24000084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r8}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000018c0)={'tunl0\x00', r8}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a00)={&(0x7f0000001900)={0xc8, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKSTATE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @ETHTOOL_A_LINKSTATE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 19:47:54 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x8000, 0x0) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r5 = dup(r4) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000040)='asymmetric\x00', &(0x7f00000000c0)=@builtin='builtin_trusted\x00') keyctl$clear(0x7, r6) r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r8 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r8, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r10 = dup(r9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 19:47:54 executing program 0: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x2812, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000100)=0x40) write$FUSE_LK(r2, &(0x7f0000000080)={0x28, 0x0, 0x4, {{0x800000000000, 0x9, 0x2, r3}}}, 0x28) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa04, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$UFFDIO_UNREGISTER(r8, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000002000/0x3000)=nil, 0x3000}) 19:47:55 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r3) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=@ipv6_delroute={0x3c, 0x19, 0x400, 0x70bd2a, 0x25dfdbfb, {0xa, 0x10, 0x120, 0xa0, 0xfd, 0x4, 0x0, 0xa}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_UID={0x8, 0x19, 0xee00}, @RTA_UID={0x8, 0x19, r3}, @RTA_MARK={0x8, 0x10, 0x1}]}, 0x3c}}, 0x0) 19:47:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000004c0)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00', @ANYRES16=r7, @ANYBLOB="00042abd7000ffdbdf2502000000080002000200000008000100030000000800010000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="000000000800020002fff200e89e1225d6b921de1b628333a7d008e813bdce812e3646560a593c18039969b10bba1615364552fd28726d93eac3f7e7ebf49bf3d76cb5b07547ec790bc49760580000941c"], 0x1c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r7, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x63cbf2d1f9cac59f}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x19) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r9 = dup(r8) r10 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r11 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r11, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r13 = dup(r12) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r13}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r9}) 19:47:55 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvfrom$netrom(r5, &(0x7f0000000080), 0x0, 0x40000000, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r7 = dup(r6) r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r9 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r9, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r11 = dup(r10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r11}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r12, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={r12, 0x8, 0x1, 0x2, 0x7, 0x40}, &(0x7f00000001c0)=0x14) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) 19:47:55 executing program 0: open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0) move_pages(0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000180)=[0x1], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x6) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/ubi_ctrl\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000001940)={0x1, 0x2, &(0x7f0000001840)=[0x0, 0x0], &(0x7f0000001880)=[0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0, 0x0]}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001300)={&(0x7f00000001c0)="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", &(0x7f0000000040)=""/201, &(0x7f0000000140)="05764426ceb13999897101410fa364a6dbf7f876d20e4d64c8f82914e1d0aedd41947ccf48b5", &(0x7f00000011c0)="00910b9b7f8803f42a0e9f0e419d5d13215f863911fa3313dfec0e383d6531c56a4e12c226e347b02a0df13bd2f02519f390a8d4e748fbb30d364f864bab7b084686d27b3138d2b128f80b794da2be2574cc9190b1e5d918d1b7ea812bea0b573e40596ffbd05829d0ca9cd70424d8ca6f65c799deaa16f779f28f9ece0897e8cfca49deb3df3ed0e256973d8eac87b2cb1b30a025c307df6186d4600e52f04c60bd90a9ed00304ec99524cabbd169b3845e2b0617e9066655c7dee036fd9613062c309c3808fe3e8bd321f4064bffd157531acac8929f426429864a45d4357372f343fb77", 0x3, r0}, 0x38) r1 = syz_open_dev$dri(&(0x7f0000001740)='/dev/dri/card#\x00', 0x7f, 0x10082) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000001800)={&(0x7f0000001780)=[0x55], &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r4, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r6, @in6={{0xa, 0x4e21, 0x8, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x8}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000001700)=r6, 0x4) r7 = socket(0x10, 0x1, 0x100000) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r8) syz_mount_image$hfsplus(&(0x7f0000001340)='hfsplus\x00', &(0x7f0000001380)='./file0/file0\x00', 0x0, 0x3, &(0x7f00000015c0)=[{&(0x7f00000013c0)="83ab939d731b07e1ce2da87a6c46057f2b44d3c38cc3f03937b784dec919dd0edd9c5f992f7abd76beb28811f27d300ffb5676f66e6dd562f33f72d2a7c83f996764a67ef746b8cf5c24d14c29c93232e9de5d3bb5b295199d857e0784", 0x5d, 0x3ff}, {&(0x7f0000001440)="c6d2c4f9ccf2e2eee85217c431cccfc3ecdd0eaa88a176c8130e02ab8d0c11c4e0f4749b48b978825b099c3bab7ea4ffdcef93e5054362a472750c09246046b9fedff30284ca762f4d485bce455fe595d7be75f561e38d120f8abc98852d0098c87df27f96da1f7a87a53d", 0x6b, 0x2}, {&(0x7f00000014c0)="690a2b4e503d5383f9db772904de23b9a9e166a8ed7f2520c879edcd34b811cec2ad8dd03bb09a6e2f59fcbb0423837f1e2b3571db21fdb1da95c0c0fd80405b68bb9150c578517348a163f9c902081607e9f11d683b1b1e1d8001067426733448cc00eddaeaa745f1cc05533702e9a4aaa97ec9b7a8594b34e6eda972215558de9dc22f5f4a28b96bfbd8904e949fa351daebafcdefc7934ce45450a01b78b80e96eaf10bd57f9126ff0d2d80ddfa3c645a5503a9bd4ee68933e360bd39bcec6ec13d06dfec4eec994e20849675b7c771bed0109ba1e5cbe507da7d8916839ab6", 0xe1, 0x1}], 0x1002411, &(0x7f0000001640)={[{@force='force'}, {@nobarrier='nobarrier'}, {@type={'type', 0x3d, "1e8ceb96"}}, {@uid={'uid', 0x3d, r8}}], [{@subj_type={'subj_type', 0x3d, 'cpuset'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x62, 0x39, 0x66, 0x64, 0x65, 0x42, 0x65], 0x2d, [0x60, 0x66, 0x63, 0x63], 0x2d, [0x38, 0x62, 0x37, 0x36], 0x2d, [0x63, 0x34, 0x64, 0x30], 0x2d, [0x4, 0x36, 0x39, 0x38, 0x62, 0x32, 0x35, 0x30]}}}, {@smackfsroot={'smackfsroot', 0x3d, 'posix_acl_access'}}]}) 19:47:55 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB="2c03000000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000180)={r4, 0x20, 0x2, 0x0, 0x6286, 0x9, 0x0, 0x0, {r6, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffff9}}, 0x81, 0xcb80, 0x0, 0x0, 0x6}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x820d, 0x2de0, 0x60000, r6}, &(0x7f0000000040)=0x10) r7 = socket$inet6(0xa, 0x100000003, 0x3a) sendto$inet6(r7, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) syncfs(r0) recvmmsg(r7, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 19:47:56 executing program 0: r0 = socket(0x11, 0x800000003, 0x8) bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x76, 0x4) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000400)={{0x0, 0x1c9c380}, {r2, r3+10000000}}, &(0x7f0000000440)) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x5, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0xeb}, {0x14b, 0x1, 0x6, 0x89}, {0x1, 0x8, 0x4, 0xc89}, {0x672, 0x7, 0x18}, {0x401, 0x99, 0x47, 0x4}]}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000010c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}], 0x1, 0x800) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000240)={0x0, 'wg1\x00', {0x2}}) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000007c0)='bbr\x00', 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27) r5 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x3, 0x48c01) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[]}, 0x1, 0x0, 0x0, 0x835ae30755f88d72}, 0x2a7394904834c662) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) 19:47:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000005c000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8dd65660f382201c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d6830f01caed", 0x14}], 0x1, 0x0, 0x0, 0x25a) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec100, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0xb20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xd8d0668c81aa2fa3) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0)='TIPC\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x20008000) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/drivers\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000240)={0x0, 0x9d, 0x2, [0x3, 0x8]}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19:47:57 executing program 0: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) mount(&(0x7f0000000040)=@filename='./bus/file1\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='ufs\x00', 0x20008, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_elf32(r0, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46000000000000000000e8ff000000000001000000000000003800000df20000000000000000002000000600"/56], 0x38) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rename(&(0x7f0000000080)='./bus/file0\x00', &(0x7f0000000140)='./bus/file1\x00') [ 594.454388] audit: type=1400 audit(1584906477.147:92): avc: denied { associate } for pid=24977 comm="syz-executor.0" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 594.487594] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 19:47:57 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='syscall\x00') prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000080)) preadv(r0, &(0x7f00000017c0), 0x1b2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) [ 594.634450] [ 594.636106] ====================================================== [ 594.642415] WARNING: possible circular locking dependency detected [ 594.648728] 4.14.174-syzkaller #0 Not tainted [ 594.653216] ------------------------------------------------------ [ 594.659540] syz-executor.0/24984 is trying to acquire lock: [ 594.665243] (&sig->cred_guard_mutex){+.+.}, at: [] lock_trace+0x3f/0xc0 [ 594.673664] [ 594.673664] but task is already holding lock: [ 594.680240] (&p->lock){+.+.}, at: [] seq_read+0xba/0x1160 [ 594.687440] [ 594.687440] which lock already depends on the new lock. [ 594.687440] [ 594.695750] [ 594.695750] the existing dependency chain (in reverse order) is: [ 594.703362] [ 594.703362] -> #3 (&p->lock){+.+.}: [ 594.708475] __mutex_lock+0xe8/0x1470 [ 594.712793] seq_read+0xba/0x1160 [ 594.716758] proc_reg_read+0xf2/0x160 [ 594.721072] do_iter_read+0x3e3/0x5a0 [ 594.725389] vfs_readv+0xd3/0x130 [ 594.729359] default_file_splice_read+0x41d/0x870 [ 594.734717] do_splice_to+0xfb/0x150 [ 594.738947] splice_direct_to_actor+0x20a/0x730 [ 594.744133] do_splice_direct+0x164/0x210 [ 594.748806] do_sendfile+0x469/0xaf0 [ 594.753039] SyS_sendfile64+0xff/0x110 [ 594.757448] do_syscall_64+0x1d5/0x640 [ 594.761851] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 594.767548] [ 594.767548] -> #2 (sb_writers#4){.+.+}: [ 594.773045] __sb_start_write+0x1a1/0x2e0 [ 594.777718] mnt_want_write+0x3a/0xb0 [ 594.782120] ovl_create_object+0x75/0x1d0 [ 594.786793] lookup_open+0x10e8/0x1750 [ 594.791193] path_openat+0xfc1/0x3c50 [ 594.795508] do_filp_open+0x18e/0x250 [ 594.799822] do_sys_open+0x29d/0x3f0 [ 594.804052] do_syscall_64+0x1d5/0x640 [ 594.808459] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 594.814158] [ 594.814158] -> #1 (&ovl_i_mutex_dir_key[depth]){++++}: [ 594.820919] down_read+0x37/0xa0 [ 594.824802] path_openat+0x185a/0x3c50 [ 594.829210] do_filp_open+0x18e/0x250 [ 594.833534] do_open_execat+0xda/0x430 [ 594.837941] do_execveat_common.isra.0+0x694/0x1c70 [ 594.843485] SyS_execve+0x34/0x40 [ 594.847463] do_syscall_64+0x1d5/0x640 [ 594.851875] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 594.857579] [ 594.857579] -> #0 (&sig->cred_guard_mutex){+.+.}: [ 594.863914] lock_acquire+0x170/0x3f0 [ 594.868232] __mutex_lock+0xe8/0x1470 [ 594.872552] lock_trace+0x3f/0xc0 [ 594.876522] proc_pid_syscall+0x81/0x1f0 [ 594.881102] proc_single_show+0xe7/0x150 [ 594.885694] seq_read+0x4d2/0x1160 [ 594.889765] do_iter_read+0x3e3/0x5a0 [ 594.894092] vfs_readv+0xd3/0x130 [ 594.898070] do_preadv+0x161/0x200 [ 594.902129] do_syscall_64+0x1d5/0x640 [ 594.906539] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 594.912239] [ 594.912239] other info that might help us debug this: [ 594.912239] [ 594.920375] Chain exists of: [ 594.920375] &sig->cred_guard_mutex --> sb_writers#4 --> &p->lock [ 594.920375] [ 594.931052] Possible unsafe locking scenario: [ 594.931052] [ 594.937114] CPU0 CPU1 [ 594.941773] ---- ---- [ 594.946437] lock(&p->lock); [ 594.949537] lock(sb_writers#4); [ 594.955516] lock(&p->lock); [ 594.961142] lock(&sig->cred_guard_mutex); [ 594.965461] [ 594.965461] *** DEADLOCK *** [ 594.965461] [ 594.971516] 1 lock held by syz-executor.0/24984: [ 594.976257] #0: (&p->lock){+.+.}, at: [] seq_read+0xba/0x1160 [ 594.983899] [ 594.983899] stack backtrace: [ 594.988394] CPU: 0 PID: 24984 Comm: syz-executor.0 Not tainted 4.14.174-syzkaller #0 [ 594.996269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.005624] Call Trace: [ 595.008216] dump_stack+0x13e/0x194 [ 595.011861] print_circular_bug.isra.0.cold+0x1c4/0x282 [ 595.017223] __lock_acquire+0x2cb3/0x4620 [ 595.021403] ? trace_hardirqs_on+0x10/0x10 [ 595.025637] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 595.030391] ? trace_hardirqs_on+0x10/0x10 [ 595.034626] ? lock_acquire+0x170/0x3f0 [ 595.038599] ? save_trace+0x290/0x290 [ 595.042403] lock_acquire+0x170/0x3f0 [ 595.046206] ? lock_trace+0x3f/0xc0 [ 595.049833] ? lock_trace+0x3f/0xc0 [ 595.053466] __mutex_lock+0xe8/0x1470 [ 595.057263] ? lock_trace+0x3f/0xc0 [ 595.060885] ? save_stack+0x89/0xa0 [ 595.064519] ? lock_trace+0x3f/0xc0 [ 595.068151] ? mutex_trylock+0x1a0/0x1a0 [ 595.072211] ? do_syscall_64+0x1d5/0x640 [ 595.076290] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 595.081667] ? mark_held_locks+0xa6/0xf0 [ 595.085728] ? save_trace+0x290/0x290 [ 595.089527] ? lock_trace+0x3f/0xc0 [ 595.093152] lock_trace+0x3f/0xc0 [ 595.096611] proc_pid_syscall+0x81/0x1f0 [ 595.100673] ? mem_read+0x60/0x60 [ 595.104743] ? find_held_lock+0x2d/0x110 [ 595.108804] ? get_pid_task+0x91/0x130 [ 595.112695] ? check_preemption_disabled+0x35/0x240 [ 595.117711] ? lock_downgrade+0x6e0/0x6e0 [ 595.121856] proc_single_show+0xe7/0x150 [ 595.125929] seq_read+0x4d2/0x1160 [ 595.129994] ? selinux_file_permission+0x7a/0x440 [ 595.134836] ? seq_lseek+0x3d0/0x3d0 [ 595.138549] ? security_file_permission+0x82/0x1e0 [ 595.143485] ? rw_verify_area+0xe1/0x2a0 [ 595.148332] do_iter_read+0x3e3/0x5a0 [ 595.156588] ? retint_kernel+0x2d/0x2d [ 595.160475] vfs_readv+0xd3/0x130 [ 595.163926] ? compat_rw_copy_check_uvector+0x320/0x320 [ 595.169286] ? find_held_lock+0x2d/0x110 [ 595.173341] ? __fget+0x201/0x360 [ 595.176796] ? lock_downgrade+0x6e0/0x6e0 [ 595.180946] ? __fget+0x228/0x360 [ 595.184397] do_preadv+0x161/0x200 [ 595.187942] ? do_readv+0x2c0/0x2c0 [ 595.191576] ? SyS_clock_settime+0x1a0/0x1a0 [ 595.195991] ? do_syscall_64+0x4c/0x640 [ 595.199962] ? SyS_writev+0x30/0x30 [ 595.203588] do_syscall_64+0x1d5/0x640 [ 595.207483] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 595.212675] RIP: 0033:0x45c849 [ 595.215857] RSP: 002b:00007f95126f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 595.223564] RAX: ffffffffffffffda RBX: 00007f95126f26d4 RCX: 000000000045c849 [ 595.231179] RDX: 00000000000001b2 RSI: 00000000200017c0 RDI: 0000000000000004 [ 595.238450] RBP: 000000000076bf00 R08: 0000000000000000 R09: 0000000000000000 [ 595.245738] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 595.253020] R13: 0000000000000856 R14: 00000000004cb170 R15: 000000000076bf0c 19:47:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000040)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$inet6(r2, &(0x7f0000000340)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}, 0x0) [ 595.369279] ip_tables: iptables: counters copy to user failed while replacing table [ 595.398078] ip_tables: iptables: counters copy to user failed while replacing table 19:47:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000040)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$inet6(r2, &(0x7f0000000340)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}, 0x0) [ 595.532775] ip_tables: iptables: counters copy to user failed while replacing table 19:47:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000040)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$inet6(r2, &(0x7f0000000340)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}, 0x0) [ 595.619227] ip_tables: iptables: counters copy to user failed while replacing table 19:47:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000040)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$inet6(r2, &(0x7f0000000340)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c, 0x0}, 0x0) [ 595.743409] ip_tables: iptables: counters copy to user failed while replacing table 19:47:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) socket$inet6(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) [ 595.903907] ip_tables: iptables: counters copy to user failed while replacing table 19:47:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) socket$inet6(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) [ 596.043511] ip_tables: iptables: counters copy to user failed while replacing table 19:47:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) socket$inet6(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) [ 596.134106] ip_tables: iptables: counters copy to user failed while replacing table 19:47:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) socket$inet6(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000040)) socket$inet6_tcp(0xa, 0x1, 0x0) 19:47:58 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) socket$inet6(0xa, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000040)) [ 596.218834] ip_tables: iptables: counters copy to user failed while replacing table [ 596.283320] ip_tables: iptables: counters copy to user failed while replacing table 19:47:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) socket$inet6(0xa, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 19:47:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) socket$inet6(0xa, 0x2, 0x0) 19:47:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) 19:47:59 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) 19:47:59 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) 19:47:59 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) 19:47:59 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) 19:47:59 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) 19:47:59 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) 19:47:59 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) 19:48:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) 19:48:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(0xffffffffffffffff, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) 19:48:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) 19:48:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) 19:48:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) 19:48:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) 19:48:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) 19:48:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) 19:48:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) 19:48:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) 19:48:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) 19:48:00 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[], 0x0) 19:48:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[], 0x0) 19:48:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[], 0x0) 19:48:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x1) 19:48:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x1) 19:48:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x1) 19:48:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x101900, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r9, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000080)="8a511ec55c05b5e35dd1744874276962785ae36a44fee59860854883d6d0ec4f3844f6c5953827c849f57e491dac5c07c1d40d3d09f407b3e2932418dd9c6d", 0x3f, 0x2}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r7, 0xc00464be, &(0x7f0000000140)={r10}) dup(0xffffffffffffffff) 19:48:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f000104000000000000000000000048004354000000000000000000000000000000000000000000000000000000000100"], 0x1) 19:48:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendfile(r6, r7, 0x0, 0x80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r5, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=""/239, 0xef, 0xffffffffffffffff}}, 0x10) dup(0xffffffffffffffff) 19:48:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f000104000000000000000000000048004354000000000000000000000000000000000000000000000000000000000100"], 0x1) 19:48:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f000104000000000000000000000048004354000000000000000000000000000000000000000000000000000000000100"], 0x1) 19:48:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_open_pts(r4, 0x200800) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x2, 0x8}, {0x0, 0x1}, {0xf2, 0x2}]}) r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r8 = dup(r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r8}) dup(0xffffffffffffffff) 19:48:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000"], 0x1) 19:48:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000"], 0x1) 19:48:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000"], 0x1) 19:48:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff0000000000000000000000000000000000000000000000000000000000000000007000900000000000000000000000000000000000000000002000545241434500"/578], 0x1) 19:48:01 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff0000000000000000000000000000000000000000000000000000000000000000007000900000000000000000000000000000000000000000002000545241434500"/578], 0x1) 19:48:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = openat$cgroup_ro(r8, 0x0, 0x26e1, 0x0) r10 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r9, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_MESH_CONFIG(r10, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB="04fd042ece2058eda7ead7f1241c32c867e2e9cc49783018140a1e31db1562c003b8b1090d2bfc7b0b17d24ab1df60ac7af5ec0875dace3c43f82f0cfb1eb87d07dfb41a6c16411ebf0a6107211d57abbdb956520683bc903f1be9dc791e13265f8520cf20957ba3db4ffaa9af6833ea79c3b0a307000000000000007ad95ec46eda1ce92b38cd1497ebfbff7a31a458e3d294297795b5c6c4fe0359be9605bd4ba92b1b9062451ab829b9736d74d2", @ANYRES16=r11, @ANYBLOB="000128bd7000fcdbdf251d000001040000080014002bffffff0800132781c917f1c46b70000000"], 0x3}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x8050) sendmsg$NL80211_CMD_NEW_MPATH(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x102}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000d5c5144b9f0300", @ANYRES16=r11, @ANYBLOB="00012abd7000ffdbdf2517000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x1) r12 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r12}) dup(0xffffffffffffffff) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f00000007c0)=""/4096, &(0x7f0000000100)=0x1000) 19:48:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff0000000000000000000000000000000000000000000000000000000000000000007000900000000000000000000000000000000000000000002000545241434500"/578], 0x1) 19:48:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='\x00', r7}, 0x10) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) dup(0xffffffffffffffff) 19:48:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d56300"/619], 0x1) 19:48:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4000000000000000, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f0000000100)={{0x5, 0x3}, 0x0, 0x8, 0x6, {0x40, 0xeb}, 0x4, 0x1}) dup(0xffffffffffffffff) 19:48:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d56300"/619], 0x1) 19:48:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d56300"/619], 0x1) 19:48:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800"/640], 0x1) 19:48:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800"/640], 0x1) 19:48:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800"/640], 0x1) 19:48:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000"], 0x1) 19:48:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000"], 0x1) 19:48:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = syz_genetlink_get_family_id$netlbl_cipso(0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="986674149351c6da2a5d5fad1c94193e6a76997af95955a0df86", @ANYRES16=r8, @ANYBLOB="0400f7000000fddbdf250300000004000480080002000100000008210f02c7569cf3fa9cc67d1d00020001000000080001000200000004000480080002000000"], 0x3}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000080) sendmsg$NLBL_CIPSOV4_C_REMOVE(r7, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe4, r8, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd275}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5caa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x41a54d31}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b11}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4418e528}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2330c87c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x50172a8b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7378}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x88, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76d19f1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1dcee563}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x53712121}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7eb3c2a1}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x697aea5c}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7876abbb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bf38cca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c0eca6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3bd5c045}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a150bf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f610a91}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x80}, 0x880) dup(0xffffffffffffffff) 19:48:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000"], 0x1) 19:48:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d5630000000000000000000000000000000028000000000000000000000000000000000000000004000000000000000000"], 0x1) 19:48:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) dup(r1) r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x4c, r10, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0x6, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r10, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xf9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040800}, 0x4000000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) dup(0xffffffffffffffff) 19:48:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d5630000000000000000000000000000000028000000000000000000000000000000000000000004000000000000000000"], 0x1) 19:48:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d5630000000000000000000000000000000028000000000000000000000000000000000000000004000000000000000000"], 0x1) [ 600.251473] IPVS: Scheduler module ip_vs_sip not found 19:48:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x39, 0x0, r2}) r4 = dup(r3) r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r4}) r7 = dup(r6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r9, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x1406, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20028000) dup(0xffffffffffffffff) 19:48:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feff"], 0x1) 19:48:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x200100, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x10140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) dup(0xffffffffffffffff) 19:48:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feff"], 0x1) 19:48:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feff"], 0x1) 19:48:03 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000080)={r4, 0x0, r8}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={r9, 0x80000, r6}) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) ioctl$MON_IOCX_MFETCH(r13, 0xc0109207, &(0x7f00000001c0)={&(0x7f0000000100), 0x0, 0x7ffffffc}) ioctl$KVM_CHECK_EXTENSION(r11, 0xae03, 0x2f86) 19:48:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffff"], 0x1) 19:48:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffff"], 0x1) 19:48:03 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffff"], 0x1) 19:48:03 executing program 0 (fault-call:2 fault-nth:0): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) [ 601.071520] FAULT_INJECTION: forcing a failure. [ 601.071520] name failslab, interval 1, probability 0, space 0, times 0 [ 601.102067] CPU: 1 PID: 25222 Comm: syz-executor.0 Not tainted 4.14.174-syzkaller #0 [ 601.110296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.119672] Call Trace: [ 601.122291] dump_stack+0x13e/0x194 [ 601.125949] should_fail.cold+0x10a/0x14b [ 601.130110] should_failslab+0xd6/0x130 [ 601.134097] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 601.139210] ? lock_downgrade+0x6e0/0x6e0 [ 601.143370] __kmalloc_node+0x38/0x70 [ 601.147188] kvmalloc_node+0x46/0xd0 [ 601.150994] xt_alloc_table_info+0x6a/0xe0 [ 601.155556] do_ipt_set_ctl+0x1b1/0x39d [ 601.159551] ? compat_do_ipt_set_ctl+0x140/0x140 [ 601.164335] ? nf_sockopt_find.constprop.0+0x1ad/0x220 [ 601.169634] nf_setsockopt+0x5f/0xb0 [ 601.174068] ip_setsockopt+0x94/0xb0 [ 601.177901] udp_setsockopt+0x45/0x80 [ 601.181776] ipv6_setsockopt+0x98/0x130 [ 601.185772] tcp_setsockopt+0x7b/0xc0 [ 601.189704] SyS_setsockopt+0x110/0x1e0 [ 601.194647] ? SyS_recv+0x40/0x40 [ 601.198112] ? SyS_clock_settime+0x1a0/0x1a0 [ 601.202531] ? SyS_ioctl+0x5c/0xb0 [ 601.206081] ? SyS_recv+0x40/0x40 [ 601.209548] do_syscall_64+0x1d5/0x640 [ 601.213580] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 601.218784] RIP: 0033:0x45c849 [ 601.222034] RSP: 002b:00007f95126f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 601.230789] RAX: ffffffffffffffda RBX: 00007f95126f26d4 RCX: 000000000045c849 [ 601.238108] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 601.245579] RBP: 000000000076bf00 R08: 0000000000000001 R09: 0000000000000000 [ 601.252964] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000004 [ 601.260412] R13: 0000000000000a33 R14: 00000000004ccdba R15: 0000000000000000 19:48:04 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r6 = dup(0xffffffffffffffff) r7 = syz_genetlink_get_family_id$netlbl_cipso(0x0) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="986674149351c6da285d5fad1c94193e6a76997af95955a0df868fc6187856b68b739a6cebfad75f69bdaf06752e3e0000000000000000d442856ab5f5335c0c0fd1b1e48c6ea15dd692f7d084918217ecf46c13642b3a65be6a", @ANYRES16=r7, @ANYBLOB="0400f7000000fddbdf250300000004000480080002000100000008210f02c7569cf3fa9cc67d1d00020001000000080001000200000004000480080002000000"], 0x3}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000080) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x17c, r7, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xc4, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4496}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4272}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c15}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3922a6ec}, @NLBL_CIPSOV4_A_MLSCATREM={0x7, 0xa, 0xe7fc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc36c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa08e}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x52d9a593}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x775bb93c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4b57568b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbd5f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x580d6585}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbdab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60e2a4b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a0259ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x825}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb329}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x80035ed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x20757316}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd132}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb71a}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xce06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4968}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b78}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x438e290}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8c69}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x87b1}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x17c}}, 0x4000) 19:48:04 executing program 0 (fault-call:2 fault-nth:1): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) 19:48:04 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x204c00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) io_submit(0x0, 0x2, &(0x7f00000003c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x2, r1, &(0x7f0000000280)="f88c083505977f83f07da44863bcdd9aeac8c536953ba74635f7a7e760a39bb1f9e733a265b637344dce5b96718da9d4b8d800ad24b3ef44de4c3693cf1f4524ef9e8e38c2f702b8376eba6b5b0023c791bb4821f823cb711db8c4a1e30217b878f84716aabe20aeb7458d9a27445576e8d40e0e11bddb4b75e888f7e76cf5595b73a67335153d66d7e7048ae381865dbb286c255c95ea75e3494540439b7f384dd9440d92ee2bfa4f71d2f35d739270e5eae8f5a59292a6cb11478afdf3ce1559eadbf87a2be785385004796a91b19ebcb867acdf8ae7bdffe3ba21ac9900bc81d86cb58bd47a7c651d9b73217b91", 0xef, 0xfffffffffffffffe, 0x0, 0x3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x0, r3, &(0x7f0000000540)="8fd3c9997e31a1f6bed769d2742382695b087c6a4653b02dce8ad45fbb2d1386a79de2af2bbe1f2b7c0d3ffcd2ebba53136e79548b2f0468d3d2326de70be8d246be3d0000c033f6fff27b823cb48a654485f6d6c52eaaaec33b9169a2a5a5580e9051fa7f4f709df11e6183e1cd6e998e34ad483026eb2a1b95735bbde60abe3cb6e65d5548dad2a57fb55a3a58aea265f39180fc0801af22c57e171667b83e6a0655dcc6beb15fb5eae12773300929db63436a5117d34030eba25201c2338b41ada95b4f177ba35bd381d9235599d22220a74c5898c97ba5da81463ede058fe9cf519867eace8f3a1b42424aa56c3f4cba02cfb53f0a2e68a1ca18d1edcac6825952169becc14d5b665cd623412e4df3679f7a959192656e176bd96277ee48f0ee9feb9e3517d02bc65a83a853c0bbde9089f98364", 0x136, 0x800, 0x0, 0x1}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = dup(r6) r8 = syz_open_dev$dri(&(0x7f0000000400)='/dev/dri/card#\x00', 0x0, 0xf1d74dfb43c9bc82) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r7}) r10 = dup(r9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) dup(0xffffffffffffffff) [ 601.479210] FAULT_INJECTION: forcing a failure. [ 601.479210] name failslab, interval 1, probability 0, space 0, times 0 [ 601.506407] CPU: 0 PID: 25231 Comm: syz-executor.0 Not tainted 4.14.174-syzkaller #0 [ 601.514331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.523851] Call Trace: [ 601.526472] dump_stack+0x13e/0x194 [ 601.530185] should_fail.cold+0x10a/0x14b [ 601.534349] should_failslab+0xd6/0x130 [ 601.538458] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 601.543574] ? avc_has_perm_noaudit+0x297/0x400 [ 601.548515] ? trace_hardirqs_on+0x10/0x10 [ 601.552946] __kmalloc_node+0x38/0x70 [ 601.557006] kvmalloc_node+0x46/0xd0 [ 601.560851] xt_alloc_entry_offsets+0x2f/0x40 [ 601.565367] translate_table+0x1f7/0x1430 [ 601.569535] ? lock_acquire+0x170/0x3f0 [ 601.573605] ? lock_downgrade+0x6e0/0x6e0 [ 601.577773] ? __do_replace+0x570/0x570 [ 601.581768] do_ipt_set_ctl+0x227/0x39d [ 601.585761] ? compat_do_ipt_set_ctl+0x140/0x140 [ 601.590547] ? nf_sockopt_find.constprop.0+0x1ad/0x220 [ 601.595923] nf_setsockopt+0x5f/0xb0 [ 601.599766] ip_setsockopt+0x94/0xb0 [ 601.603519] udp_setsockopt+0x45/0x80 [ 601.607338] ipv6_setsockopt+0x98/0x130 [ 601.611417] tcp_setsockopt+0x7b/0xc0 [ 601.615232] SyS_setsockopt+0x110/0x1e0 [ 601.619227] ? SyS_recv+0x40/0x40 [ 601.622834] ? SyS_clock_settime+0x1a0/0x1a0 [ 601.627368] ? SyS_ioctl+0x5c/0xb0 [ 601.631239] ? SyS_recv+0x40/0x40 [ 601.634716] do_syscall_64+0x1d5/0x640 [ 601.638706] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 601.644244] RIP: 0033:0x45c849 [ 601.647458] RSP: 002b:00007f95126f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 601.655366] RAX: ffffffffffffffda RBX: 00007f95126f26d4 RCX: 000000000045c849 [ 601.662648] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 601.669930] RBP: 000000000076bf00 R08: 0000000000000001 R09: 0000000000000000 [ 601.677210] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000004 [ 601.684820] R13: 0000000000000a33 R14: 00000000004ccdba R15: 0000000000000001 19:48:04 executing program 0 (fault-call:2 fault-nth:2): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=ANY=[@ANYBLOB="726177000000000000000000003053000000000000000000000000000000000009000000030000003802000010010000a0010000000000000000000010010000a0010000a0010000a0010000a0010000a001200003000000003d9d859a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f0000000000000000000000000000000000000000000000000000000000000000000000000000010000000000c800100100000000000000000000000000000000000000005800686173686c696d6974000000000000000000000000000010000000000001670000001080000000000010000000001700000000000000ff0f0000000000000000000000040000ff0f00010400000000000000000000004800435400000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ff000000000000000000000000000000000000000000000000000000000000000000700090000000000000000000000000000000000000000000200054524143450000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700098000000d563000000000000000000000000000000002800000000000000000000000000000000000000000400000000000000000000feffffff"], 0x1) [ 601.798786] FAULT_INJECTION: forcing a failure. [ 601.798786] name failslab, interval 1, probability 0, space 0, times 0 [ 601.823045] CPU: 0 PID: 25237 Comm: syz-executor.0 Not tainted 4.14.174-syzkaller #0 [ 601.831164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 601.840912] Call Trace: [ 601.843538] dump_stack+0x13e/0x194 [ 601.847200] should_fail.cold+0x10a/0x14b [ 601.851513] should_failslab+0xd6/0x130 [ 601.855504] kmem_cache_alloc_node_trace+0x292/0x7b0 [ 601.860914] ? hashlimit_mt_check_common.isra.0+0x323/0x12c0 [ 601.866734] __get_vm_area_node+0xed/0x340 [ 601.870992] __vmalloc_node_range+0xa5/0x6c0 [ 601.875432] ? hashlimit_mt_check_common.isra.0+0x6fb/0x12c0 [ 601.881363] ? lock_acquire+0x170/0x3f0 [ 601.885350] ? lock_downgrade+0x6e0/0x6e0 [ 601.889511] vmalloc+0x42/0x50 [ 601.892721] ? hashlimit_mt_check_common.isra.0+0x6fb/0x12c0 [ 601.898540] hashlimit_mt_check_common.isra.0+0x6fb/0x12c0 [ 601.904188] hashlimit_mt_check_v1+0x2ec/0x36d [ 601.908992] ? hashlimit_mt_check_v2+0x370/0x370 [ 601.913769] ? hashlimit_mt_check_v2+0x370/0x370 [ 601.918540] xt_check_match+0x22e/0x4c0 [ 601.922534] ? xt_check_target+0x4a0/0x4a0 [ 601.926788] ? wait_for_completion+0x390/0x390 [ 601.931464] ? xt_find_match+0x175/0x1e0 [ 601.935668] ? xt_request_find_match+0x49/0xe0 [ 601.940381] find_check_entry.isra.0+0x2c3/0x830 [ 601.945158] ? ipt_do_table+0x16d0/0x16d0 [ 601.949315] ? check_preemption_disabled+0x35/0x240 [ 601.954439] ? quarantine_put+0xf5/0x1a0 [ 601.958514] ? kasan_slab_free+0x8b/0xc0 [ 601.962597] translate_table+0xac0/0x1430 [ 601.966777] ? __do_replace+0x570/0x570 [ 601.970856] do_ipt_set_ctl+0x227/0x39d [ 601.974848] ? compat_do_ipt_set_ctl+0x140/0x140 [ 601.979621] ? nf_sockopt_find.constprop.0+0x1ad/0x220 [ 601.985041] nf_setsockopt+0x5f/0xb0 [ 601.988978] ip_setsockopt+0x94/0xb0 [ 601.992721] udp_setsockopt+0x45/0x80 [ 601.996545] ipv6_setsockopt+0x98/0x130 [ 602.000538] tcp_setsockopt+0x7b/0xc0 [ 602.004360] SyS_setsockopt+0x110/0x1e0 [ 602.008347] ? SyS_recv+0x40/0x40 [ 602.011814] ? SyS_clock_settime+0x1a0/0x1a0 [ 602.016231] ? SyS_ioctl+0x5c/0xb0 [ 602.019781] ? SyS_recv+0x40/0x40 [ 602.023250] do_syscall_64+0x1d5/0x640 [ 602.028720] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 602.033920] RIP: 0033:0x45c849 [ 602.037117] RSP: 002b:00007f95126f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 19:48:04 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r6 = dup(r5) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f0000000080)=0x1, 0x4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5afbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05752981", @ANYRES32=0x0, @ANYBLOB="b3ef461584d1f8f0"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800"/20, @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00\r\x00\x00\x00'], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x3, r10}}, 0x20}}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfff}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map={0x18, 0x8, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x19, [], r10, 0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x7, 0x8, 0x33}, 0x10, 0x0, r6}, 0x78) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r11, 0xc0506617, &(0x7f0000000300)={{0x1, 0x0, @reserved="f5e123cd9ba65c7bbab70217b2e94e2f53c12ba4fc503a2bb6dd00c9595b6d52"}, 0xfb, [], "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"}) [ 602.044834] RAX: ffffffffffffffda RBX: 00007f95126f26d4 RCX: 000000000045c849 [ 602.052115] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 602.059395] RBP: 000000000076bf00 R08: 0000000000000001 R09: 0000000000000000 [ 602.066743] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000004 [ 602.074027] R13: 0000000000000a33 R14: 00000000004ccdba R15: 0000000000000002 [ 602.093682] syz-executor.0: vmalloc: allocation failure: 65856 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 602.106373] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 602.111968] CPU: 0 PID: 25237 Comm: syz-executor.0 Not tainted 4.14.174-syzkaller #0 [ 602.119862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 602.129222] Call Trace: [ 602.131827] dump_stack+0x13e/0x194 [ 602.135469] warn_alloc.cold+0x96/0x1af [ 602.139452] ? zone_watermark_ok_safe+0x280/0x280 [ 602.144299] ? kmem_cache_alloc_node_trace+0x327/0x7b0 [ 602.149587] ? __get_vm_area_node+0x27d/0x340 [ 602.154091] __vmalloc_node_range+0x3e2/0x6c0 [ 602.158597] ? lock_acquire+0x170/0x3f0 [ 602.162580] ? lock_downgrade+0x6e0/0x6e0 [ 602.166735] vmalloc+0x42/0x50 [ 602.169942] ? hashlimit_mt_check_common.isra.0+0x6fb/0x12c0 [ 602.175781] hashlimit_mt_check_common.isra.0+0x6fb/0x12c0 [ 602.181419] hashlimit_mt_check_v1+0x2ec/0x36d [ 602.186010] ? hashlimit_mt_check_v2+0x370/0x370 [ 602.190775] ? hashlimit_mt_check_v2+0x370/0x370 [ 602.195539] xt_check_match+0x22e/0x4c0 [ 602.199520] ? xt_check_target+0x4a0/0x4a0 [ 602.203766] ? wait_for_completion+0x390/0x390 [ 602.208357] ? xt_find_match+0x175/0x1e0 [ 602.212433] ? xt_request_find_match+0x49/0xe0 [ 602.217124] find_check_entry.isra.0+0x2c3/0x830 [ 602.221891] ? ipt_do_table+0x16d0/0x16d0 [ 602.226046] ? check_preemption_disabled+0x35/0x240 [ 602.231168] ? quarantine_put+0xf5/0x1a0 [ 602.235240] ? kasan_slab_free+0x8b/0xc0 [ 602.239434] translate_table+0xac0/0x1430 [ 602.243598] ? __do_replace+0x570/0x570 [ 602.247586] do_ipt_set_ctl+0x227/0x39d [ 602.251574] ? compat_do_ipt_set_ctl+0x140/0x140 [ 602.256347] ? nf_sockopt_find.constprop.0+0x1ad/0x220 [ 602.261807] nf_setsockopt+0x5f/0xb0 [ 602.265531] ip_setsockopt+0x94/0xb0 [ 602.269255] udp_setsockopt+0x45/0x80 [ 602.273161] ipv6_setsockopt+0x98/0x130 [ 602.277153] tcp_setsockopt+0x7b/0xc0 [ 602.281922] SyS_setsockopt+0x110/0x1e0 [ 602.285995] ? SyS_recv+0x40/0x40 [ 602.289464] ? SyS_clock_settime+0x1a0/0x1a0 [ 602.293888] ? SyS_ioctl+0x5c/0xb0 [ 602.297434] ? SyS_recv+0x40/0x40 [ 602.301075] do_syscall_64+0x1d5/0x640 [ 602.304979] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 602.310316] RIP: 0033:0x45c849 [ 602.313511] RSP: 002b:00007f95126f1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 602.321617] RAX: ffffffffffffffda RBX: 00007f95126f26d4 RCX: 000000000045c849 [ 602.328898] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 602.336177] RBP: 000000000076bf00 R08: 0000000000000001 R09: 0000000000000000 [ 602.343738] R10: 0000000020000740 R11: 0000000000000246 R12: 0000000000000004 19:48:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SIOCAX25OPTRT(r6, 0x89e7, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x2, 0x56}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080), &(0x7f0000000100)=0x10) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x20, 0x2, 0x0, 0x6, 0x9, 0x9, 0x0, {r8, @in6={{0xa, 0x4e21, 0x9, @loopback, 0xfffffffd}}, 0x81, 0xcb82, 0x0, 0x0, 0x7}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={r8, 0x1}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)=ANY=[@ANYRES32=r9, @ANYBLOB="3d000000a6dc2432f448ddff34fde71fdd004a903125a4d7946de228ad414203782a629af1b07fff00e29b0ea778f31edc095cf1416d3eeadb79ddba0000000000"], &(0x7f0000000280)=0x45) r10 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r10}) dup(0xffffffffffffffff) [ 602.351027] R13: 0000000000000a33 R14: 00000000004ccdba R15: 0000000000000002 [ 602.365700] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 19:48:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$ION_IOC_HEAP_QUERY(r6, 0xc0184908, &(0x7f0000000100)={0x34, 0x0, &(0x7f0000000080)}) mount$overlay(0x400000, 0x0, 0x0, 0x0, 0x0) chdir(0x0) r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x188) truncate(&(0x7f0000000000)='./bus\x00', 0x1000) r8 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x2}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r7, 0x0, 0x2) sendfile(r7, r8, 0x0, 0x40d09) dup(r4) r9 = syz_open_dev$video4linux(&(0x7f0000000140)='/dev/v4l-subdev#\x00', 0x33f8, 0x4001) ioctl$VIDIOC_ENUMAUDIO(r9, 0xc0345641, &(0x7f00000001c0)={0x0, "fd8a7357ed6628a344de97000b468f8de753a75c210fbde8a6ea0595f0c4903c"}) [ 602.416439] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 602.473517] Mem-Info: [ 602.485664] active_anon:325845 inactive_anon:278 isolated_anon:0 [ 602.485664] active_file:12130 inactive_file:12124 isolated_file:0 [ 602.485664] unevictable:0 dirty:73 writeback:0 unstable:0 [ 602.485664] slab_reclaimable:14420 slab_unreclaimable:116213 [ 602.485664] mapped:60654 shmem:356 pagetables:4718 bounce:0 [ 602.485664] free:708054 free_pcp:365 free_cma:0 19:48:05 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r5 = dup(r4) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) r6 = getpgid(0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6}, r6, 0xffffdfffffffffff, 0xffffffffffffffff, 0x9) ioprio_set$pid(0x0, r6, 0x0) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x2, 0x4, 0x3d, 0x81, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6a1b599c, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x1e942, 0x15, 0x2, 0x3, 0x3, 0x1f, 0xf0d0}, r6, 0xb, r7, 0x0) dup(0xffffffffffffffff) 19:48:05 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x5, 0x2b, 0x0, 0xffffffffffffffff}) r2 = dup(r1) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@null, @bcast, 0x8, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r2}) r4 = dup(0xffffffffffffffff) io