5431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000000)="17b5694f0589c6767c2069aaec8811aeba6c1efa4cabf762e34a11c72542abb2b9536975dc2ae32ac40666f4603e7d48a94a229927fb11d4948003e7532f", 0x3e) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x7) 14:36:05 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x103, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x80000000000039) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x80000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000040)={0x200a}) fcntl$setstatus(r1, 0x4, 0x102800) fcntl$getown(r1, 0x9) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000080)={0x3, 0x2b, 0x8f}) dup3(r1, r1, 0x0) 14:36:05 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000040)={{0xa, 0x4e24, 0x5, @loopback, 0x4fb5}, {0xa, 0x4e22, 0x7, @empty, 0x2}, 0x8, [0x8, 0x0, 0x1f, 0x2, 0x1, 0x738, 0x9, 0x3f]}, 0x5c) arch_prctl(0x1001, &(0x7f0000000180)) 14:36:05 executing program 5: seccomp(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x4, 0x10001, 0x3ff}, {0x5, 0xa16, 0x97d, 0x7}, {0x6, 0x6, 0x8, 0x10000}, {0x7, 0x200, 0x7, 0x8}]}) arch_prctl(0x2002, &(0x7f0000000180)) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000140)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000080)='security.ima\x00', 0x7) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180)=0x7, 0x4) fsetxattr$security_ima(r0, &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@md5={0x1, "00981e901d3315f8f3f9a3367e7c337e"}, 0x11, 0x0) 14:36:05 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCNXCL(r1, 0x540d) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:05 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000feffff00"}, &(0x7f0000000700)}) 14:36:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x6faf) mkdir(&(0x7f0000000100)='./control\x00', 0x0) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x40400, 0x0) getdents64(r2, &(0x7f0000fc4fbe)=""/80, 0x50) flock(r0, 0x4) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r3 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8, 0x200) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000040)=""/177) r4 = dup3(r1, r0, 0x0) socket(0x19, 0x5, 0xff) fcntl$setflags(r4, 0x2, 0x1) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000180)=""/40) 14:36:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x2) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) 14:36:05 executing program 5: arch_prctl(0x2002, &(0x7f0000000000)="0900803c") 14:36:05 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x8, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7fffffff}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000080)=""/186) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000000)="269310834863c4f4feb49536ca483ab9ca30dc7b31c09025095457a98e17c1ee091c3367c617ab58eaa10143fcb90ebf461a24ddcf6e789174f15268601492d48c67593da4ad58870e433e51c56d753e2b7eafc2cae3a1ab474b503742e7d94edd3d7fe40900865f", 0xfd15) dup3(r1, r0, 0x0) 14:36:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x4) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r0, r0, 0x0) 14:36:06 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000200"}, &(0x7f0000000700)}) 14:36:06 executing program 5: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x800) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}]}) arch_prctl(0x2002, &(0x7f0000000180)) 14:36:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x2) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x8000000000000, 0x7, 0x0, 0x0, 0x2, 0x800000000}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, r3, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000000)={0x800, 0x5, 0xffffffffffffff01, 0x10000, 0x8, 0x100000001, 0x1, 0x100000000, 0x0, 0x6}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r0, &(0x7f0000000080)="884f05644ba434e46a8efab39b52482dc854e095bf30a9b61ae46e", 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x80) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$TCXONC(r1, 0x540a, 0x0) pwrite64(r1, &(0x7f0000000000)="08fd388411cf4418d41aac875e06a587c7bfff70e295db0130d7b5d2c7f6b5f0d307977f", 0x24, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:06 executing program 5: arch_prctl(0xddb124253147966, &(0x7f0000000000)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x400002, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0xa13, 0x4) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x56, 0x9, 0xc6f, {0x0, 0x7}, {0xffffffffffffffff, 0x2}, @cond=[{0x0, 0x2, 0x0, 0x400, 0x7ff, 0x23db}, {0x100000000, 0x6, 0x933, 0x20, 0x3, 0x3}]}) 14:36:06 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x2}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e21, 0x9a, @mcast2, 0x5}}, [0x80, 0xa8b, 0x18, 0x0, 0x4, 0x2, 0x2, 0x10001, 0x96e, 0x10000, 0x7, 0x3dac, 0x1, 0xfff, 0x800]}, &(0x7f0000000240)=0x100) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) dup3(r2, r0, 0x0) 14:36:06 executing program 5: arch_prctl(0x2002, &(0x7f0000000180)) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xfffffffffffffaa9, 0x40000) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f00000000c0)) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) write$eventfd(r0, &(0x7f0000000100)=0x80000001, 0x8) 14:36:06 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x20000102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r0, 0x4, 0x4000) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:06 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1}) r1 = syz_open_pts(r0, 0x20000) fcntl$setstatus(r1, 0x4, 0x102800) fcntl$setlease(r1, 0x400, 0x0) ioctl$TCXONC(r1, 0x540a, 0x400) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r0, r0, 0x80000) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r2, 0xc0505510, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x5, &(0x7f0000000000)=[{}, {}, {}]}) 14:36:06 executing program 5: r0 = socket$inet(0x2, 0x3, 0x7fffffff) fsetxattr$security_smack_transmute(r0, &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000280)='TRUE', 0x4, 0x3) arch_prctl(0x2002, &(0x7f0000000480)="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") r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) prctl$setfpexc(0xc, 0x20000) futex(&(0x7f0000000180)=0x2, 0x9, 0x0, &(0x7f00000001c0), &(0x7f0000000200)=0x1, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/77, 0x4d}], 0x1) 14:36:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x28000000000) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) ioctl$KDENABIO(r0, 0x4b36) 14:36:06 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:36:06 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) r2 = getpgrp(0x0) tkill(r2, 0x8) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:06 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x8000, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000200)=0x7) arch_prctl(0x1003, &(0x7f00000000c0)="a5416ff6f59f04c7cc0db7bebeb1a8892730699be7eb5f6fb92a5c030406760999bf4c24f02892d4571611436cc72718d213ba5f7e5e1aa82a3e87f99793eba48aa6221d3507b6f6dea7ac1304819064170000000000") r1 = add_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0x0) r2 = add_key(&(0x7f0000000140)='trusted\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$instantiate(0xc, r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="757064617465206563726c797c667320747275737465643a083c7439416210fcbf232a013c9250cf00"], 0x19, r2) 14:36:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r0, 0x4, 0x400808) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:06 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:06 executing program 5: arch_prctl(0x1001, &(0x7f0000000000)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000140)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) gettid() r0 = getpgid(0x0) r1 = getpgrp(r0) r2 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x1ff, 0x8000) write$P9_RRENAMEAT(r2, &(0x7f00000000c0)={0x7, 0x4b, 0x2}, 0x7) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x7fff, 0x3bb, 0x7, 0x2, 0x0, 0x4, 0x30000, 0x8, 0x8, 0x2, 0x3ff, 0x1, 0x9, 0x6, 0x9, 0x2, 0x800, 0x400, 0x6, 0x8, 0x8, 0x1, 0x7f, 0x0, 0x9, 0x1800000000000000, 0xffff, 0x1, 0xfb0c, 0x2, 0x4, 0xcc, 0x8, 0x7fffffff, 0x7fffffff, 0x8001, 0x0, 0x20, 0x3, @perf_config_ext={0x80000000, 0xffff}, 0x20, 0x9, 0x992a, 0x0, 0x40, 0x4, 0xffffffff}, r1, 0x9, r2, 0x9) 14:36:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0x15, 0x6, 0xd6}) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r3 = dup3(r1, r0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000140)) 14:36:09 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = fcntl$dupfd(r0, 0x0, r0) accept$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) r3 = syz_open_pts(r0, 0x20201) ioctl$TCXONC(r3, 0x540a, 0x0) write(r3, &(0x7f0000000100)='&', 0x1) dup3(r3, r0, 0x0) 14:36:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x6}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:09 executing program 5: arch_prctl(0x2002, &(0x7f0000000100)) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080)) 14:36:09 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:36:09 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000feffffff00"}, &(0x7f0000000700)}) 14:36:09 executing program 5: arch_prctl(0x2002, &(0x7f0000000180)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x1, 0x2402) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000002c0)) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000001c0)={0x8, 0x0, [{0x2, 0x4, 0x0, 0xa17b}, {0x80000001, 0x1, 0x1, 0x56b, 0x401}, {0xc000000a, 0x3, 0x5, 0x4, 0x9}, {0xb, 0x0, 0x100, 0x5, 0x6}, {0x4000000f, 0x7ff, 0x9, 0x6, 0x8}, {0xa, 0x800, 0x101, 0x101, 0x7}, {0x40000001, 0x5, 0x7, 0x9, 0x8}, {0x80000019, 0x7fffffff, 0x5, 0xb06, 0x8000000000000000}]}) getpeername(r0, &(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x80) getpeername(r0, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80) ioctl$TIOCSTI(r1, 0x5412, 0x9) 14:36:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r0, 0x4, 0x102800) r2 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffa, 0x482001) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x3cc, 0x8, [0x1, 0xaf, 0x1, 0x1000, 0x7, 0x7f, 0x8, 0x8]}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0xcc6a, 0x203, 0x7ff, 0x5, r3}, 0x10) ioctl$TCXONC(r1, 0x540a, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000002c0)={r3, 0x3}, &(0x7f0000000300)=0x8) write(r0, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r4 = dup3(r1, r0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0xb) getsockopt$inet6_tcp_buf(r4, 0x6, 0xb, &(0x7f0000000000)=""/146, &(0x7f00000000c0)=0x92) listxattr(&(0x7f0000000340)='\x00', &(0x7f0000000380)=""/33, 0x21) 14:36:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) kcmp(r2, r3, 0x6, r1, r0) ioctl$TCXONC(0xffffffffffffff9c, 0x540a, 0xffff) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x10000000000000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:09 executing program 5: arch_prctl(0x2002, &(0x7f0000000180)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x18042, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[@ANYBLOB="91646bb3", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000080)=0x10) fdatasync(r0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x2, 0x0, &(0x7f00000001c0)=""/202, &(0x7f00000002c0)=""/245, &(0x7f00000003c0)=""/24, 0x100000}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e24, 0x6, @mcast1, 0x86}}, 0x4, 0x6, 0xfffffffffffffff8, 0x9, 0x10}, &(0x7f0000000180)=0x98) 14:36:09 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:36:09 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x41) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r0, &(0x7f0000000100)='&', 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) sched_yield() dup3(r1, r1, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x111000) 14:36:10 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:10 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r1, 0x0) 14:36:10 executing program 5: ioperm(0x2, 0x7, 0x8) 14:36:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x2400) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1f, 0x101000) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1) dup3(r1, r0, 0x0) 14:36:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x7) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x80045301, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000080)=r3, 0x4) 14:36:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000040)={0x7, 0x2, 0x0, [{0x3, 0x7, 0x0, 0x5, 0x2, 0x8, 0x8}, {0x6, 0x0, 0x81, 0x4, 0x1, 0x5, 0x6}]}) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:10 executing program 5: arch_prctl(0x2002, &(0x7f0000000180)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x4000, 0x0) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) r1 = shmget(0x3, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x5000) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000040)='syz0\x00') 14:36:10 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000000)=""/225) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000100)={0x7fff, 0x522c928a, 0x7b9, 0xfffffffffffffff7, 0x3, 0x9, 0x0, 0x1, 0x9, 0x0, 0x0, 0x8}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x841, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f0000000240)=""/132, 0x4000, 0x1800, 0x81}, 0x18) r3 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x81, 0x4000) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', r3}, 0x10) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x641, 0x0) pkey_alloc(0x0, 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) pwritev(r0, &(0x7f0000001580)=[{&(0x7f0000000140)="c97e6d1d4dcbaf3ec6c839efce06526b6f1a017a700d76da7d1de689e125bf2b94397f491d49cb5dea617ca3d1d585c3b759f2eded687d1722a68f827567b8e6430d7db07ff2be620f0d0a47543d9f7c347ac841275831879d800a083aa8028bd3e453ca1f78770aa8e068fa68164ffe01a332d106432060db9d5916b27ac91eff1623da76d22281724bc0431136f60e8932295b993abe6190cae2be190736b9d1700728be32a3155691c2bc536ce409e2985e20c964a882d20c6be2b654b5be8b3f50f8c79a39f9ebb9032a34e3159b94062419643fbbe51d1f4521600f7c85dce780c5ec68119749", 0xe9}, {&(0x7f0000000000)="6f4e53d5b2d2d833f3a2646044834abe5a42c24c0163ec30408021e1826246567754be8327a1105bd2f15fdca89812a7a93bf16e1689042a2f79b205aa846b2028e208e0675a32d01f5a43abf10c0ee3d214e477effea745a8f7aab7a541002aaa42627cb807f837f4b9a6857d066419d9446efbda3cf95db7da3a929caad912c3b55653245deeb043e952553ee8ed488177397226a656e183ee894abe9c829bc544652d0d99d3278fbc", 0xaa}, {&(0x7f0000000240)="a2f3a5f8ec692edb114cc14606b3609c2a8cf94bb388b2ac87fdac13618146d8a2a151fd0e2f3676462a6315ab8fc21dc5fc1ac834a88496157ee0336ebea77dafe62f20bd0ee13ebbae56fde6cc79fe17342f9cb989641f241c2679dbff4962e73242247d6a56fa51851b6ce36cd036aa21a9709eb71e4d7773f14aa598463016985f738f5085c43ee1bc9ab38faed103cd51bf9789b8a4254147bea9c35cd8291258eaff79114ee3359c80af547db4d1f31cc3becdf2233dc9d2e30051026fdd17a0c135", 0xc5}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="f580276209f13ccd4bd82df9969f6d59e7745c7c811b410dff0d79e8004a4f6a1013b830d8e825a0689105d4b612fc0d0ac7b8058c41e39d4c24d169e5b2d976350ffaea1ebfc31c73a2e70a94f7c8cbfb884bf3f0e4dad02171d5c3eb2471835553075b8e6b83ed79f6d5b7c02d5227abf36723c473796c4dbc3d6a7e5211e15dffa703a83cd7735dfdaac7019db4a7bbce3283257dc43e4d96fac42828dfc554cfafe7aea4ec9cf3b90c48dfefb28f11ebe16f69bc39982a186672f6a24525596de9e4f9007989ef6908869b054f726298f4cdaa41647aa3133331c2abf0", 0xdf}, {&(0x7f0000001540)="d99bae55551fb8b3c8c21e378189fb778b5d4ea4ad6967611a0692e98cf0bacd1916fd653f44a6a1c99628d530ab955b716710c347131710aa", 0x39}], 0x7, 0x0) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:10 executing program 4: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xfffffffffffffff9, 0x4040) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:10 executing program 5: arch_prctl(0x2002, &(0x7f0000000180)) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x4ac, 0x8002) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000040)={'bcsh0\x00', 0x0}) socket$can_raw(0x1d, 0x3, 0x1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) read$FUSE(r0, &(0x7f00000002c0), 0xffffff57) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000240)=[{{0x77359400}, 0x4, 0x4, 0x10000}, {{r2, r3/1000+10000}, 0x13, 0x1, 0x3}, {{0x0, 0x7530}, 0x15, 0x100000000, 0xd6e}, {{r4, r5/1000+30000}, 0x11, 0x0, 0x4}, {{r6, r7/1000+10000}, 0x7, 0x74, 0x3133cd8f}], 0x78) ioctl$sock_proto_private(r0, 0x89e3, &(0x7f0000000100)="53c0739808cdb1e8fd093799f4af52ecc26d37327e94af6b843144da557eb32b64f8f831b18754b0e5e16c340092d1935bb75017c452ac301995354fb81312f3124ae4bb1eee050562468604b71e46527e75159fbdc54bdf0edf57e7f6a501009d5be6454569a699b643dfd19eb9f611c888e965d5c3913d67cd4fc4f398ab3e68c593198ee0a8") fcntl$setlease(r0, 0x400, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x400000000009c, &(0x7f00000000c0)={@mcast2, r1}, 0x14) 14:36:10 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:36:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$eventfd(r1, &(0x7f0000000040), 0x8) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r0, 0x0) 14:36:10 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3f, 0x200000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x93, @ipv4={[], [], @multicast2}}}, 0x9, 0x1, 0x1, 0x401, 0xed}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r1, 0x8260}, 0x8) getpeername$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) arch_prctl(0x2002, &(0x7f0000000180)) fcntl$setstatus(r0, 0x4, 0x40000) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fchdir(r2) tee(r0, r3, 0x100000001, 0x4) ioctl(r2, 0x0, &(0x7f0000000300)="48b92d7988eb3170b6d398e244afa7e4f72e246ec8936125496a32c3015f10640bc712f19ca27c2a3d58d448da14e15d37cb072eec1202336404c7ca99b06251ba4806e5263fd6a86a7b15d4d404948e8a189a4a12189566ccb4976ab3b356") fcntl$setflags(r0, 0x2, 0x1) 14:36:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x80000001, 0x2a8da5ff, 0x66b, 0x400, 0x4}) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:10 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:10 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) r2 = dup3(r1, r0, 0x0) ioctl$RTC_PIE_OFF(r2, 0x7006) 14:36:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) read(r1, &(0x7f0000000040)=""/6, 0x6) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x10000) dup3(r1, r0, 0x0) 14:36:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x100}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000000)="6abda7772a1a29e9bcab06fbd85026", 0xf) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) fallocate(r0, 0x2, 0x7, 0x3) 14:36:10 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udplite6\x00') ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000040)) arch_prctl(0x2002, &(0x7f0000000180)) 14:36:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x4, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfa7, 0x4aa900) write$P9_RAUTH(r2, &(0x7f0000000040)={0x14, 0x67, 0x1, {0xe0, 0x1, 0x8}}, 0x14) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:11 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x8, 0x0, 0xfffffffffffffffd, 0x3, 0xfffffffffffffffd, 0x0, 0x2001, 0xffffffffffffffff, 0x0, 0x5, 0x6}) socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) socket$alg(0x26, 0x5, 0x0) 14:36:11 executing program 5: arch_prctl(0xfffffffffffffffc, &(0x7f0000000180)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000040)={{0x1, 0x8}, 'port0\x00', 0x4, 0x20, 0x7, 0x8000, 0x3f, 0x2, 0x8, 0x0, 0x4, 0x1b90}) sendto$inet(r0, &(0x7f0000000100)="6e3da3c9d82499b1d5a3d28bfce9493ced8a29da97b8c56cd9209ed0804a6908fa7f6e34c4a9a2d57e07da66690a65b9d840086a1b6a635048a790d80809636761123f931870bd2ef54b99402953df4254ad15ea54e98be2035a8ed1c5", 0x5d, 0x81, &(0x7f0000000180)={0x2, 0x4e20, @rand_addr=0x81}, 0x10) connect$netlink(r1, &(0x7f0000000d40)=@unspec, 0xc) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000bc0)={0x0, 0x167}, &(0x7f0000000c00)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000c40)={r2, @in={{0x2, 0x4e21, @local}}}, &(0x7f0000000d00)=0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@loopback, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f00000006c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000800)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0}, &(0x7f0000000880)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f00000009c0)=0xe8) stat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, &(0x7f0000000b00)=0xc) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f0000000b40)={{}, {0x1, 0x2}, [{0x2, 0x1, r3}, {0x2, 0x4, r4}, {0x2, 0x3, r5}, {0x2, 0x4, r6}, {0x2, 0x7, r7}, {0x2, 0x2, r8}, {0x2, 0x2, r9}, {0x2, 0x3, r10}, {0x2, 0x0, r11}, {0x2, 0x2, r12}], {0x4, 0x2}, [{0x8, 0x4, r13}], {0x10, 0x2}, {0x20, 0x4}}, 0x7c, 0x2) 14:36:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1004}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x40, 0x0) dup3(r1, r0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) 14:36:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0xffffffffffffffca}) ioctl$TCSBRK(r0, 0x5409, 0x2) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102802) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) ioctl$KDGKBDIACR(r2, 0x4b4a, &(0x7f0000000000)=""/54) 14:36:11 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='changehat 0x0000000000000001^/dev/ptmx\x00/dev/ptv/ptmx\x00'], 0x3b) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r0, 0x4, 0xc00) write(r1, &(0x7f0000000100)='&', 0x1) r2 = fcntl$getown(r1, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000000)={0x8a0000000000}) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.evm\x00', &(0x7f00000000c0)=@ng={0x4, 0xf, "4f9dc7"}, 0x5, 0x1) dup3(r1, r0, 0x0) 14:36:11 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000feffff00"}, &(0x7f0000000700)}) 14:36:11 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x8000, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000100)=0xfd, 0x4) socketpair(0x3, 0x7, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000040)=0x8, &(0x7f0000000080)=0x4) arch_prctl(0x2002, &(0x7f0000000180)) [ 329.543774] audit: type=1400 audit(1539700571.312:35): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14204 comm="syz-executor0" 14:36:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x58cf, 0x10400) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000080)={0x80000000, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e24, @local}, {0x2, 0x4e22, @loopback}, 0x42, 0x6, 0x8, 0x80, 0x2b7, 0x0, 0x17a, 0x7, 0x200}) r2 = syz_open_pts(r0, 0x20201) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000140)={0x40000000}) fcntl$setstatus(r2, 0x4, 0x800) ioctl$TCXONC(r2, 0x540a, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x100000000, 0x400000) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r0, 0x0) 14:36:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2000000000400, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000002c0)=""/4096) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x40) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) r3 = dup2(r0, r2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r3, &(0x7f0000000000)='./file0\x00', r4, r5, 0x1800) dup3(r2, r0, 0x0) 14:36:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) readahead(r0, 0x81, 0xfcc) fcntl$setstatus(r1, 0x4, 0x102800) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xffffffffffffffc0, 0x80202) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x94, &(0x7f0000000040)=[@in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e21, 0x6, @ipv4={[], [], @remote}, 0x400}, @in={0x2, 0x4e20, @rand_addr=0xb26b}, @in6={0xa, 0x4e22, 0x0, @empty, 0x4}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e22, 0x3, @loopback, 0x8f}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000180)=0x10) ioctl$sock_inet6_udp_SIOCINQ(r2, 0x541b, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000001c0)={r3, @in6={{0xa, 0x4e20, 0xddc, @dev={0xfe, 0x80, [], 0x16}, 0x8000}}}, &(0x7f0000000280)=0x84) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:11 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:36:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) dup3(r1, r1, 0x80000) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x40000, 0x0) write$P9_RMKNOD(r2, &(0x7f0000000040)={0x14, 0x13, 0x1, {0x12, 0x3, 0x8}}, 0x14) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x40, "78100d05294870720328435e855568d656b207cb50b4a45a86aea06aaa42e84bdee5d0fd6fe04d1a948546c7da9ca9d773d413da9e6a65c370f4ae29f484671c"}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r3, 0x1c1, 0x30}, &(0x7f00000001c0)=0xc) dup3(r1, r0, 0x0) 14:36:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x2, 0x0, 0x0, 0xfffffffffffffffc}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x2) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:11 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x0, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000080)={{0x2, 0x3}, 0x2}, 0x10) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x4, 0x8000, 0x5, 0x20}, {0x80000000, 0x3, 0x2, 0x1}, {0xa6c, 0x0, 0xffffffff00000001, 0x1}, {0x7fff, 0x4, 0x0, 0x1}, {0x40, 0x8, 0x400, 0x6}]}) arch_prctl(0x2002, &(0x7f0000000180)) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x1, 0x400000) 14:36:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000540)='/dev/vcs#\x00', 0x6, 0x20400) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000580)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0xf7ae, 0x0, 0x80000010001, 0x2, 0x2, 0x6, 0x8000, 0x800, 0x7, 0xfffffffffffffffa}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x1) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f00000000c0)=0x5442) write(r2, &(0x7f0000000100)='&', 0x1) r3 = dup(r2) ioctl$DRM_IOCTL_SET_MASTER(r3, 0x641e) r4 = dup3(r2, r0, 0x0) ioctl$KVM_SET_XSAVE(r4, 0x5000aea5, &(0x7f0000000140)={"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"}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000005c0)={0x0, @aes256, 0x0, "597264b2f37dbd53"}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000040)=0x400, 0x4) 14:36:11 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000000)=""/154) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:11 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) [ 329.949302] Unknown ioctl 1074812117 [ 330.001695] Unknown ioctl 1074812117 14:36:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000000000000) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000040)={0x6909, 0x1, 0x80, 0x4, 0x2}, 0xc) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000000)={'sit0\x00', {0x2, 0x4e21, @remote}}) dup3(r1, r0, 0x0) 14:36:11 executing program 5: arch_prctl(0x2002, &(0x7f0000000180)) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x200, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)="9cea633abd1792064b555fccd7b06e8c61ff5d96a75b69b3b61c5323a331268227578499405e9662266fce75d5748ad20630b90148ba79fa9c44889a4879013902ba20313a078be4411fa05f39e452ba0dcc9d06aba956cda8ae2f02d7c7d1a4716635c5da4567041c2343ec967e829f381f7b2d7c7d2bbcb0a1074a1914c68c5709bae23d67e4165b2c4a") get_mempolicy(&(0x7f0000000000), &(0x7f0000000080), 0x2, &(0x7f0000ffa000/0x3000)=nil, 0x1) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) 14:36:11 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x210100, 0x0) write$FUSE_OPEN(r2, &(0x7f0000000040)={0x20, 0xffffffffffffffda, 0x7, {0x0, 0x7}}, 0x20) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000000080)) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x90000) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000140)={{0xa, 0x3, 0xd88, 0x687, '\x00', 0x800}, 0x1, [0x3, 0xffffffff7fffffff, 0x7, 0xfff, 0x1, 0x4, 0x8, 0x56, 0x5b, 0x9, 0x0, 0xfffffffffffffffb, 0x9, 0x7, 0x3, 0x9, 0x3ff, 0x7fff, 0x6, 0x1, 0x4, 0x100000001, 0x8, 0x0, 0x1, 0x7, 0x37, 0x101, 0x3, 0x9, 0x3, 0x9, 0x800, 0x0, 0x6, 0x4, 0x0, 0x6, 0x5, 0x7, 0xf18, 0x100, 0xfffffffffffffeff, 0x3, 0x200, 0x10001, 0x2, 0x2, 0x8, 0xffffffffffffff1e, 0x1, 0xffffffff, 0x7, 0x3e8d, 0x0, 0xfff, 0x10001, 0x9, 0x2, 0x987f, 0x5, 0x1, 0x7, 0x800, 0x8, 0x5, 0x0, 0x0, 0x8, 0x8001, 0x0, 0x74d, 0x6, 0x4, 0x0, 0x49, 0x2, 0x9, 0x0, 0x8000, 0x8, 0x2, 0x100000000, 0x1, 0x1ff, 0x6, 0x3, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x5, 0x1, 0x7fffffff, 0xe55, 0x8001, 0x8000, 0x5, 0x7fff, 0x5, 0xfffffffffffffc00, 0x7, 0x1, 0x200, 0x7, 0x7c1, 0x2cd0, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffffc, 0xfffffffffffffffa, 0x81, 0x4, 0xcd, 0x20, 0x6, 0x6, 0x3, 0x8, 0x1ff, 0x2, 0xffffffff80000000, 0x5e3, 0x9, 0x80, 0x5], {r2, r3+10000000}}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r4 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r4, 0x4, 0x102800) ioctl$TCXONC(r4, 0x540a, 0x0) write(r4, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000698000)=0x3) dup3(r4, r0, 0x0) 14:36:11 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:11 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x202, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000180)={r1, 0x80000001}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) ioctl$NBD_DISCONNECT(r2, 0xab08) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)={0xfffffffffffffffd, 0x5}) r4 = syz_open_pts(r3, 0x20201) fcntl$setstatus(r4, 0x4, 0x4000) ioctl$TCXONC(r4, 0x540a, 0x0) write(r4, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000698000)=0x3) dup3(r4, r3, 0x0) 14:36:11 executing program 5: arch_prctl(0x2002, &(0x7f0000000180)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x240100, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 14:36:12 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:12 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000000)={0x9, 0xd5, 0x4, 'queue1\x00', 0x5}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r1, 0x0) 14:36:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x2301) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000000)='&', 0x1) dup3(r1, r0, 0x0) 14:36:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) write(r0, &(0x7f0000000000)="834ad9f260dc6e974eea14b8ec89aacc5f239997dbce4a52125b7164bcaf5bda0c243ea7d8809b84aea2ebfc2e38a6bb434c9f6084a73108badf1b4d87b6a124688b6d1bab61dc597b7318c0080dfdf645df23ba847473f2e93a14bd94485d1cc53eeddfb1ac73d7acd84305447a06b78ef73b3123021cfac70ed825524889a48ccce4318b495d", 0x87) 14:36:12 executing program 5: arch_prctl(0x1003, &(0x7f0000000000)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x800, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000080)={0x1, r1}) setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f0000000140)='y\x00', 0x2, 0x1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x9}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r2, 0x1ff}, 0x8) socket$inet_dccp(0x2, 0x6, 0x0) 14:36:12 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x3f) 14:36:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x8800, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) r2 = dup3(r0, r0, 0xfffffffffffffffe) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x3ad}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e24, 0x200000, @remote, 0x8001}}, 0x8000000005, 0x40}, 0x90) 14:36:12 executing program 5: semget$private(0x0, 0x4, 0x223) arch_prctl(0x1004, &(0x7f0000000080)="f177c91410609b5c71107c2ead2a42d912a29d538cdfb03a3a8398fb9148f6e31459d945fb6e4ff467c4305c99c79953b84a1328205ad38b805b2753aa708cbe29953ea7275e36645f25a4b58ec5cd61b078ed635fedf3fd7719da438c0c1af71b000000000000ac2b6315a7b14e4e3f3efd729b69ab00b9e93f5cfd8804e146d12a7e73628a386cb25695156ee8f6650af6777809b1ee1758ca8babf39a20e150088f2beb846107a902d4cd3892c81d11080e940b16ffed000000000000") 14:36:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1b3800, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) fcntl$setlease(r0, 0x400, 0x3) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc) dup3(r1, r0, 0x0) shmget$private(0x0, 0x4000, 0x78000600, &(0x7f0000ffc000/0x4000)=nil) 14:36:12 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000001440)='/dev/adsp#\x00', 0x7fff, 0x201) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000014c0)=0x0) getresuid(&(0x7f0000001500), &(0x7f0000001540), &(0x7f0000001580)=0x0) r3 = getuid() socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000002800)={0xffffffffffffffff}) r5 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002cc0)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000002dc0)=0xe8) stat(&(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0xf, 0xf, &(0x7f0000003280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0x25}, @exit, @map={0x18, 0x9, 0x1, 0x0, 0xffffffffffffff9c}, @call={0x85, 0x0, 0x0, 0x11}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x3c}]}, &(0x7f0000003300)='GPL\x00', 0x4, 0x0, &(0x7f0000003340), 0x41100}, 0x48) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000003400)={{{@in6=@ipv4, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000003500)=0xe8) r10 = getuid() sendmsg$netlink(r0, &(0x7f000000a100)={&(0x7f0000001480)=@kern={0x10, 0x0, 0x0, 0x80010006}, 0xc, &(0x7f000000a040)=[{&(0x7f00000015c0)={0x1144, 0x1f, 0x100, 0x70bd25, 0x25dfdbfc, "", [@nested={0x10cc, 0x83, [@typed={0x9c, 0x39, @binary="f9ffe489e0abe067e6acfeed20f8543d18568eb26330a3db67a2f7709e819abecd75de2a10a1d289059dd29eaff29481d841f91ac7a1edc5dd010b8e32ad154f78a28e691f3498c5fbb0462a75d841a5475932b82bb31a9d05209acd5f375265e3e785a56f5bbeeb136786b1e81a16839c7db995080a401963914ff7a7967a92384b751d8da13c6753401a4160ab6e17115afc61c1"}, @typed={0x8, 0x58, @pid=r1}, @typed={0x8, 0x75, @uid=r2}, @generic="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", @typed={0x8, 0x7, @uid=r3}, @typed={0xc, 0x77, @u64=0x400}, @typed={0x8, 0x32, @u32=0x2}]}, @generic="193b89d1f61fc74584f0d3cd4efcf4ad7b944140a0969f23bd4f00368daed157ad853409", @nested={0x44, 0x79, [@typed={0x8, 0x3b, @u32}, @generic="ec37dcd536ee295a36dce1c9038a408e6b64bfd7587f3c343e6163a19d256b4456e7ac962f63faf273c037c955cc4e0a0bc92bc6e7c68ce2"]}]}, 0x1144}, {&(0x7f0000002740)={0x10, 0x1c, 0x100, 0x70bd27, 0x25dfdbfc}, 0x10}, {&(0x7f0000002780)={0x74, 0x26, 0x400, 0x70bd29, 0x25dfdbfd, "", [@generic="01f6a867b1edaee155ea4bdc18acaa44d11dc5e97b94b4cb7d193077b0cddc9aa65027d1a1f2a76c3697c47862006d7ceaff0e5f884c0cba53c0b68cad307ee9b8ab11a46528", @typed={0x14, 0x6f, @str='ppp0ppp1{md5sum\x00'}, @typed={0x8, 0x66, @ipv4=@remote}]}, 0x74}, {&(0x7f0000002840)={0x450, 0x1d, 0x200, 0x70bd2c, 0x25dfdbfd, "", [@generic="9d67fc219d05a5f503713547de4e79066e2435369580622a7c557279c67926c4b1134a19668f6730674d2f7d2ea212656ab534e430fd5625adc509dff84ab97a59540c5b3558c5aead59d984ce358019245591133bd1d0f106e3d7984231dd341ee586534fafe89ef68faa0e7c05a9dac3e367b635362c61012af24c3feea30dfe093ffb21cf582b95700de5d11456eba76b7b9c8dd1215a61a4770f0e63f2bac72ac30d86722c8b41", @nested={0x228, 0x88, [@typed={0x44, 0x17, @binary="cee2097b20668d4da610903f17c124c0b1145221b801ee0518331c35c87fcf5c60196f994cc6b39ba9f3825855b07f3c647a344ea7666a57ac187dd2a5e6"}, @typed={0x4, 0x89}, @generic="b9e3683be59260343d740a61d5f6ce935a6019d84afd8deb7aba86542f79784a1ff45aba666548b36ed6b68f9ebe151f872bb3d61c204da64c9b9888dd1e1e5b73f94b8354361356f84b9730a3e79a91b6590523aa745a3173dd3f5b117f7247976f9bb119685c47eaf5ecd453e34c7757a5ab68a4cc37a39f808a027a6c0df41d1327b42fef8dcf20a387b5914f6eed376c2804cda1925eefde1c92f20f602ac1c5725db408811ee4a2f5baf4b34ae4a0124bd0d906637a550341ba457897936fc94c33033c18666883f60dc27eeef9170e0b8e2cfeccfcd30bcb01afb1ea93fce98cd7c93d", @generic="04c27b957500c2e61700dddd35bb235169650ca1cadf603a1a93f36e725166f9d6464583ecbf06cd3c1f95140e22ece172632cab9ef8921a0c179fb0f08da15f548bc6259263fac19b6295519e22ab5af3281e04725a84ca6f1147d6f151d5a69acfa9ca3eac9426c442f521", @generic="f3fdf08d33141de16f05d20c92cea990c7f43f6ad867f2eb0e10965f632db276ad795d1c3ca113caa5f9b811d359011cd49cd6afaf", @typed={0xc, 0x20, @u64=0xfffffffffffffffb}, @typed={0x48, 0x4a, @binary="282232a59ac1af0d99d5e7f96df2a3a67c9a8fd46d948b94b1845e5960a6bc2594bc6e1aaf8b2fa3bc706ae4d35d6d5a310c7c148737dc21a3328cd3ca2c65f63598"}]}, @nested={0x108, 0x2b, [@generic="469ff400836edf304ebc019709cea2727a0d741d6462f49947cd4e332d9f08fc9c6e8ed8dfb4a0e6d7859aade3c67e5172b7cd1010f2f9a67f61731dc8ef7b258639fcb7403c09480e1e7a43e337251597e3f9058d02070ca5f0aa58b4603130531a52337c0a47b792b0da2566778e00278781f171a9fe5ec68302a7784189dd1d091fba234b4d486fe350b111e069cafcc4abe0204d6308fbdb51c09af659d0d43221004eb76d24b3cdce9be9e638ec21d821daf4359da90c1cfd7ce04bc19197b68354a582d91dc08c0b1d7f6908a4bd0ed8e179c95a68df77fe", @typed={0x8, 0x2, @ipv4}, @typed={0x18, 0x95, @binary="9c49bfdb9cb80fec6d71111fc33ff2313398"}, @typed={0x8, 0x51, @fd=r4}]}, @generic="2112e426639a250207e5371c19724b8170ee7267a3aedfbf65e2a2f7eb3c00d987f54062aaaea8567393c5f2d20d7d7083cae31cbdfb55304c071ab17b52efc3afe42344ff84dd831e3d29fa3803f3", @typed={0x8, 0x8c, @pid=r5}, @typed={0x10, 0x8a, @str='/dev/ptmx\x00'}]}, 0x450}, {&(0x7f0000002ec0)={0x3a4, 0x29, 0x400, 0x70bd29, 0x25dfdbfe, "", [@nested={0x90, 0x33, [@typed={0x3c, 0x7b, @binary="d58b0a08a0a7c583f7a6e88616eff27a62c1ae282d0ddd0c56cef1262adc2139deece51ecd23655f131b99c143f5277ef72c8fff6707"}, @generic="8ef22677a4818bc9a1aeb71de3baf3e734a970e93de985b651f0c49c202045a9e115214450599b04db312c355956cb6d912bf6b3d1f51dbcebdc62bb392adef58078b2f74ba9606146ded83f0707ef"]}, @generic="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", @typed={0x64, 0x2, @binary="53ed3931d268fd24d88b405634b3b141b012008f2ee8f2538c65ad3d64faa68750228b620a0c5533fac0691821274204bd381e1213f5a859b69d9b5048c45244253fb83480565c6b23fa6f6f46e045f496d7cb6a1a23deae177be17d8568f145"}, @nested={0xc, 0x15, [@typed={0x8, 0x18, @uid=r6}]}, @typed={0x8, 0x4b, @uid=r7}, @typed={0xc, 0x96, @u64=0x9}, @typed={0x10, 0xf, @str='/dev/ptmx\x00'}, @nested={0x170, 0x23, [@generic="3e1a937698130a06f61173098f88cccc31c89a2651d3fc612925b8bd16316e461dc5b7e9c38198c92a05a99b509a2cc3606d69e5294bf0c60ab1ae3ddebfd43f2c255a880a8a629a4ae65286", @generic, @generic="71d0f324ba9da795c1c92adcea05a2054d3221d4d7c90875", @generic="d868d6d7b486", @generic="779e8129ae915f36de121f66787248f10976210bade945b0a90a301c6446c0230bf45a016965be9990964658dc", @typed={0xd4, 0x50, @binary="c6e29d44c188664b01b22102258a161e2d1684c2837c6645c1ec924ce87c8278313b926dac1d9183b144fb7137cd2d3f6df385bd7409c07220f38c788cb0c389527b79794fa7cc195e6dec9a83d7d36ef8c9e05703db0f45025cbc1aaf38789914e501f4758c39886449172ce5c1557303896c2555204ad4fd4eca3e7e872d134797cc146b7891ff98957bf2577b194c4c3923a9402849cf4f30ede2d583b750acd48621873cd66cfe8b4609a57d5421d34043a4c0d5ae65593e75b979d4af4b878f7eebc2741c0db748c7a431"}]}]}, 0x3a4}, {&(0x7f0000003540)={0x1580, 0x19, 0x8, 0x70bd26, 0x25dfdbfb, "", [@nested={0x1b0, 0x88, [@generic="28212fcce542c09a724bd14758596b73c0b2092dbb9a2032", @typed={0x8, 0x51, @fd=r8}, @generic="e7b72884ad2c2e6a47477cd370274fc8a5d6b4313798b80b919aca753361a68dd54380efa583c5d973f3ae2c82cb85ad3d154414038ec768fdba9b47dd6210ff4f982e4920529cdb6af694d2108f7ef633cfab43f5694c4668ae440ce638bcf162f4cc30a0b425dd7fa1be4a52a81ab707bfae43b2ff2a602990cde6ee94b0a489af1747308a22ceee4abad3c5c8c58eae6c9c8478edd7958b7a404b89ba7e", @typed={0x44, 0x53, @binary="a8aa04ea5125c4798964c0ebc6a0e930aa2572724ddb4b05d9bac00ac5386848f03fa5297a0e45ba8ce00f29e843cef60f1a3c2b56dee0976c10ba745a"}, @generic="117f5a576e7a8a86e9bbddf7605a0be4f34cecd705778f22503c2ed52d797077ef97d7b5e568f2a1b1ebde5108eff363b3c85456993e83b211315b3867e3d3a04e4010ad17efe76f641ddc4f02f32edf88a05c768edd28e88fbbdd8af323ac267a3de410eea14daabec1318a4068d05e59bd75bbfdbe8a8d3561b2e04044a57cb4ae48dd0e197cd9d7cf1da7eb8d998296fd8d8a76ffef87864ce8656639e57adab9490704391b71ce"]}, @generic="f8202c043d7e07831be80c076cc258ff974e02d281232f747e4d520178810fda9671ab3c06899a735d2429ca190fa6453f10693b344742a65d13e5a9232f50d933e668352d33ff3f9cc5df8c13e54b82e99a4dfbb1aa3b6fe35c33f79c96b7860a1678521c9c9aa109c89d75d58c90746a6ff9836d20e81d18da34e69d9bdd5b491b6845b75a785664599cf66b02136c7ea7112bd221bf66704f0d50acfd260a8c5dd350d61b986d098754dfc9de17f299fa542ee2e2225cd5759bf76a4757d3492617d2", @nested={0x9c, 0x25, [@generic="1f27ff932aec34564299c7fc7c5574a54c0989f2c9ccb49c42b34bc2cbd36e591e30d312d19f7a8db6f0840683ad439cf5792a527750258bb74c39bd249708b0abfb714eb2c61151594ed4719c0c7d87bec3e417fca51e0278def723cd24e91ac5f40d4849b61023532b429f732c2ea41adfbdf75aed8d9e087812790bacf9ae2dc3dc9f9cc414b3b7219e608bce73", @typed={0x8, 0x7e, @uid=r9}]}, @generic="a0a4a8e09335f863e00ea15da6a293b16359845c84f264a91328d67b2bfbb04d9d20460f4c154550e6796166728004e207e5cf307306e7940e3e9aa7d6784ca5de477acfb928d36598ec33981c844db99d0769", @generic="75873d8068f258119d521442e87c552d6870e76874f4ff64602815f38c193709b8b423015f909ac5be014de1be8c4aa1afc8631c72ce0ef9a7596916325e3a40189ecf4a797dc3fe8d67670a68702c4b71509e87bb00b4b2e0b1f93b6d0bc2261622f8da48fc9e0e5bbe6cb0c38198be48a598a9a014a806ad11a87fd328c4fb9309ff6ccf08d7722bd8fdecabcb5fbb84d01c20797a9ef8dad045d6ef2998ca835c73b3bda4f838fc757a59aa9794e410f0995a3580dcb6677f8ed4eceb87f049dd0d033df136d989fce6918c849c21b84435260d22fe1596fd", @nested={0x1130, 0x25, [@generic="967d35238169d27dce8409e4ca2b1c40e846294c6863ecd103084b358811f3659fb5ff5562e2f47b34117ea8827b5ed6b8ae7ee664a7e2c57c75c193659aff8cc23478eb0f258641900d93ede0778233bf132f30c4e1e820164bc0cd64c9a15720be2c3078286bd0dde61ae351822b22af1d878f09fb9b1980c793374e", @generic="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", @generic="9d2b49a6b2bf3a030e048e1747ee6483f315292c74073969a8e305", @generic="0db41a5aecb13c91e06c1728bcf0ce6c03bd46abdc1fa842729a4ce24dee9637c3ccb3e1ca6f4addf796c71392f87bbb6c99dcd292bcfc3ca5620506af3f357a8fcdac7f453d19b3bfec589e48d1f16c2fa5b324d7f86db54d8659d318553ffde916804c67e419acb3ccb8e383fe4b4c333645dd7a230ad9ff2e86d598fa052c4d261a9c52cde14d60608fdaafcce987f1d090d4"]}]}, 0x1580}, {&(0x7f0000004ac0)={0x5474, 0x3e, 0x500, 0x70bd2c, 0x25dfdbfc, "", [@generic="4d633c94e59f397874d9dd0ff316e3ed697646aeaeb23f672ff504f288b6ace4a8743d11003520e76b6a12c0536381f03f5b1dc1ac61de67e6df93f8aef14d6e92d11fe14ed2e1b918eea794aaf86cbf41a01ff555d95fef4d2259bf3e4fdf9d18f20d0f7a9b4c877635d3f907a883186a5d54c61a997e3170b416f8169db39eb674288ec1f6ef27b3c6507237cf97a766ee1300404889bf7fc1fc45fd3b15120edcb623c51fe1157648443ecde50d11188f63a1f0498daef03e4eca72f4a29b5cab7a3178891e664503f5bd958c3e465b973ee9", @generic="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", @nested={0x211c, 0x86, [@typed={0x14, 0x42, @ipv6}, @typed={0x4, 0x47}, @typed={0x4, 0x4b}, @generic="cd8758016ea78a0f4bb1255e2a43ee5ca308cb7cacec7b81b59953679f5412f455881c0fec440e375b909891dc585b65ad789b6d4858be043d56e14478078bbdb70c34610756b9d258783bc39f08e841385bbc3fd50aa99cc00cbdb434e8b766d28513ddcd0587c2c40706f14dec616a038d9ccbbb6be5c75caecdb695cb6677bfbe2988bf0dd12711adcde86cd17dc0d4c69cdffff50da89e4391f35752a1e75aa86703cb179dc41aa2cd6ba8a5ec4caa", @generic="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", @typed={0x8, 0x8b, @u32=0x5}, @generic="164bd252226fa7294e396306f9bec255339e3997cd0fee741230bad3b6f19bfc05741353c32aeb70c0d09998ef34b85df8aa8cbe1a7f9a9d5b6c8d5f", @generic='|', @typed={0x1004, 0x20, @binary="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"}]}, @generic="88aa86894dea4babee76da11b668d91f0d1c43bebba0dca7b0786ae1f6c7806783e666b89da77edba5f5877a4fd887e16a198d4c3f70fd43d11f0d57e4c49107f7c9c9996adfea1898864ffd1258a2cc76b856bc5cbc97953c5c647dee8c3e61a94b21557b2faedd2bf81b1a6c34b860714766472f54636b1bdfa6930df43a7027f9f826056e61058f55bf8072db4befd16f0489ddb715413841f380904712e5a280e1bd2f0e1d452c08966c1878ee1812c635136c4d110c", @nested={0x21bc, 0x48, [@generic="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", @generic="95322a36df33f2c52b3fd15c1af512a40744c2dd6e10110d21d7b893e939377c23beb711eca0a2bd1e2dd863732157c89ccbea063d0e1ee85ac1fb22a59f665f3d29db9924610ce0879f2becca258a789ba0d1065442b7d9467b26823d9a9475dc598ea7cf28e5389f473b3992349f41619b50b7d61bce0f2027fd265fa3d95c68ddb8471fe38990b80f025447e3bbf6e99a6a8c1e1e41465225e7110929c6a350ccdffe2f1fc1f4a4483393f5a8c777a80056fd544424e0e0afb545cb01b02b888cf92435fe79378f45b3ab852d2b381048de5fef5f98b5", @generic="d9141514ef73b9d70261e849588e02ef292d182977a031f6f97c34fd19fd81b104693f383e1fd600a3d9d61677", @generic="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", @generic="de3d677d6416b7f07ffe9c89d98eabfb72b7a5fa4a2bf256a05770fadd46d4edb86b75703acf36c23b3f01f0262bf663fcb8a9eeaf2a162f4e3ed7d794013004c4fd4e4039be6fda48783271667db92f0aed5597066c34fb11bf0c885957b4afa711863885740790835dd27c37edd5df6fa9d7a6a1daabfc721106080cce122de30d89f705d18bf9923114bf2fb1ffa8e47d3e6a11b938758e342b7eb889b257a06d84803238ea657cc2a3ef30323d", @typed={0x4, 0x84}]}]}, 0x5474}, {&(0x7f0000009f40)={0xa8, 0x2e, 0x110, 0x70bd26, 0x25dfdbfc, "", [@generic="f8e364f7c0a68bd7b21ae20d89c7a4a6e4a35980fb4cfd13d85896f67b9bce3cfc7527aec9a45a646579bc616ab86f0ac495ab8e4eae805061736f33be8baf22759b198d7fde7dba43990ba68bb6798e04d77b1f5931304c7aa7223b492b8a4a41c504d66486b21f29a651f0a46cac8e99fc9039a7ffe105a7a5b501eb364e6423394d61eb15dfa2bfdb40a99ef484055fe7e00fdbfd"]}, 0xa8}, {&(0x7f000000a000)={0x18, 0x3e, 0x302, 0x70bd27, 0x25dfdbfc, "", [@typed={0x8, 0x48, @uid=r10}]}, 0x18}], 0x9, 0x0, 0x0, 0x1}, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r11, 0x40045431, &(0x7f00005befdc)) r12 = syz_open_pts(r11, 0x20201) fcntl$setstatus(r12, 0x4, 0x102800) ioctl$TCXONC(r12, 0x540a, 0x0) write(r12, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r12, 0x5423, &(0x7f0000698000)=0x3) dup3(r12, r11, 0x0) 14:36:12 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:36:12 executing program 5: arch_prctl(0x2002, &(0x7f0000000180)) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0xc0582) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e21, 0x0, @ipv4={[], [], @broadcast}, 0x3}}, [0x645, 0x4, 0x9, 0x8, 0x8, 0x4, 0xffffffffffffffff, 0x3, 0x5, 0x1000, 0x3, 0xfffffffffffffff9, 0x9, 0x0, 0x76a472c7]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={r1, 0x3}, 0xfffffffffffffcd6) 14:36:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x7, 0x10040) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000180)={0x3, 'veth1\x00', 0x3}, 0x18) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x3, 0x0) ioctl$KVM_SET_TSS_ADDR(r3, 0xae47, 0x0) sync_file_range(r1, 0x200, 0x8cad, 0x4) r4 = dup3(r1, r0, 0x0) getsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x2) 14:36:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r0, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:12 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) pipe2(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80800) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000280)=0x42) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0xbdb, 0x200, 0xffffffff, 0x3f, r2}, 0x10) r3 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r3, 0x4, 0x102800) ioctl$TCXONC(r3, 0x540a, 0x0) write(r3, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000698000)=0x3) r4 = dup3(r3, r0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r4, 0x10, &(0x7f0000000080)={&(0x7f0000000040)=""/48, 0x30, 0x0}}, 0x10) ioctl$RTC_PIE_ON(r1, 0x7005) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r4, 0x10, &(0x7f0000000140)={&(0x7f0000000000)=""/49, 0x31, r5}}, 0x10) close(r4) 14:36:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000040)={0x8, 0x7fff, 0x4}) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:12 executing program 5: arch_prctl(0x2002, &(0x7f0000000180)) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x1ff, 0x0) write$FUSE_BMAP(r0, &(0x7f0000000040)={0x18, 0x0, 0x3, {0x2}}, 0x18) 14:36:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x400000000140) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:12 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x200000, 0x0) r2 = fcntl$getown(r0, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000003c0)={{0x0, 0x4, 0x0, 0x8, 'syz0\x00', 0x5}, 0x5, 0x40, 0xfff, r2, 0x7, 0xfffffffffffffff9, 'syz1\x00', &(0x7f0000000380)=['lo\x00', 'vmnet1em0$%securityppp0wlan1\x00', '\x00', '/dev/vcs\x00', '/dev/ptmx\x00', ':\x00', '\'}.cpuset\x00'], 0x40, [], [0x7, 0x1, 0x9, 0x1]}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r3, 0x4, 0x102800) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000002c0)={0x10, @tick=0x3ff, 0x9f75, {0x1, 0xfffffffffffffffa}, 0x8001, 0x1, 0x4}) write(r3, &(0x7f0000000100)='&', 0x1) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x109080, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000280)=0xd, 0x4) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8400, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x3ff}}}, &(0x7f0000000140)=0x84) ioctl$KDSKBLED(r0, 0x4b65, 0x5) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000180)={r6, @in={{0x2, 0x100000000, @loopback}}}, 0x84) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000698000)=0x3) dup3(r3, r0, 0x0) 14:36:12 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:12 executing program 5: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x4000) arch_prctl(0x2002, &(0x7f0000000180)) 14:36:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x4}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x800102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r2, 0x80) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r3 = getpid() sched_getaffinity(r3, 0x8, &(0x7f00000000c0)) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0xad0a66b9a793bf28, 0x0) rt_sigqueueinfo(r3, 0x11, &(0x7f0000000180)={0x9, 0x7f, 0x101, 0xffffffffffffffe1}) dup3(r1, r0, 0x0) 14:36:12 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:12 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) 14:36:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup2(r0, r0) dup3(r1, r0, 0x0) 14:36:13 executing program 5: arch_prctl(0x2002, &(0x7f00000002c0)="7f1b23e9a8955fbc6845b8b656a55e2db2eecbee866401f7807c11713bdac911d76d49c08f27e0687b1792e9cbd599626fc4a7") r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x121001) mkdirat$cgroup(r0, &(0x7f0000000180)='syz0\x00', 0x1ff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000040)={0x4, 0x4, 0x71b, 0x8, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e22, 0x81, @local, 0x400}}}, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYBLOB="ffff7500d2211b44f8ab156c09d6abaa9c098e138356064c7a690c1f0a3679308369f092d3205a3bcb299b4f6b1f8b9909c80882b46e2ed7a7c029b7d02eadb5b14f6b74d90bcb870aa30a1e19c19625e0bc059d3c5015f32fbe5d18570377079712597bab34b8bb9e71c231fb13a59185e0ee39000000000000000000000000000000000000861c7d77d9e6148a3860b28366e8d374b4f639ca1112792bb2eb989499fc090c5abff3b6ac09f130a8f10b59f31dc06227c04d20f7a05e308ff3341d2b5e10f00ee9aece4513c75c1c484ee9d729e3dea0aa7c5263f8ab46d33b9f04dd5482d1529c785b8b0b27bcdcfca06c2466eb72fe15067066af7accc45304713d717f23f8a54b26062c4aede328e56adfd9cdbb01a9dc760310f4e246217ee46719eba8804deb96ec2653a23bf41fea10957c7acc9406d7cc20b564988b283a7c2bb3bc6891bdf3578ed7bd9d473521f0471e7e1cc6fddb671b9f21319f842080c7ac36ae53ff"], 0x7d) 14:36:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x9fffc, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000080)={r2, 0x13}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r0, 0x20201) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) fcntl$setstatus(r3, 0x4, 0x102800) ioctl$TCXONC(r3, 0x540a, 0x0) write(r3, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000698000)=0x3) dup3(r3, r0, 0x0) 14:36:13 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000000)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:13 executing program 5: arch_prctl(0x2002, &(0x7f0000000180)) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$inet6(0xa, 0x807, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f00000001c0)={0x1, 0x3, 0x40, 0xcacc}) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000140)={r1, 0x0, 0xb37e, 0x61, 0x3ff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000000)='posix_acl_accesseth0\x00', 0xffffffffffffffff}, 0x30) syz_open_procfs(r3, &(0x7f0000000080)='fd\x00') 14:36:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f00000000c0)='bond_slave_0\x00') r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhci\x00', 0x100, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000080)={0x9, 0xcc}) write(r1, &(0x7f0000000000)="dfc76e9578293c8a7b3373c4f27537de9c87170c040fef04ff2797501b", 0x1d) dup3(r1, r0, 0x0) 14:36:13 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r0, r0, 0x1000000000) 14:36:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) r3 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r3, 0x4, 0x102800) ioctl$TCXONC(r3, 0x540a, 0x0) write(r3, &(0x7f0000000100)='&', 0x1) dup3(r3, r0, 0x0) 14:36:13 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) [ 331.642972] vhci_hcd: invalid port number 0 14:36:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0x200000) getsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, &(0x7f0000000080)=0xc) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r3 = dup3(r1, r0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f00000000c0)=r3) [ 331.674018] vhci_hcd: invalid port number 0 14:36:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000140), r3, 0x1}}, 0x18) 14:36:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000140)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000005804000040010000580200004001000070030000700300007003000004000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaabb00000000000000000000000000000000000000000000000000007f000001000000000600000001000000ac1414aaac14140cffffff00ff000000aaaaaaaaaaaa00000000000000000000000000000000000000ffffff00000000000000000000000000000000000000000000000000000000000000000000000000ff000000ff000000000000000000000006000100000000ffff000976657468305f746f5f626f6e640000006272696467653000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000f0001801000000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030900040002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000180100000000000000000000000000000000000000000000000000002800434f4e4e5345434d41524b0000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4a8) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:13 executing program 5: arch_prctl(0x1005, &(0x7f0000000000)="14bb89692ef6a7a648d0879f6111acd0e2ff459d77cf0a9deb9bdddede3b3eb8eb9682b05faef7ffa5243cc496a98ac62ca87ed9b6113e464110194e84f418094d3344bd0c7c4d09298230d9fa030ec7735bb5e0e79d8efc3deea2695d18bd1227736699f04805b070f9aee07244ad4c03c66554372f0c5f3f2499c8c6adbe0d7d10277a04e8fb2f4f72cbf38cf32865b0b79334573f04e6d71bb45811f8ba632a834e31a8a8deb05d6782887581") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0) ioctl(r0, 0xffff, &(0x7f0000000180)="f8e1523d3bec1b9aff08481652b33c110ec466cfccd1455c5838c52c7d4d465c8b847e63e617bcc05259ca4fffc54378dfeba9be1d3b62ff5f03ebef99e9821089ebbd01416d1d0a514070b4c67651f0de817a6c019fa1fcaae3646780a6a43fd20818f38c932c92210e5738675be722015d675fb2c0be9cdf8b23126ef281bddaf09b102c62f499289b53ab3079532025b5706137a515d938e894d78fe895c4c57722") getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100)={0x2, [0x4, 0x367]}, &(0x7f0000000140)=0x8) socket$inet_udp(0x2, 0x2, 0x0) 14:36:13 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:13 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) ptrace$setregs(0xf, r4, 0xff, &(0x7f0000000040)="131e97aef3a8f14318092269c5fb54f18f2e75cd063fb5ae6450e0ddcfdc20450509f810e161d238486c975e123dde8fc67f24bf2b3e86ef7b6268caadae4dfdf9090ad5e6ef9231648f601dadefab8579150e72251ab6dcf0b6ec13bb6bbc87bc846b91602cbb2cecc5f9ce") read(r3, &(0x7f0000000340)=""/183, 0xb7) write(r1, &(0x7f0000000240)="26f2ca30cd4503838f707b4f0f518b9159f6993f1ce1aabadae638b4ba23f90d9b7b5a9dc81c0634012faffce5cac52b4113fe49033a5ee7bca9e64e76b5115551e16d1d5b56ff63346fc8120441ed869a7ff00e4e870ec17b8fcb5c70d805fa29995b3ba6a726076ef79c39218bef2db5526a6011506df689f09c563de98c3fc77151e21c60db9f720cca8a845bee981bffb8cde06066d4794009f926110b461c34ae517b15b8e06fbad584e4fadb8b1e0f19886ba3ed578671d5bad967a395c6a13b0384a8da70ad1ac4a7ad1d6fd439b1aaf433a672d429fd37e40fb83c067bf3d4664d75357c5f", 0xe9) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={0x8, {0x2, 0x4e23}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e20, @rand_addr=0x8}, 0x14, 0x6, 0x5901, 0xa2, 0xa3c8, &(0x7f0000000180)='eql\x00', 0x7, 0x5, 0x3ff}) dup3(r1, r0, 0x0) 14:36:13 executing program 5: 14:36:13 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8080) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000040)=0x4, &(0x7f0000000080)=0x2) dup3(r1, r0, 0x0) 14:36:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000000)={0xd0, 0x8, 0x6, 0x10001, 0x8000, 0xffffffffffffffc0, 0xfffffffffffffffd, 0x5, 0x5d9c, 0x9}) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x7) dup3(r1, r0, 0x0) 14:36:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r0, &(0x7f0000000100)="a6", 0xffa0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)="1f65742f72745f636163686500") write$smack_current(r2, &(0x7f0000000040)='/dev/ptmx\x00', 0xa) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:13 executing program 5: arch_prctl(0x2002, &(0x7f0000000180)) r0 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0xe98, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @mcast2, 0x5}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e22}, @in6={0xa, 0x4e22, 0x50000, @empty, 0x1}, @in6={0xa, 0x4e23, 0xffffffffffffffc1, @local, 0x4}, @in6={0xa, 0x4e22, 0x80000000, @ipv4={[], [], @rand_addr=0x6a}, 0xffffffffffff7fff}], 0x90) 14:36:13 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:14 executing program 5: arch_prctl(0x1000002002, &(0x7f0000000180)) r0 = socket$key(0xf, 0x3, 0x2) fcntl$getflags(r0, 0x40b) 14:36:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffeffffffffff}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) r2 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000000)={0x2, 0x0, @ioapic={0x0, 0xfffffffffffffffd, 0x1f, 0x4, 0x0, [{0x15ad, 0x40, 0x6, [], 0x8001}, {0x5, 0x3, 0x7, [], 0x4}, {0x6, 0x8, 0x1, [], 0x830e}, {0x4, 0x100000001, 0x1000, [], 0xfffffffffffffffa}, {0xffffffffffffffff, 0xb9, 0x0, [], 0x4}, {0xfffffffffffffffe, 0x8001, 0x7ff, [], 0x6}, {0x1, 0x1, 0x8001, [], 0x3ca5}, {0x635, 0x7, 0x8e8, [], 0x5}, {0x1ff, 0x6, 0x200, [], 0x5d2e}, {0xb, 0xf15, 0x2, [], 0x9}, {0x7, 0x8fdf, 0x20, [], 0x100000001}, {0x1, 0x5, 0x2, [], 0x391a}, {0x0, 0x3, 0x9, [], 0x6}, {0x1, 0x5, 0x8000, [], 0x7fffffff}, {0x4, 0x4, 0x10000, [], 0x8}, {0x2c69, 0x46, 0xffffffff80000001, [], 0x16}, {0x8404, 0x8000, 0x2, [], 0xebe3}, {0x8, 0x9, 0x4, [], 0x4}, {0xc1, 0x80, 0x5, [], 0x63}, {0xffffffffffff8001, 0x4, 0x800, [], 0xffffffff}, {0x5, 0x5, 0x7fff, [], 0x6949213}, {0x2, 0x0, 0x8, [], 0xfb}, {0x8, 0x101, 0x365, [], 0x10000}, {0x6, 0x6, 0x3, [], 0xffff}]}}) write$P9_RLERROR(r2, &(0x7f0000000240)={0x10, 0x7, 0x1, {0x7, 'cpuset%'}}, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ppoll(&(0x7f0000000180)=[{r1, 0x1403}, {r1, 0x8000}, {r1, 0x3080}, {r2, 0x100}], 0x4, &(0x7f00000001c0)={0x0, 0x1c9c380}, &(0x7f0000000200)={0xffffffff00000001}, 0x8) dup3(r2, r2, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000140)=0x20, 0x8) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0) 14:36:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x490000, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x4080, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) write(r1, &(0x7f0000000100)='&', 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000140)=""/79, 0x4f) dup3(r1, r0, 0x0) 14:36:14 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:14 executing program 5: arch_prctl(0x2002, &(0x7f0000000180)) socketpair(0x5, 0x80007, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040)=0xfff, 0x4) 14:36:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xe41, 0x100) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x200, 0x100) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000080)={0x2, 'team_slave_0\x00', 0x1}, 0x18) dup3(r1, r0, 0x0) 14:36:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@ax25, &(0x7f00000000c0)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x836c}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000001c0)={r2, 0x10, "a3d3ba2b71565253040b659bf3c99fa2"}, &(0x7f0000000200)=0x18) r3 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r3, 0x4, 0x102800) ioctl$TCXONC(r3, 0x540a, 0x0) write(r3, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000698000)=0x3) dup3(r3, r0, 0x0) 14:36:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:14 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:36:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{}]}) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:14 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0xbf, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x5) 14:36:14 executing program 2: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x20201) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x102800) msgget$private(0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) write(r0, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000698000)=0x3) r1 = dup3(r0, 0xffffffffffffffff, 0x0) r2 = msgget(0x3, 0x200) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000000)=""/42) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x0, 0x8, 0x7, 0xb, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_address={0x5, 0x17, 0x32, 0x80, 0x0, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x17}, 0x4}}, @sadb_lifetime={0x4, 0x6, 0x0, 0x10000, 0xfffffffffffffffd, 0x10001}]}, 0x58}}, 0x80) 14:36:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = dup2(r0, r0) getsockopt$inet6_dccp_int(r1, 0x21, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x10001, @dev={0xfe, 0x80, [], 0xd}, 0x7}}, 0xdf, 0x5}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000340)={r2, 0x100}, &(0x7f0000000380)=0x8) r3 = syz_open_pts(r0, 0x101000) restart_syscall() fcntl$setstatus(r3, 0x4, 0x102800) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000140)=""/219) ioctl$int_in(r1, 0x5473, &(0x7f00000000c0)=0x8) pipe2$9p(&(0x7f0000000080), 0x800) ioctl$TCXONC(r3, 0x540a, 0x0) write(r3, &(0x7f0000000240)='&', 0x1) dup3(r3, r0, 0x0) [ 333.026561] Unknown ioctl 1074025834 14:36:14 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$VT_RELDISP(r0, 0x5605) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x55, 0x7f, 0x1, {0x2}, {0x3, 0x7fffffff}, @rumble={0x7}}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r1, 0x0) 14:36:14 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:14 executing program 5: r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7, 0x10000) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000100)={0xe00000}, 0x4) arch_prctl(0x2005, &(0x7f0000000080)="9dab1b7c83c195") socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000000)) prctl$getname(0x10, &(0x7f0000000140)=""/48) 14:36:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r0, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x40) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) dup3(r1, r0, 0x0) 14:36:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fadvise64(r0, 0x0, 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:15 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x47fc) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x51) splice(r2, &(0x7f0000000040), r0, &(0x7f0000000080), 0x20, 0x5) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x50200, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) ioctl$TCXONC(r1, 0x540a, 0x200) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_generic(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1024, 0x4, 0x400, 0x70bd26, 0x25dfdbfb, {0x1f}, [@generic="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", @typed={0x10, 0x95, @str='/dev/ptmx\x00'}]}, 0x1024}, 0x1, 0x0, 0x0, 0x4044010}, 0x40040) dup3(r1, r0, 0x0) 14:36:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000280)=0x5) socketpair$inet(0x2, 0x0, 0x100, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000140)={{{@in, @in=@rand_addr=0x9, 0x4e23, 0x2, 0x4e24, 0x3000000000, 0xa, 0xa0, 0x80, 0x0, 0x0, r3}, {0x7, 0x0, 0xffffffffffffffc1, 0x100, 0xe9c8, 0xfffffffffffffffe, 0x9, 0xffff}, {0x8, 0x2, 0x1, 0x4}, 0x4, 0x6e6bb5, 0x0, 0x0, 0x3, 0x3}, {{@in6=@mcast1, 0x4d2, 0xff}, 0xa, @in=@loopback, 0x0, 0x0, 0x1, 0x7, 0x40, 0x4, 0xc434}}, 0xe8) dup3(r1, r0, 0x0) 14:36:15 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0xb8, "234bef594188867cb6f95ff34471e63c2eaa4bc8e7a9e2672f11e163cd1f9090125553ba788d225a3ddc1e940944ccd65be7076f18386c2e163a5926e5274bf5b1bb6083b5210187dc8e2d70c7a27fec2d0f0c41d9692eea69cd75577346bc00724f94c4ee4ce65bf462b39003458d65774d66669da109f4f81015da9ff6790070beb59e62ef28473599b3a38bd55f69bd0b8ec386e55f2d345ffc10f6c137b74f3a1042c62783dd38e10717a0ed067cd04a1c15fef43574"}, &(0x7f0000000140)=0xc0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={r3, 0xffff, 0xfffffffffffffffc, 0x6, 0x0, 0x9}, &(0x7f00000001c0)=0x14) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:15 executing program 5: arch_prctl(0x2002, &(0x7f0000000180)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) 14:36:15 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000feffff00"}, &(0x7f0000000700)}) 14:36:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) 14:36:15 executing program 5: arch_prctl(0x1004, &(0x7f0000000000)) 14:36:15 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) r2 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt(r2, 0x10000, 0x6, &(0x7f0000000000)=""/20, &(0x7f0000000040)=0x14) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:15 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:36:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1000, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r3 = semget(0x2, 0x3, 0xd5) semctl$GETALL(r3, 0x0, 0xd, &(0x7f0000000200)=""/142) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r1, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000040)="92c63daee467508a74564d9bf4ddada11e88761b50c8594d398876db06f0a203ee1ea714d8b0930d0a7dd3fa3bf4de25ece8ac1ca008c7a2f40a2fcf6d8869477d901193bfaaedb8fbe6a3cca58984032d4293433ecf82596cb4f142f69238c1cd7fef451c7c954c1e39769b877c721f0062671001b3910a6c44b899021f8f5436e4f0d60491b9664c4804965c6c6f8085b32cef6a2a528abcfa2a0749a05fd4eba5aa090e50fc296f2591484457c61869c964ea081fb58b", &(0x7f0000000140)=""/91}, 0x18) 14:36:18 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x322) arch_prctl(0x2002, &(0x7f0000000180)) 14:36:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:18 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:36:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats\x00') setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040)={0xcb7, 0x2, 0x81, 0x101}, 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r0, 0x0) 14:36:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = getpgrp(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)=r2) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:18 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:36:18 executing program 5: socketpair(0x5, 0xa, 0x8000, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xe, 0x20}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x39}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7b}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x93014db68ab4f628}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x81}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x3f}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x90}, 0x804) arch_prctl(0x2002, &(0x7f0000000000)) 14:36:18 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:18 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x80) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f00000000c0)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) r3 = dup3(r2, r0, 0x80000) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080)={0x81, 0x4}, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x8, 0x3, 0x6, 0xffffffffffffffc0}) 14:36:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000698000)=0x3) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) dup3(r0, r0, 0x80000) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000000)) dup3(0xffffffffffffffff, r0, 0x0) 14:36:18 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="5571fdd6de128292cd62eb9e02a393570b37926c8162fc7deb6701459364654e8e6eff88c3b3e5db7131c4483f00bfa06692f4e7402eaba68b974b8046f5a6224e252161e4bb2dbb867f7f3b9c87a28de01144490b3db03fa61b1b2a5ccfe4651158c66a10053acb2d24e75cc048c4fe9e1359f4d9c793547085b1fca8a3790a03ae4c855a4073b998579e3cb9e8d54ef257089bbad333732001c8dfde0f7fba2280ebdad0bea0f210ded97abf8ce6ced2a13a7d14c5c9", 0xb7}], 0x1) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x40) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000200)={{0xc24, 0xfffffffffffffff8}, {0x7, 0x401}, 0x916, 0x3, 0xb4c0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000040)={0x0, @aes128, 0x1, "61eeae61461f473a"}) ioctl$TIOCSCTTY(r1, 0x540e, 0x0) 14:36:18 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000feffffff00"}, &(0x7f0000000700)}) 14:36:18 executing program 5: arch_prctl(0x2002, &(0x7f0000000180)) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x4, 0x400000) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x3) 14:36:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x100020201) fcntl$setstatus(r1, 0x4, 0x102800) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8400) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000040)={0x3, 0x5ec7, 0x7}) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r0, r1, 0x80000) 14:36:19 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000080)={'broute\x00', 0x0, 0x3, 0x97, [], 0x0, &(0x7f0000000040), &(0x7f0000000140)=""/151}, &(0x7f0000000200)=0x78) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x101) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:19 executing program 5: r0 = socket(0x15, 0xa, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100080b}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, 0x0, 0x405, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x795f}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x19}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc8}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x94) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x6, 0x4) arch_prctl(0x2002, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x7ffffffffc) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x5, 0x301340) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000240)={0x1, [0x10000]}) getegid() 14:36:19 executing program 5: socketpair(0x11, 0x806, 0x6, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)={0x3, 0x6, 0x1, 0x0, 0x0, [{r2, 0x0, 0xe47d}]}) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000002c0)=""/160) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() fchownat(r4, &(0x7f0000000140)='./file0\x00', r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x400, @ipv4={[], [], @rand_addr=0x101}, 0x7f}], 0x1c) setsockopt$inet_buf(r3, 0x0, 0x23, &(0x7f0000000080)="e195f03abb65b3a1f22ba5729f2d319b6eaf64355ce3d2e7b07bd81ea115724473406c3bd85db41d3df61b0a0312780405813650926923910a0707282aaf5b75c493d87263a856b07936a7d05893a3da1f9096ed", 0x54) 14:36:19 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:36:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x208000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000000)={0x5, 0x94e9, 0x3, 0x1, 0x6}) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:19 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x1027fd) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000240)={0x9, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x97e}, {0x1ff, 0x4}]}) r3 = dup3(r1, r0, 0x80000) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0xffffffffffffff80, {{0xa, 0x4e22, 0x8, @loopback, 0x80000000}}}, 0x88) 14:36:19 executing program 5: arch_prctl(0x2002, &(0x7f0000000180)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RRENAME(r0, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) 14:36:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:19 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r2 = syz_open_pts(r1, 0x20203) write$P9_RREADLINK(r0, &(0x7f00000000c0)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x10) ioctl$TCXONC(r2, 0x540a, 0x0) syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x10100) write(r2, &(0x7f0000000100)='&', 0x1) dup3(r2, r1, 0x0) 14:36:19 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:19 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x8200, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) arch_prctl(0x2002, &(0x7f0000000180)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @loopback}}, [0x5, 0x10000, 0x9, 0x100000000, 0x9, 0x6fad, 0xfffffffffffffffb, 0x3f, 0xfffffffffffffffc, 0x1, 0x3, 0x2fa0, 0x101, 0x40, 0x800]}, &(0x7f00000002c0)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)={r3, 0x8, 0x49, "b27dee47dd7a2ae1d9fd7357ca520412b38cc49dad7d42851812fe409d7d6af50fb0d04d5d3e21106ceccc7d54a1dc7574dd2d06ed5c5849fe06fda62f2fc1a016d498990ef1b44d28"}, 0x51) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x604, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa0000000000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x804) 14:36:19 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f0000000000)) 14:36:19 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:19 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) r2 = dup3(r1, r0, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r3}) 14:36:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) fsync(r1) 14:36:19 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x15, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@mcast1, r1}, 0x14) umount2(&(0x7f0000000100)='./file0\x00', 0x5) readlinkat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/201, 0xc9) arch_prctl(0x2002, &(0x7f0000000180)) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000280)=0x45) 14:36:19 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000000)={0x3, 0x3, 0xfffffffffffff800}) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x4000, 0x0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x2, 0x2, 0xffffffff}}, 0x30) 14:36:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) write(r0, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$TIOCSCTTY(r1, 0x540e, 0xfffffffffffffffe) dup3(r1, r0, 0x0) 14:36:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x0) dup3(r1, r0, 0x0) 14:36:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x6, 0x1000, 0x7, 0x4, 0x7f24, 0x7fffffff, 0x10001, 0x100, 0x1000, 0xbd3, 0x5, 0x6}) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:20 executing program 5: arch_prctl(0x2002, &(0x7f0000000180)) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9f1b}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x101}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 14:36:20 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:36:20 executing program 5: arch_prctl(0x2000, &(0x7f0000000000)="b7cb56afc6bdb053e55822b9fd578cfb8d5f8b4269e6d2fc68683515c97dd76715ac75cfd163cc2494ed5f8b5772fa15aac0f2b3551d7695b00f225cf85c9bffaf475b71cbf65b04bdb8cbe1fcedd8141a82a2cbe7e1b3ab4662b089a33563341098fdd740ffd65bbb2a2c7bea4123b722e965f19bfb7cd348139d6f54b9b5a816f71c3d52642379add805a2aed629280f8905083ac6afb0058e7705de9d954f2920f096516b93e92fe2a7534f6f5bc96485c3856efaff975ad7aa605e4f01a3375bf898151d") 14:36:20 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) socket$alg(0x26, 0x5, 0x0) 14:36:20 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x101000) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000040)=""/175) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x4}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TCSBRKP(r1, 0x5425, 0x8) dup3(r1, r0, 0x0) 14:36:20 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:20 executing program 5: arch_prctl(0x2102, &(0x7f0000000000)="1a4fcc8b30a93fb28bab9f0e802c74ace5e33fc3b709e44c83afdebc9e5360d2d05d3e5c8f7a3ab0d36c851f1633e2bcacff5c95bcc225a00c9a6ac3f116f6e8d52189fcfa030d10a6fe2dd558a86ba8a64e7d") 14:36:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) userfaultfd(0x800) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x200000000000000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x40c00) write(r0, &(0x7f0000000140)="b3582c9d1689707494f4a94857deb294ab14bffb05a1d66ef3a16f4e138bd41b53bdccb48ee9659b300237cbeb63e475ab79cb848911da6feff713add0f5d1419f59aaf288e11ac0de15998e01fd8ceadb192889c3e55cd03be6c337893f68ee0adf0229104241ed1f0fee7aa3034a158dcf932aa0d0e6cfcf299dfa72cdb9769ca57f7a50fd7e41847be2694c2ae6c6955e6641149e1f78a3b11e223a402a62d32830c0cc65895ddcddfc44e05f7776c08028d52f784f247bc097bed4d39d4ef2c6298062b93e98c3bba522", 0xcc) ioctl$TCXONC(r1, 0x540a, 0x0) write(r0, &(0x7f00000002c0)="8923bfa78a3d9d553f9eb04732243201e91f24ea8fd08820e9db6c4bc208c2d46e75d99df9aeb735db71c55cef94833c5fdc1a4037487c424c56e314349344a4020c898e36f9b812938ee56508f1440e950586ded24387e4f5ac2ed12095490dd13df9467133b3babe54d6842e4fa27c3bcc77973657233fed30622df67874a19e40eb0becdabb41618985b1", 0x8c) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) socketpair(0x4, 0x804, 0x7ff, &(0x7f0000000000)) 14:36:20 executing program 5: arch_prctl(0x2002, &(0x7f0000000180)) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) tee(r0, r0, 0x9, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x9, @local, 0x1000}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={r1, 0xa6, "be280582a90aff38dbf638a0e76c0d28a324c22cfe0099c67ada20a92f08536a99e1fbd9ee54032abfae3e3c6c32b6ccd5e5eda83abc7c52c8055f332e8eeb3ba9cdaea0dc0fbc822b805a5a6e796b3f8562147c1ef6d3a9f654542578de724b1d7aa48960340b68d2b6331dd7063489804da799b15035ab556fc5a8bb54df813959875f2912cf216d60b2578e46009d53e6d09af59742f9995a7c5e407ee196528d3443c95d"}, &(0x7f00000001c0)=0xae) 14:36:20 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:36:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x402, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = memfd_create(&(0x7f0000000000)='\'\x00', 0x4) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x8) r2 = syz_open_pts(r0, 0x20201) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x80000001, 0x2b, 0xfa41, 0x7fff, 0x8, 0x3, 0x6, 0x0, 0x36, 0x38, 0x2fa, 0xfffffffffffffff8, 0x6, 0x20, 0x1, 0x9, 0x5, 0xff}, [{0x70000001, 0x3, 0x2, 0x7fff, 0x2, 0x3, 0x100000001, 0x8}], "46650ec3de3536c0cdf711c6f565d0b6b883eed4e55ce04eaa2985e85f0f2fab35292aa92a8a7061a2c5ef2cde1ec53793b6b619c6762663aa6264adb635658c34062101e991", [[], [], [], [], [], [], [], [], [], []]}, 0xa9e) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) dup3(r2, r0, 0x0) 14:36:20 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) fcntl$setstatus(r0, 0x4, 0x1ffc) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='personality\x00') ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000140)) write(r2, &(0x7f0000000100)='&', 0x1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r1, 0x0) 14:36:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$VT_RELDISP(r0, 0x5605) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:20 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x20000, 0x0) r1 = accept4$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10, 0x800) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x8, 0x1, 0x1, r0}) arch_prctl(0x2002, &(0x7f0000000180)) setsockopt$inet_mreqsrc(r0, 0x0, 0xf25d6670aa32e21b, &(0x7f00000000c0)={@rand_addr=0x5, @local, @multicast1}, 0xc) getpeername(r1, &(0x7f0000000100)=@rc, &(0x7f0000000180)=0x80) 14:36:20 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:36:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x44003, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)=0x0) lookup_dcookie(0x7ff, &(0x7f0000000140)=""/213, 0xd5) fcntl$getown(r1, 0x9) prctl$setptracer(0x59616d61, r2) dup3(r1, r0, 0x4000000000000000) 14:36:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x101103, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:21 executing program 5: arch_prctl(0x2002, &(0x7f0000000180)) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xb00) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xc83}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e24, 0x7f, @remote, 0x7}}, 0x3f, 0x80000001}, 0x90) 14:36:21 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000180)="0f00db670f01df66b8000000000f23d80f21f86635400000f00f23f80f09b800008ee00f009a00000f212b0f01c30f21b00f1af9", 0x34}], 0x1, 0x10, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000540)={0xd0003}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="153f6234488d") socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000340)="643e67660f3a61ca9bbaf80c66b8bc5d158866efbafc0c66ed66b9800000c00f326635001000000f30f40f38c94bf80f380b5775260f01ca0f21360f180ad810", 0x40}], 0x2d3, 0x0, &(0x7f0000000280), 0x0) set_thread_area(&(0x7f0000000000)={0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x8, 0x1, 0x7}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f00000001c0)) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000680)=""/154) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) r2 = dup2(r1, r0) read$FUSE(r2, &(0x7f0000000140), 0x1000) dup3(r1, r0, 0x0) 14:36:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r0, 0x540a, 0xfc) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:21 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0x1f, 0x2, 0x40, 0x5e}) dup3(r1, r0, 0x0) 14:36:21 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000080)) arch_prctl(0x2002, &(0x7f0000000180)) 14:36:21 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000feffffff00"}, &(0x7f0000000700)}) 14:36:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x10000, 0x0) sendmsg$nl_generic(r2, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x244, 0x23, 0x200, 0x70bd25, 0x25dfdbfd, {0xd}, [@nested={0xa8, 0x2c, [@typed={0x8, 0x1, @u32=0xfffffffffffffffa}, @typed={0xc, 0x60, @u64=0x100000001}, @generic="aac88d47979728b068c04a475a05c2ba2d60dacf89c079cbfd30c53b3f96cc24967cd13adfa853f3ac92537cacee786b780b66f6572e19b71bb1e601403ae0f9c162a4c2c7e95e11f58de8555149d8dc99d7213c5519634c3e455c62feecab3d5db1ea47eebd7a2caa2b1ffe44967aed96ee4a12ed6d372012ae97eaa63f271e753e34960d237bd92cb685a68668"]}, @nested={0x188, 0xb, [@typed={0x4, 0x59}, @generic="cf8eb696d0e6817838f7942891e9ce748f3eb038e5787b723ca13941da5cc6b9944a6239bf026b6a89bf963b836c5950ba498bf808e900bf664b22a71f132520a844c71e2930908e758ac6f75116aabb73d4d9e523cfb63bfb7dad7302e3530f26953c0318f3bf2bc40a29df3078a976cb67876d", @generic="553d6ed87cc2e0d86963b8a5792def50da9c114af2bd93d2dc1223df97a2c3bffabe40be905c049b1d42c014a9a1201e6d3e8264629161d7ecc556f03aa00e2c67988c3b9c2fc7d400a4dccd87d3c9454d120858cb3fb32c80421bfffb7aec0cdf52c8b1c50bc847d9194b940f3f809a6045ef03e11fbffb1a45d392ae810f4e3627c4c5921f9e2a8871931bf16fa6ab704799fdf09c4596f96d105d11f72f3807134d14c4e5be08690975d34a0906905d2da2d150eb2c14fb8879c171780f9c", @generic="bababf7cd70518bd3c2ade4c94297a709199adf168fce5a71b4622240af79e984ba708e5d3bd93679772ef6096f935f552", @typed={0xc, 0x31, @u64=0x6}, @generic="1631ee38c343b5c0354d90159a"]}]}, 0x244}, 0x1, 0x0, 0x0, 0x800}, 0x8001) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) dup3(r1, r0, 0x0) 14:36:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000002c0)) prctl$setmm(0x23, 0x3, &(0x7f0000ffc000/0x3000)=nil) dup3(r1, r0, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000240)={'nat\x00', 0x0, 0x3, 0xc4, [], 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000140)=""/196}, &(0x7f00000000c0)=0x78) 14:36:21 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) eventfd2(0x6, 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0xc2) write(r1, &(0x7f0000000100)='&', 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x90800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) write$smack_current(r2, &(0x7f0000000000)='/dev/ptmx\x00', 0xa) 14:36:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x4600) openat$cgroup_type(r2, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:21 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080)) write(r1, &(0x7f0000000100)='&', 0x1) dup2(r0, r1) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x20000) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000000c0)) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x4, 0x2000) faccessat(r2, &(0x7f0000000040)='./file0\x00', 0xb3, 0x1000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x40000000000000) dup3(r1, r0, 0x0) 14:36:21 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'bcsh0\x00', {0x2, 0x4e22, @multicast1}}) arch_prctl(0x2002, &(0x7f0000000180)) 14:36:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) io_setup(0x2, &(0x7f00000000c0)=0x0) io_getevents(r1, 0x100000001, 0x2, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)={0x77359400}) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x7, 0x4) ioctl$TCXONC(r2, 0x540a, 0x0) write(r0, &(0x7f00000001c0)="7a737f6e47588ba8fc8eb353c67586d7de2c55ffe36d7489b6c394be110c5621400100000000000000", 0xffffffffffffffa9) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) dup3(r2, r0, 0x0) 14:36:21 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:21 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), 0x4) arch_prctl(0x1ffe, &(0x7f0000000000)="0709e08c62c3c63919260820d1dd32a218f38f272b784cdfbd1d3ae97ba75c390987abee5e273d2878ded2d6dc1cd556cb7cf06721bd09e8c838655d538b105517c3aa71e2a50e5bcf8993a7a2100d52fabf0da214aeaa518c164a18fd2fa6") 14:36:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x408040, 0x0) ioctl$SCSI_IOCTL_SYNC(r1, 0x4) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x20201) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040), 0x2) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) dup3(r2, r0, 0x0) 14:36:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r0, 0x540a, 0x8) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000698000)=0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x5, 0x8, 0x6, 0x401, 0x513, 0x40, 0x0, 0x80000001, 0x6, 0x9, 0x9d}) dup3(r1, r0, 0x0) 14:36:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x212000, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$sock_netdev_private(r1, 0x89fc, &(0x7f0000000080)="d58a0f6403c0b02409ab2366b29b8b5fbdb5c26fea592afa0ff2c470f0ccb363c80dba8f7b0e8702c4d6ad68f457853d8083c8afa02b2d866e2656ef045c2bf2db973ec1e31d20fa38") write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r0, 0x0) 14:36:22 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r0, 0x540a, 0x1000000000000000) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:22 executing program 5: socket$inet6(0xa, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) close(r0) getpgid(0xffffffffffffffff) 14:36:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x80, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x40000) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x6cb) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000080)={0x10000, 0x4, 0x8001}) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) dup3(r2, r0, 0x0) 14:36:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x8400, 0x0) ioctl$RTC_PLL_SET(r2, 0x40207012, &(0x7f0000000040)={0x5, 0x3, 0x80000001, 0x5, 0x6, 0xac, 0x4}) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:22 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) socketpair$inet6(0xa, 0x800, 0x6, &(0x7f0000000000)) dup3(r1, r0, 0x0) 14:36:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r0, 0x4, 0x4000) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) r2 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x200, 0x30) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000002c0)={0x0, 0xb0, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x2, @mcast2, 0x8}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x7f, @remote, 0x5}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0x452, @empty, 0x4}, @in6={0xa, 0x4e21, 0x460, @ipv4={[], [], @multicast1}, 0x80000000}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000300)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000340)={r3}, 0x8) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r4 = dup3(r1, r0, 0x0) io_setup(0x9153, &(0x7f0000000000)=0x0) io_cancel(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0x7f, r0, &(0x7f0000000040)="d74905d9318ba1f863e7bfa1ba973dc17eded24375f9d81fc29b9815dc62656d6be2d55bb2237e825e5980afaaf806b391e47b585fd346dc624ee0f2f95fd8a2da66221e65f6c0be0b5e5be7e0b94aedbfdea13772b404850f5e9a10962a4368397084ec320472249f6475cb7c399728e0577cebff6cf4d0f1f8a790b8d9654d7a5888b2cbc121163452f57116edbc1be9c8ea07708c5dae77788325c76f1bedb03e8b7b69a31a606ddf49e0c95e1b196642e9971d161674b9", 0xb9, 0xfffffffffffffffe, 0x0, 0x3, r4}, &(0x7f0000000180)) 14:36:22 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@ipv4_delrule={0x2c, 0x21, 0x101, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x2c}}, 0x0) 14:36:22 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) write(r0, &(0x7f0000000040)="00d4", 0x2) dup3(r1, r0, 0xfffffffffffffffd) 14:36:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x10000, 0x0) rt_sigpending(&(0x7f0000000640), 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200, 0x20) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, &(0x7f0000000540)=""/235) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000140)="26963ca9f24087d39574d60b5a6199bc4193f546d70948d574fa156697d6b90873a1972dd1ea8219ed002f082eb16f4dc826f98c5b902d6c8f015f1ddba4d0df92bf5cff887a261bb0471af5df869669d2fe2cbb9bd1273e417f5c705cb3237d1a1ab2b5be160dce07d0a0b7e3b8f449f680444f544772fa09e9426c50d56693013626a136df068a3b08f5b1b2d4fd7735dde72e82379008aa52b99a71135af6f33251a588cd549105d348e8ae351b64aab09003f7a69b9a4064d9cf8ea9827bc800756cbf2359a1e450027948ec13737f04236ca40717754da13bc86b9789caba4f7230ebea7fc65a736ec830821fecc349641c2d150a", 0xf7) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") write$binfmt_elf64(r0, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0xfff, 0x1, 0x7, 0x100, 0x0, 0x0, 0x7, 0x1, 0x38e, 0x40, 0x106, 0x8001, 0xffffffffffff7fff, 0x38, 0x2, 0x800, 0xfffffffffffffffd}, [{0x70000007, 0x101, 0xfffffffffffffbff, 0xa4, 0xf81, 0x100000001, 0x3, 0x5}], "8eec786b884d2799f4a9e062a14f2528002b54e116bdbb86f1eb4b49e0483fccadaad66c9018a56fb5884a73b2655636b44e431cc40353556771eac995e8f43c5e8229f99bcc21df7cb61a738363e7a33ee6f7e5fee50fb4f23d1265737253ada0da3a7791114d725fac9abdd8ebe4e7c47eb0703764a825aa23b9dd31dd21eced792902c9a38bed", [[], []]}, 0x300) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:22 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000feffff00"}, &(0x7f0000000700)}) 14:36:22 executing program 5: r0 = socket$inet6(0xa, 0x80003, 0x800000000000006) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)="7465616d5f736c6176655f30fffe00"}) 14:36:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) prctl$setendian(0x14, 0x2) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8, 0x40000) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:36:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCSBRK(r0, 0x5409, 0x7) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)=',', 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x2000) dup3(r1, r0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000040)=0x80) 14:36:22 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) set_mempolicy(0x1, &(0x7f0000000000)=0x400, 0x7) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:22 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff, 0x0, 0xe2ae}) r1 = syz_open_pts(r0, 0x20201) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhci\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000180)={r3, 0x3, 0x1, 0x4ab, 0x100}, &(0x7f00000001c0)=0x14) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4000, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) socketpair(0x12, 0x7, 0x3, &(0x7f0000000040)) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:22 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x2800, 0x0) fcntl$setpipe(r0, 0x407, 0x8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r0, 0x4, 0x102800) r2 = dup3(r1, r0, 0x80000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0xa, &(0x7f0000000080)='/dev/ptmx\x00'}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000001c0)={{0x1, 0x6, 0x8001, 0x7ff, 'syz1\x00', 0xf830}, 0x6, 0x200, 0x5, r3, 0x1, 0x5f, 'syz0\x00', &(0x7f0000000180)=['/dev/ptmx\x00'], 0xa, [], [0xfffffffffffffffd, 0x7a6c9c1e, 0x5, 0x4]}) write$P9_RVERSION(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="1300000065ffff08000000b5518a3232303030"], 0x13) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000300)='&', 0x1) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x20900, 0x0) ioctl$BLKSECDISCARD(r4, 0x127d, &(0x7f0000000040)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer\x00', 0x10000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000400)="153f6234488d6d5d766070") openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x240, 0x0) 14:36:23 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:36:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$KDSKBLED(r1, 0x4b65, 0x6) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x18) 14:36:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0xaa002, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f00000001c0)={0x1, 0x200, 0x5, 0x7, 0xb2}) r3 = memfd_create(&(0x7f0000000000)='user@em1\x00', 0x1) name_to_handle_at(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="c4000000ffffff7f04da7ec6845a408ebbf3c8573d6e4ae6c63e3a752d1570eacba2a6fce707f0b558ac7cfc25b5afe3af641e742ef6079a87483d4f83ca7cc62b7db9bd34708a414fedc5503db81d73337e042d6318590736b1a91d43893e516d884af1eeebd3c14db9e312a815cf62915b2b2eabf9a19825ad51a59d20a34a0191b15eb86611a28b77469f76fbd6bf1b0f8a7563e6beab21a3e71cc5bebc00023b799b3d944775783fc8493d72a55251f0fed44aafb6755580ef8480bea99cde7465ed08daeb717f186be6b131a445896c063826f20a222ff32a3bddc70fe37e54712297f94e030b8f7eac62623f"], &(0x7f0000000080), 0x1400) write(r1, &(0x7f00000000c0)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r4 = dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) 14:36:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = add_key(&(0x7f0000001340)='blacklist\x00', &(0x7f0000001380)={'syz', 0x0}, &(0x7f00000013c0)="d48d1765d711c54238", 0x9, 0xfffffffffffffffe) r2 = add_key(&(0x7f0000001400)='cifs.idmap\x00', &(0x7f0000001440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r1, r2) r3 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r3, 0x4, 0x102800) ioctl$TCXONC(r3, 0x540a, 0x0) write(r3, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000698000)=0x3) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000140)=""/213, 0xd5}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/232, 0xe8}], 0x3) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f00000000c0)={r0, 0x0, 0xe88, 0x80000000, 0x1}) dup3(r3, r0, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}]}) 14:36:23 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x8000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) sendto$inet6(r0, &(0x7f00000000c0), 0xff0c, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, 0x1c) 14:36:23 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x800000102800) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x28080) write$tun(r2, &(0x7f0000000140)={@val, @val={0x1, 0x0, 0xcb9a, 0x6, 0x20, 0x6}, @llc={@llc={0x6, 0xea, "bb", "bfab48208f342bf66dbe3249c7ae7d2a16e26100f1dd0dbb92c9735d8c7580a9193c7c6496ff68a4a57695cb9c9784355a8120a00774160d3362c2c4e4a44cf2be119e8c86fe37c1d7f6ada3fbd189c8cd497da53fa249ee01b2298e3578c3e6ca0dbb5a9e7838ad565ca4b7d6e9ebeb118ca2c6caa87a0516255dfd0071e28cab3a333b54f7057d1e4c1b6b5878b5e304230c718ed404245ca06c73c297e9e6598d4e45cb301e3646ec9a15ffcc75290d5be6eb"}}}, 0xc5) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) r3 = msgget$private(0x0, 0x80) msgrcv(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="0003000000000000"], 0x8, 0x2, 0x800) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) ioctl$PIO_CMAP(r4, 0x4b71, &(0x7f0000000240)={0x2, 0xf, 0x2, 0x3, 0xffffffff, 0x10000}) ioctl$IOC_PR_RESERVE(r4, 0x401070c9, &(0x7f0000000040)={0x400, 0x1f, 0x1}) dup3(r1, r0, 0x0) 14:36:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000400)="26281eceddf8b3b8cbd3034a20b02081cea73d4a0200a0efa6988a0c98bbeb1ce9ea4c1666dd84975e972ecca57769f946901b61f657c42b5f3e0d475638dbf2c26f00f54a4e14dd379e29a0a3d37c16367d14b7ab07b10002990594bcfd9380d11ebdb992e038c205a1ac3fdadabb2f09c6ae53dae2d91fccc433fdd55d7156857ee5d4670fdfceaa7f01024fe34a45fd221aefb6711f77ddd7dabbb73e97ad71a82f476fb3e7512623ce3e47d5c7e3c1c2d96f21d2d574bbcf17164808cd42da3883d1480008797e79cc16191adb1f2918764a53900aa45bd3201340803a7ab3f895045617822673", 0xe9) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x1000}}}, &(0x7f0000000140)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={r3, 0x48, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x6faa065f, @mcast1, 0x1}, @in6={0xa, 0x4e21, 0x2, @loopback, 0xe30}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}]}, &(0x7f0000000240)=0x10) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000500)={r4, 0xa, &(0x7f0000000300)=[0x9, 0x4, 0x800, 0x2, 0x6, 0x854, 0x7, 0x1, 0xa8, 0x5], &(0x7f0000000340)=[0x9, 0x885], 0x20, 0x6, 0x80000000, &(0x7f0000000380)=[0x1000, 0xfffffffffffffff8, 0xddb, 0x10001, 0x6, 0x7], &(0x7f00000003c0)=[0x7f, 0x0, 0x2, 0x300000000, 0x9]}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000280)=0x0) sched_setattr(r5, &(0x7f00000002c0)={0x30, 0x6, 0x1, 0x9, 0xfff, 0xd19, 0x9, 0x1f}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:23 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x400) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r0, 0x540a, 0xffffffffffffff7d) write(r1, &(0x7f0000000100)='&', 0x1) tee(r1, r1, 0x2, 0x6) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) r2 = semget$private(0x0, 0x2, 0x100) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x432000, 0x0) ioctl$SG_GET_COMMAND_Q(r3, 0x2270, &(0x7f0000000040)) semctl$IPC_RMID(r2, 0x0, 0x0) [ 341.518544] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 14:36:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x0, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000240)={0x53, 0x100000000, 0x8, {0xfff, 0x8}, {0x2, 0x7f}, @rumble={0x6, 0x5}}) fcntl$setstatus(r1, 0x4, 0x102800) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x2000) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}}, 0x3, 0xfffffffffffffe96}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0x4907, 0x80000001, 0x8, 0xd03e, 0x80000000, 0x3ff, 0x9, 0x9, r4}, &(0x7f00000001c0)=0x20) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x101080) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x1) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:23 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:36:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TCXONC(r0, 0x540a, 0x81) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x182) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000"]) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r0, r0, 0xfffffffffffffffc) 14:36:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RSTAT(r2, &(0x7f0000000040)={0x58, 0x7d, 0x2, {0x0, 0x51, 0x4, 0x6, {0x4b, 0x2, 0x6}, 0x8200000, 0x0, 0x1000, 0x0, 0x0, "", 0xa, '/dev/ptmx\x00', 0xa, '/dev/ptmx\x00', 0xa, '/dev/ptmx\x00'}}, 0x58) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:23 executing program 0: socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x26) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000040)=""/150) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r1, 0x0) 14:36:23 executing program 5: msgsnd(0x0, &(0x7f00000000c0)={0x1}, 0x2000, 0x0) 14:36:23 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x10000000480c0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = pkey_alloc(0x0, 0x2) pkey_free(r2) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:23 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:23 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x440000) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000040)={0x4, 0x9, 0x3, @broadcast, 'sit0\x00'}) ioctl$TIOCCBRK(r2, 0x5428) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x62010, r0, 0x0) dup3(r1, r0, 0x0) 14:36:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x80000) getsockname(0xffffffffffffff9c, &(0x7f0000000180)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x80) bind$can_raw(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:23 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000040)="0f425f69f20f38f10b650feda5000066b9800000c00f326635004000000f30b80d008ec86666de3c0f01cf260f01cb2665660f3a618c0060540fc76b39", 0x3d}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhci\x00', 0x4040, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000440)="3147bc869082afb096a64cc5f96a0bce316833c10dfd56e8315bc3d2e285a159139acd654333053033d214d40006328ac4f36182fb40f4dedbe15ef737d9929f08ea38b16c1fe74e834f279309ae7e7eccb7333731dc89fdc0cbfe5a60ce30db33689c1c95747249de9d4f167c0080a4e0a0e032ec6b237f04773eda2c11b1e63395058786bb508c3479a4e1ccadd3be5fbcc2b019cab9e251ced912fa00ff9344bbd910f9473c66cce5b94bfa483c4973e28737293d77475df0528fee144d48d9", 0xc1) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f0000000300), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000002c0)) 14:36:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) syz_open_pts(r0, 0x200) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:26 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r0, 0x4, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) syncfs(r2) 14:36:26 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0xfffb, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0x6b8) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x4040) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000040)={0x4, 0x0, 0xa26, 'queue0\x00', 0x9dd}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) dup3(r2, r0, 0x0) 14:36:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000007c0)="2e2f6367726f75700011fbb3d1dfe225810ee0", 0x200002, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(r0) chmod(&(0x7f00000001c0)='./file0\x00', 0x0) 14:36:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x4) sendfile(r1, r1, 0x0, 0x1) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:26 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:36:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000140)=""/206) r1 = syz_open_pts(r0, 0x20201) accept(r1, 0x0, &(0x7f0000000000)) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'ah\x00'}, &(0x7f0000000140)=0x1e) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000280), 0xfffffffffffffdf2, &(0x7f00000001c0)={&(0x7f0000000240)=@newneigh={0x1c, 0x1c, 0x301}, 0x1c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000480), 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in=@multicast1, @in6=@ipv4={[], [], @remote}}}}, 0x50}, 0x8}, 0x0) 14:36:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x200000) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) dup3(r1, r0, 0x0) 14:36:26 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) [ 345.052104] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 345.131286] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 14:36:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x4) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) r2 = gettid() syz_open_procfs(r2, &(0x7f0000000040)='statm\x00') ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:27 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={&(0x7f000000f000), 0xc, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) 14:36:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x480002, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "44b6f48ad7290b053e6faadda94973c59ae363bc94fd45cdaeadfceb88842ee4", "5fadbb756fcec2613872fe86594cb43ef79c610ab63c49a1b8c814fa7882264f", "9a36bea4e41e2f189a06a3f2f1e50e20becd18ed62110887a3aae276ee2f29db", "bcee866b78c966dadbbf896f71b8f35a7da60fdcaca53fa2c409a48fdc1229db", "4819fe6c248d31849755bc951a1975c5cb7895cbe6fbd90c94cd5664cfe3d78e", "c72cd70b98a0206aaf3dab07", 0xfffffffffffffff9, 0x0, 0x6, 0x8001, 0x2}}) dup3(r1, r0, 0x0) 14:36:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in=@rand_addr, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000180)={@loopback, 0x1, r3}) 14:36:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x4) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000140)=0x60) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x80000000, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) r4 = dup3(r1, r0, 0x0) dup2(r0, r4) 14:36:27 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:36:27 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440)='/dev/hwrng\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r2, &(0x7f0000000100), 0x0, 0xc001, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000000)=0x80000000, 0x4) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$EVIOCGID(r4, 0x80084502, &(0x7f0000000140)=""/29) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8912, &(0x7f0000000280)="025cc80700145f8f764070") r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80200000000002, &(0x7f0000000540)=0x82, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x2, 0x3, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r7, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r8, r9) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000003a40)='/dev/full\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f0000000180)) sysfs$1(0x1, &(0x7f0000000600)='erspan0\x00') open_by_handle_at(r6, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x80) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) write$P9_RSYMLINK(r4, &(0x7f0000001680)={0x14, 0x11, 0x2, {0x80, 0x3}}, 0x14) ioctl$FICLONE(r10, 0x40049409, r3) sendmsg$nl_generic(r7, &(0x7f0000001900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2030}, 0xc, &(0x7f00000003c0)={&(0x7f0000001940)=ANY=[@ANYRES64=r0], 0x1}, 0x1, 0x0, 0x0, 0x4000004}, 0x4011) 14:36:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup3(r1, r0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, &(0x7f0000000040)={0x9, 0x800, 0x6, 0x100000000}) r5 = gettid() lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)=0x0) sendmsg$unix(r4, &(0x7f00000005c0)={&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000140)="4b2d4d5c83066493de854af2a19973c0bfec808cdff7f75336b0c47092d4fd238333298f86dacf81dfb44479b7b91635aaccfc468ca984c85e8c43c447a2ae6aab28", 0x42}, {&(0x7f00000001c0)="2c48650522c37220c4a8d7456f75f918aadd542c5a6d0cc2924cd2b4d8fa2e9aa2281eba9b8fd98e743af5c24d2c78fdfdb42b88308f5d65c218cdb8e3141896250a0cdf0b35a9cae883d535f3c79ee00a6167e0342f808af039f277fbec6b30522e0d55083e45515ee028d7880021ef5950e5baa248a081588670937e67a0caab9be25eeb8a0bd857e40832ddf37bbe7b98d823451cd70b046df0f1c2fc8097060471253c4dce7be5eb19b3d0", 0xad}, {&(0x7f0000000280)="842184d04555225b1760fe0e6d6827a0cc77d985a6ccc994e3efcd64257340913cfe7bd6cccb640fb1140983ea2eb79f2dfefcb3b351bb34e50983abb668af0cb598573b5df13fac7b5ab0847ddcda1f1bda6d1405c4e968bf7e2ff3eaf4cc8bd0d831d03d77f9adc1e13910eb9ae29da9204acaf44e05b7eef840dc9de0934318583dd44a61f8ef5b918326f2c0cdeff992aa4c933340fbaa7011293c974ad0235742ea1a163977ad", 0xa9}], 0x3, &(0x7f0000000500)=[@rights={0x20, 0x1, 0x1, [r0, r3, r3]}, @rights={0x20, 0x1, 0x1, [r3, r4, r1]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x28, 0x1, 0x1, [r0, r4, r3, r3, r0, r3]}], 0x88}, 0x40054) 14:36:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) mq_open(&(0x7f0000000000)='/dev/ptmx\x00', 0x1, 0x10, &(0x7f0000000040)={0x0, 0xb5a, 0x7, 0x0, 0x1, 0x3, 0x100000000, 0x1}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:27 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r0, 0x540a, 0x6) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) r2 = shmget$private(0x0, 0x1000, 0x724, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000140)=""/4096) 14:36:27 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r0, r0, 0x0) 14:36:27 executing program 5: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) write$cgroup_type(r1, &(0x7f0000000240)='threaded\x00', 0x7211) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 14:36:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = memfd_create(&(0x7f0000000000)='/dev/ptmx\x00', 0x7) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req={0x40, 0xffffffff, 0x80000}, 0x10) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:28 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:28 executing program 5: r0 = gettid() syz_open_procfs(r0, &(0x7f0000000240)='numa_maps\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') fchdir(r1) socketpair$unix(0x1, 0x80003, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = memfd_create(&(0x7f0000000300), 0x0) write(r3, &(0x7f00000001c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) mount(&(0x7f0000000100)=ANY=[], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='anon_inodefs\x00', 0x0, &(0x7f0000000dc0)) open(&(0x7f0000000040)='./file0\x00', 0x447d, 0x0) 14:36:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80001, 0x0) fstat(r1, &(0x7f0000000000)) dup3(r1, r0, 0x0) 14:36:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000200)={0x2000000000000399, &(0x7f0000000240)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f00000000c0)={r3, 0x1}) ioctl$TCXONC(r1, 0x540a, 0x7) write(r1, &(0x7f0000000100)='&', 0x1) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req={0x2, 0xfffffffffffff801, 0x1ed, 0x3ff}, 0x10) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x8) dup3(r1, r0, 0x0) 14:36:28 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0xe8f) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:28 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x800, 0x0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r2, 0x20201) fcntl$setstatus(r3, 0x4, 0x102800) ioctl$TCXONC(r3, 0x540a, 0x0) write(r3, &(0x7f0000000100)='&', 0x1) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$RTC_PIE_ON(r4, 0x7005) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x101000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000300)=0xb2ce) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x0) dup3(r3, r2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000280)=0xc) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000080)) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(r6, 0x5, &(0x7f00000000c0)={0x5, 0xa6c}, &(0x7f0000000140)) 14:36:28 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) dup2(0xffffffffffffffff, 0xffffffffffffff9c) rt_sigsuspend(&(0x7f0000000680), 0x8) 14:36:28 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:36:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0xfffffffffffffff9, 0xff}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r0, 0x0) 14:36:28 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 14:36:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) eventfd2(0x3, 0x1) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) [ 346.676291] device lo entered promiscuous mode 14:36:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./file0\x00', 0x100000001) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) read(r2, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) ioctl$TIOCGETD(r2, 0x545d, &(0x7f0000000000)) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x3, 0x0) write$P9_RREAD(r3, &(0x7f0000000240)={0x29, 0x75, 0x8e, {0x1e, "c391b0dcea7a510bead3d3a1e3a86f0a2b763ae85e84f77197214d49e9b0"}}, 0x29) r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x6, 0x200000) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000080)={'ifb0\x00', {0x2, 0x4e21, @local}}) write(r4, &(0x7f0000000140)="266015077f2e5e132581d8b4d26b3b83827e3fcaa72a058b54ee522a1832eeee18070000000000", 0x27) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x7f) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000000)={0x8000, 0x8001, 0x1ff}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8040, 0x0) r5 = dup3(r1, r0, 0x0) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000180)={0x4, 0x800, 0x2, 0x1, 0x401, 0x1b}) [ 346.747291] device lo left promiscuous mode 14:36:28 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) timer_create(0x1, &(0x7f0000000000)={0x0, 0xd, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}}, &(0x7f00000000c0)) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r0, 0x0) 14:36:28 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 14:36:28 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000100"}, &(0x7f0000000700)}) [ 346.926588] device lo entered promiscuous mode 14:36:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:28 executing program 0: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r1, 0x0) [ 346.969989] device lo left promiscuous mode 14:36:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x8, 0x2200) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xfff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x3fd7d00d, 0x9, 0x8, 0xfffffffffffff801, 0x5}, &(0x7f0000000140)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r3, 0x4, 0x102800) ioctl$TCXONC(r3, 0x540a, 0x0) write(r3, &(0x7f0000000100)='&', 0x1) dup3(r3, r0, 0x0) 14:36:28 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 14:36:28 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) [ 347.143562] device lo entered promiscuous mode 14:36:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x50102, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000040)={0x3, 0x5, 0x3, 'queue0\x00', 0xb3}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r0, 0x0) 14:36:28 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) socketpair(0xf, 0x80003, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r3, 0xffffffffffffffff}}, 0x18) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x80000) [ 347.176517] device lo left promiscuous mode 14:36:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000000)={0x0, @aes128, 0x0, "579acf0977c2f30b"}) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:29 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000feffffff00"}, &(0x7f0000000700)}) 14:36:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0xfffffffffffffffd, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x1000800407fe) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:29 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 14:36:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x4, 0x9, 0x4}) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x2f0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) [ 347.757076] device lo entered promiscuous mode [ 347.777917] device lo left promiscuous mode 14:36:29 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000feffff00"}, &(0x7f0000000700)}) 14:36:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) dup3(r2, r0, 0x0) 14:36:29 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) socket$netlink(0x10, 0x3, 0x4) 14:36:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) 14:36:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) 14:36:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = memfd_create(&(0x7f0000000040)=':)\x00', 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x101, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f00000000c0)={r3}) finit_module(r1, &(0x7f0000000000)='/dev/ptmx\x00', 0x3) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000140)={r3, 0x42}) dup3(r1, r0, 0x0) [ 347.943717] device lo entered promiscuous mode [ 347.987804] device lo left promiscuous mode 14:36:29 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4402048}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r3, @ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x40) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x80002) 14:36:29 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {}]}) dup3(r1, r0, 0x0) 14:36:29 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x2a0100, 0x0) ioctl$SG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r0, 0x0) 14:36:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x6}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) [ 348.159669] device lo entered promiscuous mode [ 348.215091] device lo left promiscuous mode 14:36:30 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20205) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x7fc, 0x0, 0x80000000, 0x8, 0x5, 0xfffffffffffffff7, 0x10000, 0x9, 0x3, 0x52, 0x1, 0xfffffffffffffff7}) write(r0, &(0x7f0000000340)="74e30f4f770ae598a50d646ba54ecf980edee98adcdd98f98f8cc152d08bbfce34479411d21af38b0c9f7541768a4c11be782b05527b6ffd7eb4b707c63ee7f2e55a0302f495ceb87dcfff36e28e2ec9c54ac89cca1a48bf7009af1c8b24d43aa02f668b3dcd28e469744fda1c802a60559cf65eb90b703a38b18c144bcba04339983d82bddbe4d18b47b8c4ab2b9d0fbde18bc5176c8e7543f8487acb1ab187a77b97edada4faa3fab37c909504cefbdd6833893b666293cc34692f087bddd2a761b7862c45692b817c3de09c07e6dc3c38152bab63", 0xad) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x100, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000640)='nbd\x00') r4 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0xff, 0x84101) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x20000, 0x0) r8 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x5, 0x10000) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x31000}, 0xc, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="02002dbd7000ffdbdf25050000000c00050004010000000000000c000400080000000000000008000100000000000c00030008000000000000002c00070008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08070100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0c00030009000000000000000c000200ff01000000000000"], 0x84}}, 0x40000) r9 = dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xb) link(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) 14:36:30 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @link_local}, 0xfedf) 14:36:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) fcntl$setown(r1, 0x8, r2) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x404001, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000080)={0x2, 0x5}, 0x2) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) pause() ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x1) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f00000000c0)={0x9, [0x1, 0x4, 0x0, 0xada, 0x9, 0xa0, 0xfff, 0xfffffffffffffffc, 0x9]}, &(0x7f0000000140)=0x16) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x80000001, 0x10401) ioctl$BLKPBSZGET(r3, 0x127b, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:36:30 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:30 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl(r0, 0x1c1, &(0x7f0000000140)="660c353e4991f35ceba53c2b37494da583877a060073caf53a5a7a8080260a760cd5012462260f0a6304933d0b93dd23b2fe26ae913c84daeec5191bba4db835e750daff5163b1cae25fbf08d7f00bf7844e4be2cf96dba711604a44587ce1f46f7b2dbb73d78c690964ba1dc58ad491e0f3fe524abd213738bbd62e0a4a") ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x2) fcntl$setstatus(r1, 0x4, 0x102800) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xe041, 0x100) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000040)=""/118) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000000c0)) dup3(r1, r0, 0x0) 14:36:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x1027fd) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:30 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x85a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r0, 0x3, 0x6, @link_local}, 0xfedf) 14:36:30 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x4000) r2 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80) bind$vsock_stream(r2, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0xfffffffffffffffc) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:30 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:30 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = socket$inet6(0xa, 0x1, 0x81) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:30 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) [ 348.712688] device lo entered promiscuous mode [ 348.718306] device lo left promiscuous mode 14:36:30 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:31 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:36:31 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:33 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x111000, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r1, 0x0) 14:36:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0xe9) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f0000000000)=0x7) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000040)=0x9, 0x4) ioctl$KDSETMODE(r0, 0x4b3a, 0x80000000) 14:36:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r0, 0x4, 0x41027ff) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:33 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:36:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) r2 = creat(&(0x7f0000002740)='./file0\x00', 0xfd301a0ec66e1772) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000002780)={0x0, 0x1}, &(0x7f00000027c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000002800)={r3, 0xa2, "1f904a7f09e8e38429bbd4ba0c3a72b99fa656aef25299d1558b344bb6bb86f6f405139ba3a7f26772c459ef3a53c7acc4b039717c436594e1a5f85eeea6ad38bce2b83756e02fe0ec6359e961fd456aa21acb862523d1a7ba4030b76bcf227339882a0643698a45fa9f8c09f586a3165d8a4a5f51795617b342321d37cb68a0dcb8246f615bef7ec6b97eece2472727f76e291b2346b9664078f4cba5bce08443cd"}, &(0x7f00000028c0)=0xaa) r4 = syz_open_dev$mouse(&(0x7f00000003c0)='/dev/input/mouse#\x00', 0x1, 0x10000) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000540)={0x36, 0x6, 0x0, {0x1, 0x1, 0xd, 0x0, '{systemmd5sum'}}, 0x36) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/76, 0x4c}, {&(0x7f0000000140)=""/225, 0xe1}], 0x2, &(0x7f0000000280)=""/55, 0x37, 0x101}, 0x120) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @remote}, &(0x7f0000000340)=0xc) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) write(r1, &(0x7f0000000600)="00254e85c1eeb59a6dc52566b0c8d21fb05dedfadeeaddf25b1256d6854b1914cb3c7b522cb163696eb61cffcc99601945b43daf000604362aea53c22493f42c395db4fab1ac4da7c4f9bb1e720e0055", 0x50) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r0, 0x0) 14:36:33 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:33 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200"}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @link_local}, 0xfedf) 14:36:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102802) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup2(r1, r0) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x2001, 0x0) dup3(r1, r0, 0x0) 14:36:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) 14:36:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1779, 0x400) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000040)) dup3(r1, r0, 0x0) 14:36:33 executing program 3: clock_adjtime(0x20000000000104, &(0x7f0000000100)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20227) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x2000000000000) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:33 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:33 executing program 5: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) clone(0x2100001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) fremovexattr(0xffffffffffffffff, &(0x7f0000000140)=@random={'security.', 'posix_acl_access{\x00'}) 14:36:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000000)) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400001, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r0, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) mkdirat(r2, &(0x7f0000000000)='./file0\x00', 0x0) 14:36:33 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7ff, 0x200) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x8e}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000080)={r3, 0x3c}) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:33 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x2280) fcntl$setstatus(r1, 0x4, 0x102800) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8, 0x0) write$P9_RLOCK(r2, &(0x7f0000000080)={0x8, 0x35, 0x2, 0x1}, 0x8) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r1) dup3(r1, r0, 0x0) 14:36:33 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20400) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x1027fd) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000080)={0x0, 0x22, &(0x7f0000000040)="f9132291a22b5c684addd755831b6c8dc82a7362af50f8d0ac7e7ccd9ed1204a06bb"}) ioctl$TCSBRKP(r0, 0x5425, 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000140)={0x1ff, 0x6a3, 0x4, 0x8001, 0xffc0000000000000, 0x827}) dup3(r2, r0, 0x0) 14:36:33 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1000020201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000000)={0x2, 0x7, 0x9, 0x6, 0x9, 0x7, 0x0, 0x3, 0x20, 0x100000001}) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) 14:36:33 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:36:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r2, 0x4010641a, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[0x7, 0x7, 0x7, 0x7]}) 14:36:34 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:36:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000300)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000340)={@local, r3}, 0x14) r4 = creat(&(0x7f0000000440)='./file0\x00', 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)={&(0x7f0000000240)='./file0\x00', r2}, 0x10) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000140)) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0xc000}, 0x4000001) write$P9_RREMOVE(r4, &(0x7f0000000280)={0x1}, 0xff7f) shutdown(r0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40046602, &(0x7f0000000040)=0x10000) r5 = creat(&(0x7f0000000400)='./bus\x00', 0x21) perf_event_open(&(0x7f00000007c0)={0x2, 0x70, 0x8001, 0x5ac12234, 0xfffffffffffffffd, 0xffffffffffff0001, 0x0, 0xd253, 0x88411, 0x8, 0x2, 0x10000, 0x7f, 0xf1f, 0x3, 0x5, 0x80, 0xfff, 0x1ff, 0x4, 0x2, 0xff, 0x2, 0x9, 0x4, 0x7, 0xf040, 0x23b5, 0x7083, 0x2, 0xf2, 0x7, 0x8, 0x8, 0x2, 0x7, 0x3, 0x8, 0x0, 0x0, 0x0, @perf_config_ext={0x7ff, 0x7}, 0x10100, 0x0, 0x2, 0x6, 0x3, 0x2, 0x8}, 0x0, 0x3, r4, 0x1) fcntl$setstatus(r5, 0x4, 0x4400) ftruncate(r5, 0x8200) write$cgroup_type(r5, &(0x7f0000000200)='threaded\x00', 0x175d900f) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000380)={0x0, r4}) clone(0x8400, &(0x7f00000003c0)="db4153371e2815eca1019c082c7c95c9ca6df1", &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)="0c9cad1c8e2fb274f46b8487857104b66875abe07461c92b6c053fa084adec8cc1470dff7def1e7f262b4022c2cf8e6f351fc25745177613f9f6a5daaeac7f1c538226a503e4dc3991f6afa2dc04f104d9d9eb0ef9bad7c318ed076b3516e8961d1a8f398d87686bb27caaa85cab9e9cf39647b82109883437411709aaf0633a834d1072ac61ece9c438954330bf1fe3f4a62eaf") 14:36:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) socket$inet6(0xa, 0xe, 0x4) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x40, 0xfd, 0x8001, 0x7, 0x6910bd7a, 0x10001, 0x2, 0x60, 0x401, 0x7, 0xa9da}, 0xb) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) dup3(r1, r0, 0x0) 14:36:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000140)={{0x6, 0x2, 0x10001, 0x6, '\x00', 0x100}, 0x3, 0x400, 0x8, r3, 0x3, 0x8, 'syz1\x00', &(0x7f0000000040)=['userwlan1--)\x00', '/dev/ptmx\x00', '/dev/ptmx\x00'], 0x21, [], [0x8, 0x7, 0x0, 0x4]}) 14:36:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) close(r1) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x2000) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000040)={0x6, 0x81}) dup3(r1, r0, 0x0) 14:36:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1000, 0x800) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000140)={'nat\x00', 0x0, 0x0, 0x0, [], 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:34 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:34 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:34 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) fcntl$addseals(r1, 0x409, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = semget(0x1, 0x4, 0x420) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000000)=""/215) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x0) 14:36:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x600002, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x2000) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) syz_open_pts(r0, 0x0) write(r1, &(0x7f0000000280)="da981746a178701a723b06c2cbbaf6fa6247ec76a7c3df7d0807dcaba682be4304235e97e6e8a7d834df4d6829a3861eb555f8b89224c5d907222e1aaf042dab69050095e980e78c7751aa775b0d66ccd5f474620d477d061e4cfd3d", 0x139) r2 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$RTC_EPOCH_READ(r3, 0x8008700d, &(0x7f0000000240)) r4 = geteuid() r5 = getegid() write$FUSE_CREATE_OPEN(r3, &(0x7f0000000140)={0xa0, 0x0, 0x3, {{0x3, 0x0, 0x4, 0x80, 0x10000, 0x9, {0x6, 0x1, 0x9, 0x3f, 0x0, 0x1, 0x800, 0x9, 0x11, 0x8, 0x1, r4, r5, 0x2, 0xffffffffffffffff}}, {0x0, 0x2}}}, 0xa0) dup3(r1, r0, 0x0) 14:36:34 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, &(0x7f000000a000)) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0xbc9dc8fbd81cb4b1) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) unshare(0x40600) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000380)="db", 0x1}], 0x1) r1 = creat(&(0x7f0000000080)='./file0/bus\x00', 0x0) dup2(r0, r1) 14:36:34 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000feffffff00"}, &(0x7f0000000700)}) 14:36:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x1000, 0x4) 14:36:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x13) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) r4 = syz_open_dev$usb(&(0x7f0000000380)='/dev/bus/usb/00#/00#\x00', 0xffff, 0x14000) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000003c0), &(0x7f0000000400)=0x4) fremovexattr(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='trusted.securi}y{,vmnet1$&\x00']) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20008080}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000002500010129bd7000fedbdf2500001000", @ANYRES32=r3, @ANYBLOB="0e00e5ff100006000e00080008000d00079f000008000d00d1fcffff"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x1) r5 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x8, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @local}}}, &(0x7f00000002c0)=0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000300)=r6, 0x4) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:34 executing program 0: socketpair(0x15, 0x807, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_pts(r0, 0x201) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) ioctl$TIOCCONS(r0, 0x541d) dup3(r2, r1, 0x0) 14:36:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) r2 = dup3(r1, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r2, 0x0, 0xd, &(0x7f0000000000)='securityproc\x00'}, 0x30) ptrace$getregset(0x4204, r3, 0x2, &(0x7f00000000c0)={&(0x7f0000000080)=""/63, 0x3f}) 14:36:34 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000090c000000000000000000000000", @ANYRES32=0x0], 0x2}}, 0x0) 14:36:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$KDDISABIO(r1, 0x4b37) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:34 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x400, 0x0) openat$cgroup_type(r1, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) r3 = dup3(r2, r0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000040)=0x24) 14:36:34 executing program 5: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='wchan\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000031c0)=[{{&(0x7f0000005f00)=@ipx, 0x80, &(0x7f0000005f80), 0x0, 0x0, 0xd}}], 0x1, 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000080), 0x2027ff) 14:36:34 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x400000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/dev/d0\x00'], &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='vxfs\x00', 0x8000, &(0x7f00000000c0)='/dev/ptmx\x00') ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20010040) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:35 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000080)={@local, @remote}, 0xc) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) 14:36:35 executing program 5: r0 = socket(0x40000000011, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) dup2(r0, r1) 14:36:35 executing program 3: chroot(&(0x7f00000000c0)='./file0\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x3) write(r1, &(0x7f0000000100)='&', 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x28c080, 0x0) dup3(r1, r0, 0x0) 14:36:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000140)="fd0aff9a07b864a1767a4b56979e33ccfc5df4fb3d31b9dfa1b77cbf1f03bf990f1708d5c1240e953d34ee1d291efa426be5a4f77452b6e3bb6117c790449478c0271ca6645fa72b26e95ae904bfd9909d8bd68d51becf54621f93b190b1ad3c1600ca551edc2c35f2226d0ddea3fde62ebb5d5f6d42444acd45413b768bda89b7655980de2a028892c0935b7780c755b9df5a65d1117c19c39119b7c44fb93db9aa166547b3a66edc590cc454dd04806d91f53092cacfbac9f396bdd1001ed4f05cb18956") ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x44) fcntl$setstatus(r1, 0x4, 0x102800) r2 = syz_open_dev$usbmon(&(0x7f0000003b40)='/dev/usbmon#\x00', 0xf7b9, 0x90000) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000003b80)={0x100, 0x200, 0x1, 0x8}, 0x8) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r3 = dup3(r1, r0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0x75c7, {{0xa, 0x4e24, 0x200, @empty, 0xfffffffffffff30d}}}, 0x88) 14:36:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x2, 0x1) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000000)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) write$FUSE_LK(r2, &(0x7f0000000180)={0x0, 0x0, 0x1, {{0xffb, 0x100000001, 0x1, r3}}}, 0x339) 14:36:35 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:36:35 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={r1, 0x0, 0x4, 0x7fffffff, 0x5}) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000040)) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000080)=0x6, 0x4) dup3(r1, r0, 0x0) 14:36:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x800, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x90, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1f}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x65}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100000001}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x10000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x5, 0x1}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x52}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x240008c0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r3, 0x4, 0x102800) ioctl$TCXONC(r3, 0x540a, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x100000001}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={r4, 0x40, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}]}, &(0x7f0000000340)=0x10) write(r3, &(0x7f0000000100)='&', 0x1) dup3(r3, r0, 0x0) 14:36:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000000)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:35 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'veth0\x00', 0x201e}) close(r0) 14:36:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1f, 0x181100) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000040)={0x80000000, 0xff, 0x9, 0x40}, 0x10) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r0, 0x0) 14:36:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xfffffffffffffffa, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:35 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:35 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) vmsplice(r0, &(0x7f0000001400)=[{&(0x7f00000003c0)="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", 0xe50}], 0x1, 0xc) 14:36:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) r2 = memfd_create(&(0x7f0000000000)=':(proc\x00', 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x1}, r3}}, 0x30) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) dup3(r1, r0, 0x80000) 14:36:35 executing program 4: mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x2) ioctl$FICLONE(r0, 0x40049409, r1) dup3(r1, r0, 0x0) 14:36:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x100}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x2000000000000003) 14:36:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r2, 0x1, 0x9, r2}) 14:36:35 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000feffff00"}, &(0x7f0000000700)}) 14:36:35 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', r2}, 0x10) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TCXONC(r0, 0x540a, 0x8) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x810, r0, 0x0) dup3(r1, r0, 0x0) 14:36:36 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1, 0x430802) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000140)=""/195) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r0, 0x0) 14:36:36 executing program 3: r0 = semget(0x0, 0x1, 0xa) semtimedop(r0, &(0x7f0000000000)=[{0x4, 0xf55, 0x1000}, {0x5, 0x9, 0x1800}, {0x7, 0x101, 0x800}, {0x4, 0x4, 0x1800}, {0x0, 0x700000000000000, 0x800}, {0x4, 0x100000001, 0x800}, {0x0, 0x7fffffff, 0x1800}, {0x1, 0x40}], 0x8, &(0x7f0000000040)={0x0, 0x1c9c380}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) dup3(r2, r1, 0x0) 14:36:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) sync_file_range(r0, 0x1, 0x13264d13, 0x2) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:36 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:36 executing program 5: timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}}, &(0x7f0000000100)) 14:36:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ppp\x00', 0x10000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x6}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e23, 0xdd, @dev={0xfe, 0x80, [], 0x13}}}, 0x8, 0x40f, 0x4, 0x7fff, 0x85}, 0x98) r3 = syz_open_pts(r0, 0x20201) r4 = socket$inet6(0xa, 0x3, 0x21c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000000)={0x10000, 0x8, 0x8, 0xfffffffffffffffd, 0xeb2, 0x6f59be48, 0x80000000, 0x0, r2}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000080)={r5, 0x5c2, 0x59, 0x2a}, &(0x7f00000000c0)=0x10) fcntl$setstatus(r3, 0x4, 0x102800) ioctl$TCXONC(r3, 0x540a, 0x0) lseek(r3, 0x0, 0x3) write(r3, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000698000)=0x3) dup3(r3, r0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000002c0)='reno\x00', 0x5) ioctl$KDADDIO(r3, 0x4b34, 0x8) 14:36:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x100000102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) 14:36:36 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r1, 0x2008200) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8), 0x8000fffffffe) execveat(r1, &(0x7f0000000300)='./bus\x00', &(0x7f00000003c0)=[&(0x7f0000000340)='./cgroup.cpu\x00', &(0x7f0000000380)='cgroup.type\x00'], &(0x7f0000000500)=[&(0x7f0000000480)='%-selinux\x00', &(0x7f00000004c0)='./cgroup.cpu\x00'], 0x1100) alarm(0x7) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000580)={{{@in=@multicast2, @in=@dev}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) fallocate(r3, 0x8, 0x0, 0x10000) socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, &(0x7f0000000180)=""/209, &(0x7f0000000280)=0xd1) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000000540)=""/37, &(0x7f0000000100)=0xfffffffffffffeef) write$eventfd(r1, &(0x7f00000000c0), 0xfffffe56) 14:36:36 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x400, 0x4, 0x10000, 0x9, 0x1, 0x3f, 0x4, 0xffffffffffffff00, 0x4, 0x80, 0x9, 0x800}) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x62000) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040)=0x1, 0x4) r3 = dup3(r1, r0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r0) 14:36:36 executing program 3: 14:36:36 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="50bccee93b222ea288090863158d8cfa928c6f"], &(0x7f0000000140)=0xa) dup3(r1, r0, 0x0) 14:36:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x400000102800) ioctl$TCXONC(r1, 0x540a, 0x0) socketpair(0x3, 0x5, 0x7fff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RLOPEN(r2, &(0x7f0000000040)={0x18, 0xd, 0x1, {{0x20, 0x2, 0x4}, 0x9}}, 0x18) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TCSBRKP(r0, 0x5425, 0x8000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000080)={0xf, 0x1d98, 0x1ff}) dup3(r1, r0, 0x0) 14:36:36 executing program 5: 14:36:36 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:36 executing program 3: 14:36:36 executing program 5: 14:36:37 executing program 5: 14:36:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x2801) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}, 0x7}], 0x1c) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2020}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r3, 0xc00, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x70}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}]}, 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) dup3(r1, r0, 0x0) 14:36:37 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000140)={0x81, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1, 0x9, [{{0x2, 0x4e22, @loopback}}, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e24}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e24, @broadcast}}]}, 0x510) 14:36:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') ioctl$sock_proto_private(r2, 0x89ef, &(0x7f0000000080)="fd83826ba4ac93db8719cce45752a0b610651db85ef56a7f85270026203ec6f499ad1acd98e57d39181b5fa5f7afe6852f66af463b29c53af2e8d56e41ff1655ea2f5fef46966366e71e150be06c6afc") ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x10000, 0x0) dup3(r1, r0, 0x0) 14:36:37 executing program 3: 14:36:37 executing program 5: 14:36:37 executing program 3: 14:36:37 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)=0x6) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r0, 0x0) 14:36:37 executing program 5: 14:36:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x4}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:37 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r0, 0x4, 0x102804) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TCSBRKP(r0, 0x5425, 0x358f) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)) r2 = dup3(r1, r0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000140)={0x5, 0x7, 0x1f, 'queue1\x00', 0xffffffffffffff80}) 14:36:37 executing program 3: 14:36:37 executing program 5: 14:36:37 executing program 3: 14:36:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x3, 0x47, 0x6aa, 0x200, 0x8, 0x0, 0x7, 0x3, 0x0, 0x4, 0x4, 0x7}) fcntl$setstatus(r1, 0x4, 0x102800) socketpair(0x10, 0x2, 0x100000000, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:37 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:37 executing program 2: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) r3 = fcntl$dupfd(r2, 0x406, r1) connect$l2tp(r3, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x2, 0x2, 0x2, {0xa, 0x4e23, 0x74, @dev={0xfe, 0x80, [], 0xc}, 0x6}}}, 0x32) ioctl$TCXONC(r2, 0x540a, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RLCREATE(r4, &(0x7f0000000040)={0x18, 0xf, 0x1, {{0x4, 0x1, 0x2}, 0x400000008}}, 0x18) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) r5 = dup3(r2, r1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, 0xfffffffffffffffe, 0x0) 14:36:37 executing program 5: 14:36:37 executing program 3: 14:36:37 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:36:37 executing program 5: 14:36:37 executing program 3: 14:36:38 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:36:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100), 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x2, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000000180)=0xffff) r3 = dup3(r1, r0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000000)=""/206) 14:36:38 executing program 5: 14:36:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r0, 0x540a, 0x4) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = fcntl$getown(r1, 0x9) sched_getparam(r2, &(0x7f0000000000)) dup3(r1, r0, 0x0) 14:36:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x10000, 0x0, 0x0, 0x0, 0x100000000000080, 0x0, 0x0, 0x0, 0x0, 0x67cbc8d2, 0x0, 0xfffffffffffffffc}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) pipe(&(0x7f0000000200)={0xffffffffffffffff}) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000140)=0x400, &(0x7f0000000180)=0x4) r3 = dup3(r1, r0, 0x0) ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f00000001c0)={0x7, 0xaa73}) open_by_handle_at(r3, &(0x7f0000000000)={0x96, 0x2, "a5014ec752fd77510d3279dce6323a5106704e39e18a07e7fbe1310267b70e84f3220eeb535a75fdbcf1eaa0648fa77c3fe102fc7995c6decb09bccde4492fdf64c7f44e0b86c9cb7ba8ee5fdaf9c58345eb7a83d36e58f73f796be59f46119ce5e487022968654927b4673defe65cd23e14d82dc76f8781fccf0ae516b4548828f95d8cbdc4eed97bf674ecd036"}, 0x101000) 14:36:38 executing program 3: 14:36:38 executing program 5: 14:36:38 executing program 3: 14:36:38 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:36:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:38 executing program 5: 14:36:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0xc4b) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:38 executing program 3: 14:36:38 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCNOTTY(r0, 0x5422) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) sendfile(r2, r1, &(0x7f0000000040), 0x400) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000040)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:38 executing program 5: 14:36:38 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:36:38 executing program 3: 14:36:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) ioctl$TIOCEXCL(r0, 0x540c) 14:36:38 executing program 5: 14:36:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fadvise64(r1, 0x0, 0x0, 0x7) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:38 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:36:38 executing program 3: 14:36:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = dup3(r1, r1, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000080)=0x9, 0x8) write(r1, &(0x7f0000000100)='&', 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000180)=0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r3 = dup3(r1, r0, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000000)=0x0) sched_setscheduler(r4, 0x6, &(0x7f0000000040)=0x8) 14:36:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) getitimer(0x2, &(0x7f0000000000)) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:38 executing program 5: 14:36:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x400, 0x8080) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) r3 = dup3(r2, r0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000000)={0x0, 0xfffffffffffffffd}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000080)={0x80000000, 0x5, 0x8000, 0xe2, 0x2, 0x101, 0x80000000, 0xffffffffffffff2b, r4}, 0x20) 14:36:41 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:41 executing program 3: 14:36:41 executing program 5: 14:36:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) socket$xdp(0x2c, 0x3, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000000)="6d232f48911d39bfe13186015ad3f1ec6231a86253bce4fc50a8884614", 0x1d) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) r3 = dup2(r1, r1) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x1b, 0xc, 0x4, 0x7, 0xb, 0x3, 0x3, 0xb7, 0xffffffffffffffff}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r0, 0x0) 14:36:41 executing program 5: 14:36:41 executing program 3: 14:36:41 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) syz_open_pts(r1, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:41 executing program 3: 14:36:41 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:41 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1f, 0x270a03) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000140)=ANY=[@ANYBLOB="0006000000000000c2ec8bda1191d464dc783c33c4107ab39316e702d275788164ddf16511673432e05ad3c524e2494f2a453977d1571a7b5e489b990f8e6d7c4d016f9e1bc5ba9190e5ee5c18f12a4d408ee8ab8f63720ecd67b186a224b3e619a85ca2d3164c17bf02b025aeffc3536cc53e82fbc79af9dc7bf3e122a4d185467b14a4593df777a8dd7bb30c9690fcf2f25c0f8285f20a1b157bf2c249b4ba"]) dup3(r1, r0, 0x0) getitimer(0x0, &(0x7f0000000080)) 14:36:41 executing program 5: 14:36:42 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:42 executing program 3: 14:36:42 executing program 5: 14:36:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x202100, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x1, 0x30, 0x1, 0x5}, &(0x7f0000000140)=0x18) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={r3, 0x1ff, 0x30, 0xc4, 0x3}, &(0x7f00000001c0)=0x18) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000000)='trusted.overlay.redirect\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x1) dup3(r1, r0, 0x0) fadvise64(r0, 0x0, 0x101, 0x5) 14:36:42 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:42 executing program 3: 14:36:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x100, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000180)=""/61) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) r3 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x800, 0x800) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r4, 0x489deae9}}, 0x10) dup3(r2, r0, 0x0) 14:36:42 executing program 5: 14:36:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40c400, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000)=0x800, 0x4) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x4000) ioctl$TCXONC(r1, 0x540a, 0x0) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.nlink\x00', &(0x7f0000000080)='/dev/ptmx\x00', 0xa, 0x2) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) r2 = dup3(r1, r0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000000c0)={0x1, 'veth1_to_bond\x00', 0x2}, 0x18) 14:36:42 executing program 3: 14:36:42 executing program 5: 14:36:42 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:36:42 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r0, 0x540a, 0x1f) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:42 executing program 3: 14:36:42 executing program 5: 14:36:42 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000000)={0x505, 0x1, 0xc, 0x1}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r0, r0, 0x80000) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000040)={0x20000000}) 14:36:42 executing program 3: 14:36:42 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:42 executing program 3: 14:36:42 executing program 5: 14:36:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:43 executing program 5: 14:36:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x3ffc) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x210100, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x1000, "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"}, &(0x7f0000000080)=0x1008) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000001240)=ANY=[@ANYRES32=r3, @ANYBLOB="b0000000f84621932a3f74d25867307be37d30244c5c6bef839a960df47723ecb8b0c47e23a1a0ccc5bba0e780b96eea52d3b1db06aa4d35dd63ab3c669ad451a48afec6a483ba50bf37fb83d921c671528e1712493cca453553a55ad6f44b5704d7f2012286a290789fd7d90b6fdda8c5e06f2c33148a75d730fd5d09ab4839399c8c0f8a751aba21efc567cf43183c5507da7da170937089b0d5cbdcea5a5fb44db06757bb61338edc95e8bd3ed2681d2cb70752"], &(0x7f00000000c0)=0xb8) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x4) dup3(r1, r0, 0x0) 14:36:43 executing program 3: 14:36:43 executing program 4: inotify_init1(0x800) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:43 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:43 executing program 3: 14:36:43 executing program 5: 14:36:43 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:36:43 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) socketpair(0xa, 0x4, 0x8, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r0, 0x4, 0x902800) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x100, 0x0) ioctl$RTC_WKALM_RD(r3, 0x80287010, &(0x7f0000000040)) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r0, 0x0) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000140)=""/248) 14:36:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000040)="0f425f69f20f38f10b650feda5000066b9800000c00f326635004000000f30b80d008ec86666de3c0f01cf260f01cb2665660f3a618c0060540fc76b39", 0x3d}], 0x1, 0x0, &(0x7f00000002c0), 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x40000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000440)="3147bc869082afb096a64cc5f96a0bce316833c10dfd56e8315bc3d2e285a159139acd654333053033d214d40006328ac4f36182fb40f4dedbe15ef737d9929f08ea38b16c1fe74e834f279309ae7e7eccb7333731dc89fdc0cbfe5a60ce30db33689c1c95747249de9d4f167c0080a4e0a0e032ec6b237f04773eda2c11b1e63395058786bb508c3479a4e1ccadd3be5fbcc2b019cab9e251ced912fa00ff9344bbd910f9473c66cce5b94bfa483c4973e28737293d77475df0528fee144d48d9aa7c8f", 0xc4) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000140)="65d9f3ba2000b0e1eed9ff66b8c4b800000f23c00f21f86635000005000f23f80f01d1baf80c66b8a322e48266efbafc0cb09dee6726670f32670fb2aec1cb0000ff22c02200", 0x46}], 0x1, 0x0, &(0x7f0000000300), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000002c0)) 14:36:43 executing program 5: perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 14:36:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000300)={0x0, 0x70d}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x4843f) fcntl$setstatus(r1, 0x4, 0x102800) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0xc0400, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000200)={0x37, 0x2a, 0xc, 0x7, 0x6, 0x2, 0x6, 0x9d, 0x1}) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000000)='&', 0xe0e87baa6a53972) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000180)) r3 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x3, 0x140) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000000140)={0x0, 0x10d000, 0x1ff, 0x100000000, 0xbd}) fcntl$getownex(r0, 0x10, &(0x7f0000000240)={0x0, 0x0}) syz_open_procfs(r4, &(0x7f0000000280)='auxv\x00') r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x7, 0x0, 0x10001, 0x3}) ioctl$DRM_IOCTL_AGP_BIND(r5, 0x40106436, &(0x7f00000000c0)={r6, 0x50000000000}) dup3(r1, r0, 0x0) 14:36:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000001000)) 14:36:43 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:36:43 executing program 5: msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000000)=""/98) 14:36:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:36:43 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x8, 0x0, 0x4}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:43 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000feffffff00"}, &(0x7f0000000700)}) 14:36:43 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffffa, 0x2) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3ff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r1, 0x0) 14:36:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:36:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) fcntl$addseals(r1, 0x409, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:44 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000080)) write(r1, &(0x7f0000000100)='&', 0x1) dup2(r0, r1) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x20000) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f00000000c0)) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x4, 0x2000) faccessat(r2, &(0x7f0000000040)='./file0\x00', 0xb3, 0x1000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x40000000000000) dup3(r1, r0, 0x0) 14:36:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) mq_open(&(0x7f0000000000)='/dev/ptmx\x00', 0x40, 0x3, &(0x7f0000000040)={0x63, 0x1, 0x0, 0x1507, 0x3ff, 0x0, 0x6, 0x9}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup3(r1, r0, 0x0) connect$rds(r2, &(0x7f0000000080)={0x2, 0x4e24}, 0x10) 14:36:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0xa0100, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:36:44 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:44 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000180)="0f00db670f01df66b8000000000f23d80f21f86635400000f00f23f80f09b800008ee00f009a00000f212b0f01c30f21b00f1af9", 0x34}], 0x1, 0x10, &(0x7f0000000040), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000540)={0xd0003}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="153f6234488d") socket$nl_route(0x10, 0x3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, &(0x7f0000000340)="643e67660f3a61ca9bbaf80c66b8bc5d158866efbafc0c66ed66b9800000c00f326635001000000f30f40f38c94bf80f380b5775260f01ca0f21360f180ad810", 0x40}], 0x2d3, 0x0, &(0x7f0000000280), 0x0) set_thread_area(&(0x7f0000000000)={0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x8, 0x1, 0x7}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f00000001c0)) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000680)=""/154) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x402, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = memfd_create(&(0x7f0000000000)='\'\x00', 0x4) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x8) r2 = syz_open_pts(r0, 0x20201) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x80000001, 0x2b, 0xfa41, 0x7fff, 0x8, 0x3, 0x6, 0x0, 0x36, 0x38, 0x2fa, 0xfffffffffffffff8, 0x6, 0x20, 0x1, 0x9, 0x5, 0xff}, [{0x70000001, 0x3, 0x2, 0x7fff, 0x2, 0x3, 0x100000001, 0x8}], "46650ec3de3536c0cdf711c6f565d0b6b883eed4e55ce04eaa2985e85f0f2fab35292aa92a8a7061a2c5ef2cde1ec53793b6b619c6762663aa6264adb635658c34062101e991", [[], [], [], [], [], [], [], [], [], []]}, 0xa9e) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) dup3(r2, r0, 0x0) 14:36:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000040)={'security\x00'}, &(0x7f00000000c0)=0x54) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x10000000) 14:36:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:36:44 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) sched_rr_get_interval(r1, &(0x7f0000000040)) r2 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x1f, 0x8400) ioctl$SG_SET_KEEP_ORPHAN(r2, 0x2287, &(0x7f00000002c0)=0x343bf251) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r3, 0x4, 0x102800) ioctl$TCXONC(r3, 0x540a, 0x0) write(r3, &(0x7f0000000100)='&', 0x1) r4 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={r5, @in={{0x2, 0x4e24, @remote}}, 0xb9, 0x200, 0x3, 0x24, 0x60}, &(0x7f0000000240)=0x98) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000698000)=0x3) dup3(r3, r0, 0x0) 14:36:44 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:44 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) r3 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r3, 0x4, 0x102800) ioctl$TCXONC(r3, 0x540a, 0x0) write(r3, &(0x7f0000000100)='&', 0x1) dup3(r3, r0, 0x0) 14:36:44 executing program 3: ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc008551c, &(0x7f0000001000)) 14:36:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000240)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000280)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000380)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000580), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) r10 = getegid() r11 = getegid() fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000740)={{}, {0x1, 0x4}, [{0x2, 0x2, r2}, {0x2, 0x5, r3}, {0x2, 0x2, r4}, {0x2, 0x0, r5}, {0x2, 0x4, r6}, {0x2, 0x4, r7}], {0x4, 0x1}, [{0x8, 0x4, r8}, {0x8, 0x7, r9}, {0x8, 0x0, r10}, {0x8, 0x0, r11}, {0x8, 0x4, r12}], {0x10, 0x81a8fbdd0fcf93bb}, {0x20, 0x1}}, 0x7c, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:44 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) [ 363.169499] vhci_hcd: invalid port number 0 14:36:45 executing program 3: ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc008551c, &(0x7f0000001000)) 14:36:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x103800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r2, 0x80) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) r3 = getpid() sched_getaffinity(r3, 0x8, &(0x7f00000000c0)) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0xad0a66b9a793bf28, 0x0) rt_sigqueueinfo(r3, 0x11, &(0x7f0000000180)={0x9, 0x7f, 0x101, 0xffffffffffffffe1}) dup3(r1, r0, 0x0) 14:36:45 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:45 executing program 3: ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc008551c, &(0x7f0000001000)) 14:36:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) r3 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r3, 0x4, 0x102800) ioctl$TCXONC(r3, 0x540a, 0x0) write(r3, &(0x7f0000000100)='&', 0x1) dup3(r3, r0, 0x0) 14:36:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) dup3(r1, r0, 0x0) 14:36:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r0, 0x540a, 0xfffffffffffffffe) dup3(r0, r1, 0x80000) timer_create(0x7, &(0x7f0000000140)={0x0, 0x1c, 0x6, @thr={&(0x7f0000000000)="bee6525ec400568b9821081b07f9276e34e869331d2edbf6beda287b038574689962c09dbd2f789fc5f51af0fc71b763b87078765ddade61e4842d365a73b0114f5884fd6d246682ce455f94ced3", &(0x7f0000000080)="0a8322a0d3cf384d0d98bb37a474af41ea9e05c762e341c6bb6de022ac5aa5e66df63858c9e3c40428fe0eb6a4625363a539e5b9f5c4d2957b1d9c2638d44a1be01731c9f1a0ddc33de1aa85e9698af4492f24e9145cf93a2ae3e87db573f42ddaed3e04870163ad066d3ebdb665"}}, &(0x7f0000000180)) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) ioctl$KDSKBLED(r0, 0x4b65, 0x0) dup3(r1, r0, 0x0) 14:36:45 executing program 3: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc008551c, &(0x7f0000001000)) 14:36:45 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) [ 363.548801] vhci_hcd: invalid port number 0 14:36:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) getrusage(0x1, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x200000) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:45 executing program 2: socket$l2tp(0x18, 0x1, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='changehat 0x0000000000000001^/dev/ptmx\x00/dev/ptv/ptmx\x00'], 0x3b) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) r3 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r3, 0x4, 0x102800) ioctl$TCXONC(r3, 0x540a, 0x0) write(r3, &(0x7f0000000100)='&', 0x1) dup3(r3, r0, 0x0) 14:36:45 executing program 3: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc008551c, &(0x7f0000001000)) 14:36:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000000)="26a63d036ac1e19489f2b4fda4a3cd0efe0b3c168b959f533b36256c041e47ace6d5b5277c3cc2391f3a8ba3268ea8cb357193fe7ff4cc5ab77ac68fcc9ec5eb426be9ba3a62c4792b865e584e216ccc8a4d886b8c0ed7295d4b757a01540c8d6461710266a12ba125c63202", 0xfcde) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xb7) [ 363.782654] audit: type=1400 audit(1539700605.552:36): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16535 comm="syz-executor4" 14:36:45 executing program 3: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc008551c, &(0x7f0000001000)) 14:36:45 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000feffff00"}, &(0x7f0000000700)}) [ 363.825955] vhci_hcd: invalid port number 0 14:36:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='changehat 0x0000000000000001^/dev/ptmx\x00/dev/ptv/ptmx\x00'], 0x3b) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) read(r1, &(0x7f0000000040)=""/6, 0x6) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x0, 0x10000) dup3(r1, r0, 0x0) 14:36:45 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x298080, 0x0) arch_prctl(0x8008000000002002, &(0x7f0000000200)="8d5e2f5d8c3bc10add99547e92461bb11b0237ffcbcd74bf4c96093a4fa16a2753212890eafe8616c93e93b13f5732d79a78cc444135dbab5ab724218389caec887ba7ba6fedd7385ad48a000000edc2da238578a03278cdbcfdb4b9692f9369b1356e971c06553f637d967bdca294979357799e6940a1322a43b0991d071c29be7a1c34f0cb90484cacb0f55b445db71ee4b7bb8fb4c27842d5cc23d9383a5651c580fcd39fc4ff12330cba9979cfdfa67a7693bb862d61e83df689d639387b97ffdf7010d8edb23e41281e623c85dc24a1c445d176ca516b40f1d078dbaf0d0434dc892f038e90c2c819d8743a6f61b7be0000f16a3c346e4430663f1ac5d5c8ad7a0e909ad160eab5eb15be4c8e2f703961274a131992c8e5c4") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x4000, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x20082, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x1400000000000000, 0x8000) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000080)) 14:36:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) r3 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r3, 0x4, 0x102800) ioctl$TCXONC(r3, 0x540a, 0x0) write(r3, &(0x7f0000000100)='&', 0x1) 14:36:45 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r2, 0x4, 0x102800) ioctl$TCXONC(r2, 0x540a, 0x0) write(r2, &(0x7f0000000100)='&', 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)={0x0, @speck128, 0x3, "5ad0249e91d3dd25"}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000698000)=0x3) dup3(r2, r0, 0x0) 14:36:45 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) [ 364.062128] vhci_hcd: invalid port number 0 [ 364.073183] audit: type=1400 audit(1539700605.842:37): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16558 comm="syz-executor4" 14:36:45 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) r3 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r3, 0x4, 0x102800) ioctl$TCXONC(r3, 0x540a, 0x0) 14:36:45 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:36:45 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='changehat 0x0000000000000001^/dev/ptmx\x00/dev/ptv/ptmx\x00'], 0x3b) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:46 executing program 2 (fault-call:2 fault-nth:0): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:46 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) [ 364.272496] vhci_hcd: invalid port number 0 [ 364.290219] FAULT_INJECTION: forcing a failure. [ 364.290219] name failslab, interval 1, probability 0, space 0, times 0 14:36:46 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) [ 364.331681] audit: type=1400 audit(1539700606.102:38): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16587 comm="syz-executor4" [ 364.365744] CPU: 0 PID: 16590 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #285 [ 364.373166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 364.382523] Call Trace: [ 364.385143] dump_stack+0x1c4/0x2b4 [ 364.388804] ? dump_stack_print_info.cold.2+0x52/0x52 [ 364.394050] should_fail.cold.4+0xa/0x17 [ 364.398135] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 364.403259] ? perf_trace_lock+0x7a0/0x7a0 [ 364.407514] ? graph_lock+0x170/0x170 [ 364.411340] ? graph_lock+0x170/0x170 [ 364.415157] ? __lock_acquire+0x7ec/0x4ec0 [ 364.419406] ? find_held_lock+0x36/0x1c0 [ 364.423515] ? __lock_is_held+0xb5/0x140 [ 364.427610] ? ___might_sleep+0x1ed/0x300 [ 364.431773] ? arch_local_save_flags+0x40/0x40 [ 364.431790] ? lock_release+0x970/0x970 [ 364.431806] ? arch_local_save_flags+0x40/0x40 [ 364.431827] ? usercopy_warn+0x110/0x110 [ 364.449112] __should_failslab+0x124/0x180 [ 364.449151] should_failslab+0x9/0x14 [ 364.449181] kmem_cache_alloc_trace+0x2d7/0x750 [ 364.461894] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 364.467015] packet_setsockopt+0x1784/0x2290 [ 364.471473] ? packet_sendmsg_spkt+0x16f0/0x16f0 [ 364.476258] ? __fget+0x4aa/0x740 [ 364.479738] ? lock_downgrade+0x900/0x900 [ 364.483905] ? check_preemption_disabled+0x48/0x200 [ 364.488947] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 364.494765] ? kasan_check_read+0x11/0x20 [ 364.498947] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 364.504267] ? rcu_bh_qs+0xc0/0xc0 [ 364.507841] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 364.513391] ? aa_label_sk_perm+0x46d/0x8e0 [ 364.517742] ? aa_profile_af_perm+0x410/0x410 [ 364.522250] ? ksys_dup3+0x680/0x680 [ 364.525982] ? __f_unlock_pos+0x19/0x20 [ 364.529980] ? proc_cwd_link+0x1d0/0x1d0 [ 364.534095] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 364.539036] ? aa_sk_perm+0x218/0x8b0 [ 364.542848] ? fget_raw+0x20/0x20 [ 364.546332] ? aa_af_perm+0x5a0/0x5a0 [ 364.550162] ? __lock_is_held+0xb5/0x140 [ 364.554259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 364.559887] ? security_socket_setsockopt+0x94/0xc0 [ 364.564971] __sys_setsockopt+0x1ba/0x3c0 [ 364.569142] ? kernel_accept+0x310/0x310 [ 364.572922] vhci_hcd: invalid port number 0 [ 364.573235] ? lockdep_hardirqs_on+0x421/0x5c0 14:36:46 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) r3 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r3, 0x4, 0x102800) 14:36:46 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:36:46 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405514, &(0x7f0000001000)) 14:36:46 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000feffff00"}, &(0x7f0000000700)}) [ 364.582147] ? trace_hardirqs_on+0xbd/0x310 [ 364.586502] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.591885] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 364.597357] __x64_sys_setsockopt+0xbe/0x150 [ 364.601799] do_syscall_64+0x1b9/0x820 [ 364.605698] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 364.611089] ? syscall_return_slowpath+0x5e0/0x5e0 [ 364.616031] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.616053] ? trace_hardirqs_on_caller+0x310/0x310 [ 364.616073] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 364.616105] ? prepare_exit_to_usermode+0x291/0x3b0 [ 364.616141] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 364.616166] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 364.626022] RIP: 0033:0x457569 [ 364.626040] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 364.626049] RSP: 002b:00007fb996663c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 364.626068] RAX: ffffffffffffffda RBX: 00007fb996663c90 RCX: 0000000000457569 [ 364.626078] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 364.626088] RBP: 000000000072bf00 R08: 000000000000fedf R09: 0000000000000000 [ 364.626099] R10: 0000000020000080 R11: 0000000000000246 R12: 00007fb9966646d4 [ 364.626108] R13: 00000000004c417b R14: 00000000004d6fc0 R15: 0000000000000004 14:36:48 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000140)="46f859fdbaca555326bf21018f65ed517867615fbdb900aad206a942e515f85433786c2080e52f5b38c45bae91a6a0c8232f530fc0ade31223b18e5f78042a9f26f836753a8d63cf85ad928634426aea15bae9a6f61f0200000000000000b2fb8ca791a51321bcdb9c27bb8a71a0e62f8d6563c17f539082fb7b7bc14ccba520947c2160ffeead05af2ce5ea8180b7e6da54662009d5bf3496e0ffca68e5f72101a6e6b4897335754b9a879e875d98db00f76dd218963a3ea295a0c3593a4dd78104f4576768dfd636478d6665d4feb76e48db2934fc2365ccbe20bd6e7205576c7c18b921636c", 0xe7) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) r2 = dup2(r0, r0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x4010, r2, 0x0) dup3(r1, r0, 0x0) 14:36:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x800455d1, &(0x7f0000001000)) 14:36:48 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:36:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='changehat 0x0000000000000001^/dev/ptmx\x00/dev/ptv/ptmx\x00'], 0x3b) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) 14:36:48 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) r3 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r3, 0x4, 0x102800) 14:36:48 executing program 2 (fault-call:2 fault-nth:1): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) [ 367.196852] audit: type=1400 audit(1539700608.972:39): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16620 comm="syz-executor4" [ 367.199266] FAULT_INJECTION: forcing a failure. [ 367.199266] name failslab, interval 1, probability 0, space 0, times 0 [ 367.219213] vhci_hcd: invalid port number 0 [ 367.226048] CPU: 0 PID: 16623 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #285 [ 367.237504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 367.246865] Call Trace: [ 367.249479] dump_stack+0x1c4/0x2b4 [ 367.253130] ? dump_stack_print_info.cold.2+0x52/0x52 [ 367.258332] ? __lock_acquire+0x7ec/0x4ec0 [ 367.262647] ? is_bpf_text_address+0xac/0x170 [ 367.267184] should_fail.cold.4+0xa/0x17 [ 367.271303] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 367.276425] ? mark_held_locks+0x130/0x130 [ 367.280688] ? rcu_bh_qs+0xc0/0xc0 [ 367.284248] ? unwind_dump+0x190/0x190 [ 367.288164] ? is_bpf_text_address+0xd3/0x170 [ 367.292759] ? kernel_text_address+0x79/0xf0 14:36:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x5421, &(0x7f0000001000)) 14:36:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) 14:36:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) syz_open_pts(r0, 0x20201) [ 367.297200] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.302763] ? check_preemption_disabled+0x48/0x200 [ 367.307818] ? debug_smp_processor_id+0x1c/0x20 [ 367.312514] ? perf_trace_lock_acquire+0x15b/0x800 [ 367.317483] ? perf_trace_lock+0x7a0/0x7a0 [ 367.321744] ? save_stack+0xa9/0xd0 [ 367.325382] ? save_stack+0x43/0xd0 [ 367.329016] ? kasan_kmalloc+0xc7/0xe0 [ 367.332915] ? packet_setsockopt+0x1784/0x2290 [ 367.337520] ? __sys_setsockopt+0x1ba/0x3c0 [ 367.341858] ? __x64_sys_setsockopt+0xbe/0x150 [ 367.346647] ? do_syscall_64+0x1b9/0x820 [ 367.350722] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.356125] ? __lock_acquire+0x7ec/0x4ec0 [ 367.360386] __should_failslab+0x124/0x180 [ 367.360410] should_failslab+0x9/0x14 [ 367.360429] kmem_cache_alloc_trace+0x4b/0x750 [ 367.360443] ? graph_lock+0x170/0x170 [ 367.360474] ? lock_acquire+0x1ed/0x520 [ 367.380907] __hw_addr_create_ex+0xb2/0x3f0 [ 367.385245] ? dev_mc_init+0x170/0x170 [ 367.389150] ? __lock_is_held+0xb5/0x140 [ 367.393240] __hw_addr_add_ex+0x1ef/0x2b0 [ 367.397428] dev_uc_add+0x70/0xc0 [ 367.400923] packet_dev_mc+0x131/0x2a0 [ 367.400947] packet_setsockopt+0x1bae/0x2290 [ 367.400974] ? packet_sendmsg_spkt+0x16f0/0x16f0 [ 367.400994] ? __fget+0x4aa/0x740 [ 367.401014] ? lock_downgrade+0x900/0x900 [ 367.421692] ? check_preemption_disabled+0x48/0x200 [ 367.426762] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 367.432574] ? kasan_check_read+0x11/0x20 [ 367.436770] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 367.442085] ? rcu_bh_qs+0xc0/0xc0 14:36:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) [ 367.445669] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 367.451237] ? aa_label_sk_perm+0x46d/0x8e0 [ 367.455597] ? aa_profile_af_perm+0x410/0x410 [ 367.460106] ? ksys_dup3+0x680/0x680 [ 367.463839] ? __f_unlock_pos+0x19/0x20 [ 367.467843] ? proc_cwd_link+0x1d0/0x1d0 [ 367.471954] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 367.476899] ? aa_sk_perm+0x218/0x8b0 [ 367.480715] ? fget_raw+0x20/0x20 [ 367.484224] ? aa_af_perm+0x5a0/0x5a0 [ 367.488057] ? __lock_is_held+0xb5/0x140 [ 367.492151] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 367.497704] ? security_socket_setsockopt+0x94/0xc0 [ 367.497735] __sys_setsockopt+0x1ba/0x3c0 [ 367.497757] ? kernel_accept+0x310/0x310 [ 367.497778] ? lockdep_hardirqs_on+0x421/0x5c0 [ 367.497797] ? trace_hardirqs_on+0xbd/0x310 [ 367.497819] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.506979] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 367.507005] __x64_sys_setsockopt+0xbe/0x150 [ 367.507030] do_syscall_64+0x1b9/0x820 [ 367.507047] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 14:36:49 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) [ 367.507068] ? syscall_return_slowpath+0x5e0/0x5e0 [ 367.507084] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 367.507107] ? trace_hardirqs_on_caller+0x310/0x310 [ 367.559285] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 367.564319] ? prepare_exit_to_usermode+0x291/0x3b0 [ 367.569355] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 367.574221] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 367.579420] RIP: 0033:0x457569 14:36:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0045516, &(0x7f0000001000)) [ 367.579438] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 367.579458] RSP: 002b:00007fb996663c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 367.579478] RAX: ffffffffffffffda RBX: 00007fb996663c90 RCX: 0000000000457569 [ 367.579488] RDX: 0000000000000001 RSI: 0000000000000107 RDI: 0000000000000003 [ 367.579499] RBP: 000000000072bf00 R08: 000000000000fedf R09: 0000000000000000 [ 367.579509] R10: 0000000020000080 R11: 0000000000000246 R12: 00007fb9966646d4 [ 367.579524] R13: 00000000004c417b R14: 00000000004d6fc0 R15: 0000000000000004 [ 367.621010] vhci_hcd: invalid port number 0 14:36:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/4096) dup3(r1, r0, 0x0) 14:36:49 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='changehat 0x0000000000000001^/dev/ptmx\x00/dev/ptv/ptmx\x00'], 0x3b) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) write(r1, &(0x7f0000000100)='&', 0x1) 14:36:49 executing program 2 (fault-call:2 fault-nth:2): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000001000)) 14:36:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='changehat 0x0000000000000001^/dev/ptmx\x00/dev/ptv/ptmx\x00'], 0x3b) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:36:49 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) [ 367.792584] audit: type=1400 audit(1539700609.562:40): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16652 comm="syz-executor4" 14:36:49 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='changehat 0x0000000000000001^/dev/ptmx\x00/dev/ptv/ptmx\x00'], 0x3b) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) [ 367.932329] vhci_hcd: invalid port number 0 [ 367.943944] audit: type=1400 audit(1539700609.712:41): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16668 comm="syz-executor4" 14:36:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85512, &(0x7f0000001000)) 14:36:49 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:49 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:49 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0xf, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) [ 368.101009] audit: type=1400 audit(1539700609.872:42): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16681 comm="syz-executor4" 14:36:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0505510, &(0x7f0000001000)) 14:36:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='changehat 0x0000000000000001^/dev/ptmx\x00/dev/ptv/ptmx\x00'], 0x3b) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:36:50 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:36:50 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x5451, &(0x7f0000001000)) 14:36:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:50 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x12, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) [ 368.291378] audit: type=1400 audit(1539700610.062:43): apparmor="DENIED" operation="change_hat" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=16704 comm="syz-executor4" 14:36:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r0, &(0x7f0000000140)="97e0d907c0c2e64ea706dea51cf04ca2cba2a933e574a73b29559156b2a5a9ab25c7c6872b7bcfe0a099e6ec444658aec9a86250777447e1e2ce9c5beba3153cae7b61577d8000acb2340ce1e799a25ef982226bb422205ae67ad26d13e1c256e21725d526f3e9a6b22955b94793978f4b30f901355ca0ee022329ba8a6a92975387664d808e7edb7ec95c96f86b224c00deb68d3f32983bdc3c8440805eb83d3a56df5be904df813545470ed5f8eb63862cc20f7864b4c0eb232c", 0xffffff85) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) epoll_create1(0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040)=0x8, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:36:50 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:50 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85513, &(0x7f0000001000)) 14:36:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:50 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x300, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:36:50 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000feffffff00"}, &(0x7f0000000700)}) 14:36:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x102800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='&', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0x3) dup3(r1, r0, 0x0) 14:36:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:50 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x2, &(0x7f0000001000)) 14:36:50 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x2, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) [ 368.776440] vhci_hcd: invalid port number 0 14:36:50 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:50 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r2 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r2, 0xc0185500, &(0x7f0000000000)={0xa3}) r3 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r3, 0x4, 0x102800) 14:36:50 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0045878, &(0x7f0000001000)) 14:36:50 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x11, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) [ 368.919187] vhci_hcd: invalid port number 0 14:36:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x20201) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:36:50 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) [ 369.016975] vhci_hcd: invalid port number 0 14:36:50 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:50 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x20201) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) 14:36:50 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc020660b, &(0x7f0000001000)) 14:36:50 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xc60b, 0x80) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000004c0)="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") ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000100)={0x1, 0x4, 0x6, 0x8, 0x9, 0x8}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xffffffffffffff67, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRESOCT=r0], 0x3}}, 0x0) 14:36:50 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x5, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:50 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) [ 369.237887] vhci_hcd: invalid port number 0 14:36:51 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:51 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x20201) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) 14:36:51 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0405519, &(0x7f0000001000)) 14:36:51 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000004c0)={0x7b, 0x0, [0x40000021]}) 14:36:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:51 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:51 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x14, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:51 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x4020940d, &(0x7f0000001000)) [ 369.456393] vhci_hcd: invalid port number 0 14:36:51 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x20201) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) 14:36:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:51 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:51 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc00455d0, &(0x7f0000001000)) 14:36:51 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0xc, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:36:51 executing program 0: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000002c0)) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x32012, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000003c0)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000000600)}) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4)=ANY=[], 0x0, 0x0, &(0x7f0000012fc7)}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40042, 0x0) ioctl$KVM_SET_PIT2(r3, 0x4070aea0, &(0x7f0000000080)={[{0x100, 0x400, 0x4, 0x0, 0x0, 0x40, 0x800, 0x3, 0x8001, 0x9, 0x9, 0xe9, 0x3}, {0x7, 0x39e, 0x21, 0x400, 0x0, 0x5, 0x800, 0x1, 0x7837, 0x101, 0x7a, 0x3f, 0x6}, {0x4, 0x6bc0, 0x2, 0x44, 0x401, 0x0, 0x7f, 0x5, 0x3, 0x7, 0x7fff, 0x76b0bfac, 0x3}], 0x100000000000000}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0eac116ae728aafe"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f000000cf68), 0x0, 0x0, &(0x7f0000000680)}) [ 369.714211] vhci_hcd: invalid port number 0 14:36:51 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:36:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:36:51 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:51 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x5452, &(0x7f0000001000)) [ 369.779485] binder: 16856:16858 unknown command 1779543054 [ 369.797792] binder: 16856:16858 ioctl c0306201 20008fd0 returned -22 14:36:51 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:51 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x8, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) [ 369.895030] binder: 16856:16869 unknown command 1779543054 [ 369.904712] binder: 16856:16869 ioctl c0306201 20008fd0 returned -22 [ 369.933284] vhci_hcd: invalid port number 0 14:36:51 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0045405, &(0x7f0000000140)) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getgid() syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x8001, 0x111000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x5000, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0xfffffffffffeffff}}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0xfffffffffffff32c}}], [{@appraise='appraise'}, {@subj_type={'subj_type'}}, {@context={'context', 0x3d, 'system_u'}}]}}) 14:36:51 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0045878, &(0x7f0000001000)) 14:36:51 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:36:51 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000200"}, &(0x7f0000000700)}) [ 370.116698] vhci_hcd: invalid port number 0 14:36:51 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0xe, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:51 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x5450, &(0x7f0000001000)) 14:36:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x20201) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:36:52 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:52 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x8}, &(0x7f0000000480)) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x802, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x0, 0xdd19, 0x4, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x181001, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000180)={&(0x7f000093d000/0x3000)=nil, 0x3000}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x400b01, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 14:36:52 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551b, &(0x7f0000001000)) [ 370.387320] vhci_hcd: invalid port number 0 14:36:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x16, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x20201) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:36:52 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0189436, &(0x7f0000001000)) 14:36:52 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:52 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x7, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 370.669476] vhci_hcd: invalid port number 0 14:36:52 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x20201) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:36:53 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = dup(r0) io_cancel(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x8}, &(0x7f0000000480)) sendto$inet6(r0, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x802, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0x8}, 0x0, 0xdd19, 0x4, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x181001, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000180)={&(0x7f000093d000/0x3000)=nil, 0x3000}) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x400b01, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) sendfile(r1, r4, &(0x7f0000d83ff8), 0x8000fffffffe) 14:36:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:36:53 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551a, &(0x7f0000001000)) 14:36:53 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:53 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0xd, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:53 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40049409, &(0x7f0000001000)) [ 372.077052] vhci_hcd: invalid port number 0 14:36:53 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:36:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) 14:36:53 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x13, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:54 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:54 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) [ 372.306861] vhci_hcd: invalid port number 0 14:36:55 executing program 0: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:36:55 executing program 4 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:36:55 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:36:55 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:55 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0xa, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:55 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x81785501, &(0x7f0000001000)) 14:36:55 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 373.458270] vhci_hcd: invalid port number 0 [ 373.473492] FAULT_INJECTION: forcing a failure. [ 373.473492] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 373.529465] CPU: 0 PID: 17033 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #285 [ 373.536863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.546226] Call Trace: [ 373.548845] dump_stack+0x1c4/0x2b4 [ 373.552524] ? dump_stack_print_info.cold.2+0x52/0x52 [ 373.557747] ? rcu_bh_qs+0xc0/0xc0 [ 373.561314] should_fail.cold.4+0xa/0x17 [ 373.565398] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 373.570544] ? print_usage_bug+0xc0/0xc0 [ 373.574640] ? __lock_acquire+0x7ec/0x4ec0 [ 373.578905] ? __lock_acquire+0x7ec/0x4ec0 [ 373.583165] ? debug_smp_processor_id+0x1c/0x20 [ 373.587850] ? perf_trace_lock_acquire+0x15b/0x800 [ 373.592797] ? print_usage_bug+0xc0/0xc0 [ 373.596885] ? mark_held_locks+0x130/0x130 [ 373.601149] ? debug_smp_processor_id+0x1c/0x20 [ 373.601807] vhci_hcd: invalid port number 0 [ 373.605837] ? perf_trace_lock_acquire+0x15b/0x800 [ 373.615091] ? __lock_acquire+0x7ec/0x4ec0 [ 373.619351] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 373.624904] ? check_preemption_disabled+0x48/0x200 [ 373.629949] __alloc_pages_nodemask+0x34b/0xde0 [ 373.634643] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 373.639679] ? check_noncircular+0x20/0x20 [ 373.643931] ? graph_lock+0x170/0x170 [ 373.647748] ? find_held_lock+0x36/0x1c0 [ 373.651839] ? print_usage_bug+0xc0/0xc0 [ 373.655921] ? debug_smp_processor_id+0x1c/0x20 [ 373.660606] ? perf_trace_lock_acquire+0x15b/0x800 [ 373.665582] ? check_noncircular+0x20/0x20 [ 373.669836] ? print_usage_bug+0xc0/0xc0 [ 373.673913] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 14:36:55 executing program 0: socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100), 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000180)=0x580, 0x4) sendto$inet6(r2, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000080)=0x8, 0x4) recvmsg(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@nl=@proc, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000000140)=""/36, 0x24}, 0x2000) sendmmsg(r1, &(0x7f00000000c0), 0x182, 0x0) 14:36:55 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x5460, &(0x7f0000001000)) 14:36:55 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:36:55 executing program 0: ftruncate(0xffffffffffffffff, 0x1000000) lseek(0xffffffffffffffff, 0x0, 0x4) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000040)=""/76, 0x4c}], 0x1) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xf588, 0x180) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0xa0) [ 373.679472] alloc_pages_vma+0x3a0/0x540 [ 373.679504] do_huge_pmd_anonymous_page+0x56b/0x17e0 [ 373.679523] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 373.679551] ? __thp_get_unmapped_area+0x180/0x180 [ 373.698913] ? mark_held_locks+0x130/0x130 [ 373.703167] ? __lock_acquire+0x7ec/0x4ec0 [ 373.703187] ? print_usage_bug+0xc0/0xc0 [ 373.703212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 373.703230] ? check_preemption_disabled+0x48/0x200 [ 373.703255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 14:36:55 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000000080)) r1 = getuid() fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000040)=@v3={0x3000000, [{0x7fff, 0x516}, {0x3, 0x2}], r1}, 0x18, 0x3) 14:36:55 executing program 5: socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r0 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 373.727625] ? pud_val+0x88/0x100 [ 373.731124] ? __pmd+0x60/0x60 [ 373.734332] ? debug_smp_processor_id+0x1c/0x20 [ 373.734360] __handle_mm_fault+0x3880/0x53e0 [ 373.734395] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 373.734415] ? graph_lock+0x170/0x170 [ 373.752132] ? print_usage_bug+0xc0/0xc0 [ 373.756215] ? graph_lock+0x170/0x170 [ 373.756231] ? graph_lock+0x170/0x170 [ 373.756271] ? handle_mm_fault+0x42a/0xc70 [ 373.756289] ? lock_downgrade+0x900/0x900 [ 373.756307] ? check_preemption_disabled+0x48/0x200 [ 373.756333] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 373.756347] ? kasan_check_read+0x11/0x20 [ 373.756366] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 373.756399] ? rcu_bh_qs+0xc0/0xc0 [ 373.768226] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 373.768246] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 373.768265] ? check_preemption_disabled+0x48/0x200 [ 373.768293] handle_mm_fault+0x54f/0xc70 [ 373.768315] ? __handle_mm_fault+0x53e0/0x53e0 [ 373.768340] ? find_vma+0x34/0x190 [ 373.783309] __do_page_fault+0x67d/0xed0 [ 373.783339] ? mm_fault_error+0x380/0x380 [ 373.783359] ? graph_lock+0x170/0x170 [ 373.783378] ? graph_lock+0x170/0x170 [ 373.807302] do_page_fault+0xf2/0x7e0 [ 373.807323] ? vmalloc_sync_all+0x30/0x30 [ 373.807343] ? error_entry+0x76/0xd0 [ 373.807362] ? trace_hardirqs_off_caller+0xbb/0x310 [ 373.807387] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 373.821069] ? trace_hardirqs_on_caller+0x310/0x310 [ 373.821103] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 373.821130] page_fault+0x1e/0x30 [ 373.821150] RIP: 0010:__put_user_4+0x1c/0x30 [ 373.844282] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 40 ee 01 00 48 8b 9b 18 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 373.892480] vhci_hcd: invalid port number 0 [ 373.898578] RSP: 0018:ffff880183caf9c8 EFLAGS: 00010293 [ 373.908265] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000080 [ 373.915553] RDX: 000000000000006e RSI: ffffffff81b15713 RDI: 0000000000000282 [ 373.922833] RBP: ffff880183cafa18 R08: 0000000000000000 R09: 0000000000000001 [ 373.930113] R10: ffff8801d3a22fa8 R11: 1d1a708fda32dd0f R12: 0000000000000000 [ 373.937392] R13: 0000000020000080 R14: 0000000000000000 R15: 0000000000000000 [ 373.944707] ? __might_fault+0x1a3/0x1e0 [ 373.948866] ? n_tty_ioctl+0x1a7/0x360 [ 373.952778] ? ldsem_down_read+0x32/0x40 [ 373.956861] tty_ioctl+0x5ad/0x1820 [ 373.960507] ? commit_echoes+0x1c0/0x1c0 [ 373.964582] ? tty_vhangup+0x30/0x30 [ 373.968312] ? rcu_bh_qs+0xc0/0xc0 [ 373.971880] ? __fget+0x4d1/0x740 [ 373.975357] ? ksys_dup3+0x680/0x680 [ 373.979085] ? find_held_lock+0x36/0x1c0 [ 373.983165] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 373.983188] ? tty_vhangup+0x30/0x30 [ 373.983208] do_vfs_ioctl+0x1de/0x1720 [ 373.995741] ? __lock_is_held+0xb5/0x140 [ 373.999847] ? ioctl_preallocate+0x300/0x300 [ 374.004272] ? __fget_light+0x2e9/0x430 [ 374.008267] ? fget_raw+0x20/0x20 [ 374.011749] ? __sb_end_write+0xd9/0x110 [ 374.015835] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 374.021389] ? fput+0x130/0x1a0 [ 374.024690] ? do_syscall_64+0x9a/0x820 [ 374.028690] ? do_syscall_64+0x9a/0x820 [ 374.028708] ? lockdep_hardirqs_on+0x421/0x5c0 [ 374.028736] ? security_file_ioctl+0x94/0xc0 [ 374.028770] ksys_ioctl+0xa9/0xd0 [ 374.037329] __x64_sys_ioctl+0x73/0xb0 [ 374.037351] do_syscall_64+0x1b9/0x820 [ 374.037369] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 374.037389] ? syscall_return_slowpath+0x5e0/0x5e0 [ 374.037406] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.037427] ? trace_hardirqs_on_caller+0x310/0x310 [ 374.037445] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 374.037476] ? prepare_exit_to_usermode+0x291/0x3b0 [ 374.083246] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.088116] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 374.093319] RIP: 0033:0x457569 [ 374.096525] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 374.115446] RSP: 002b:00007f2899ba1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.123208] RAX: ffffffffffffffda RBX: 00007f2899ba1c90 RCX: 0000000000457569 14:36:55 executing program 4 (fault-call:3 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:36:55 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0xfc, 0x80000000}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:36:55 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) [ 374.130498] RDX: 0000000020000080 RSI: 000000000000541b RDI: 0000000000000004 [ 374.138510] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 374.145785] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2899ba26d4 [ 374.153067] R13: 00000000004bf67c R14: 00000000004cf550 R15: 0000000000000005 14:36:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x9, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:36:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x294000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000080), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000040)="b9800000c00f3235001000000f30f24c0f2c49e8426dc4027d3493b80800003626660f7e676d660f1678b06cc403f9dfbeb70000000bc7442400f5000000c744240284d178bcff1c24f2f347dbe1", 0x4e}], 0x77, 0x48, &(0x7f0000000140), 0x1000000000000390) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000004680)={0x0, 0x0, 0x1ef2, {}, [], "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", "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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 374.265925] vhci_hcd: invalid port number 0 [ 374.280251] FAULT_INJECTION: forcing a failure. [ 374.280251] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 374.305954] CPU: 0 PID: 17081 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #285 14:36:56 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x0, 0xfffffffffffffffd, 0x56) socket$inet6_udplite(0xa, 0x2, 0x88) [ 374.313354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.322764] Call Trace: [ 374.325375] dump_stack+0x1c4/0x2b4 [ 374.329055] ? dump_stack_print_info.cold.2+0x52/0x52 [ 374.334300] ? debug_smp_processor_id+0x1c/0x20 [ 374.338988] ? perf_trace_lock_acquire+0x15b/0x800 [ 374.343941] should_fail.cold.4+0xa/0x17 [ 374.348027] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 374.353155] ? graph_lock+0x170/0x170 [ 374.356999] ? graph_lock+0x170/0x170 [ 374.360825] ? debug_smp_processor_id+0x1c/0x20 14:36:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 374.365526] ? perf_trace_lock_acquire+0x15b/0x800 [ 374.370495] ? __lock_is_held+0xb5/0x140 [ 374.374596] ? ___might_sleep+0x1ed/0x300 [ 374.378769] ? lock_release+0x970/0x970 [ 374.382768] ? arch_local_save_flags+0x40/0x40 [ 374.387379] ? __might_sleep+0x95/0x190 [ 374.391396] __alloc_pages_nodemask+0x34b/0xde0 [ 374.396132] ? mem_cgroup_throttle_swaprate+0x270/0x884 [ 374.401528] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 374.406564] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 374.407540] vhci_hcd: invalid port number 0 14:36:56 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x3102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000002c0), 0xffffffffffffffff) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="1300000000000000000000"], &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='devpts\x00', 0x0, &(0x7f0000000140)='threaded\x00') ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000080)={0xe4, 0x0, 0x0, 0x9}) fremovexattr(r0, &(0x7f0000000000)=@random={'btrfs.', 'devpts\x00'}) [ 374.412371] ? kasan_check_read+0x11/0x20 [ 374.412393] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 374.420875] ? rcu_bh_qs+0xc0/0xc0 [ 374.429694] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 374.429720] ? mem_cgroup_throttle_swaprate+0x2eb/0x884 [ 374.440656] ? swap_duplicate+0x80/0x80 [ 374.444653] ? check_noncircular+0x20/0x20 [ 374.448900] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 374.454473] alloc_pages_current+0x10c/0x210 [ 374.458961] pte_alloc_one+0x1b/0x1a0 14:36:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 374.462791] do_huge_pmd_anonymous_page+0x813/0x17e0 [ 374.467907] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 374.473212] ? __thp_get_unmapped_area+0x180/0x180 [ 374.478175] ? mark_held_locks+0x130/0x130 [ 374.482449] ? __lock_acquire+0x7ec/0x4ec0 [ 374.486713] ? print_usage_bug+0xc0/0xc0 [ 374.490800] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 374.496379] ? check_preemption_disabled+0x48/0x200 [ 374.501428] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 374.506999] ? pud_val+0x88/0x100 [ 374.510479] ? __pmd+0x60/0x60 14:36:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 374.513697] ? debug_smp_processor_id+0x1c/0x20 [ 374.518394] __handle_mm_fault+0x3880/0x53e0 [ 374.521974] vhci_hcd: invalid port number 0 [ 374.522827] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 374.531980] ? graph_lock+0x170/0x170 [ 374.535798] ? print_usage_bug+0xc0/0xc0 [ 374.539876] ? graph_lock+0x170/0x170 [ 374.543691] ? graph_lock+0x170/0x170 [ 374.547535] ? handle_mm_fault+0x42a/0xc70 [ 374.551523] devpts: called with bogus options [ 374.551789] ? lock_downgrade+0x900/0x900 [ 374.551814] ? check_preemption_disabled+0x48/0x200 [ 374.560617] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 374.571417] ? kasan_check_read+0x11/0x20 [ 374.571439] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 374.580879] ? rcu_bh_qs+0xc0/0xc0 [ 374.584436] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 374.589912] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 374.595485] ? check_preemption_disabled+0x48/0x200 [ 374.600529] handle_mm_fault+0x54f/0xc70 [ 374.602684] vhci_hcd: invalid port number 0 [ 374.604619] ? __handle_mm_fault+0x53e0/0x53e0 [ 374.613520] ? find_vma+0x34/0x190 [ 374.617086] __do_page_fault+0x67d/0xed0 [ 374.621179] ? mm_fault_error+0x380/0x380 [ 374.625350] ? graph_lock+0x170/0x170 [ 374.629163] ? graph_lock+0x170/0x170 [ 374.632987] do_page_fault+0xf2/0x7e0 [ 374.636804] ? vmalloc_sync_all+0x30/0x30 [ 374.640976] ? error_entry+0x76/0xd0 [ 374.644703] ? trace_hardirqs_off_caller+0xbb/0x310 [ 374.649750] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.654612] ? trace_hardirqs_on_caller+0x310/0x310 [ 374.659656] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.664528] page_fault+0x1e/0x30 14:36:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB='\x00\x00\x00']) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getresuid(&(0x7f0000000040)=0x0, &(0x7f0000000080), &(0x7f00000000c0)) r4 = getgid() chown(&(0x7f0000000000)='./file0\x00', r3, r4) [ 374.668001] RIP: 0010:__put_user_4+0x1c/0x30 [ 374.668021] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 40 ee 01 00 48 8b 9b 18 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 374.691349] RSP: 0018:ffff880182cdf9c8 EFLAGS: 00010293 [ 374.691367] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000080 [ 374.691377] RDX: 000000000000006e RSI: ffffffff81b15713 RDI: 0000000000000282 [ 374.691387] RBP: ffff880182cdfa18 R08: 0000000000000000 R09: 0000000000000001 [ 374.691397] R10: ffff8801c0a7cba8 R11: 1d1a708fda32dd0f R12: 0000000000000000 [ 374.691407] R13: 0000000020000080 R14: 0000000000000000 R15: 0000000000000000 [ 374.691439] ? __might_fault+0x1a3/0x1e0 [ 374.691474] ? n_tty_ioctl+0x1a7/0x360 [ 374.718631] ? ldsem_down_read+0x32/0x40 [ 374.718654] tty_ioctl+0x5ad/0x1820 [ 374.718668] ? commit_echoes+0x1c0/0x1c0 [ 374.718688] ? tty_vhangup+0x30/0x30 [ 374.733226] ? rcu_bh_qs+0xc0/0xc0 [ 374.733259] ? __fget+0x4d1/0x740 [ 374.733297] ? ksys_dup3+0x680/0x680 [ 374.767359] ? find_held_lock+0x36/0x1c0 [ 374.771448] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 374.776414] ? tty_vhangup+0x30/0x30 [ 374.780157] do_vfs_ioctl+0x1de/0x1720 [ 374.784053] ? __lock_is_held+0xb5/0x140 [ 374.788127] ? ioctl_preallocate+0x300/0x300 [ 374.792547] ? __fget_light+0x2e9/0x430 [ 374.796531] ? fget_raw+0x20/0x20 [ 374.800002] ? __sb_end_write+0xd9/0x110 [ 374.804087] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 374.809649] ? fput+0x130/0x1a0 [ 374.812957] ? do_syscall_64+0x9a/0x820 [ 374.816933] ? do_syscall_64+0x9a/0x820 [ 374.820910] ? lockdep_hardirqs_on+0x421/0x5c0 [ 374.825505] ? security_file_ioctl+0x94/0xc0 [ 374.829942] ksys_ioctl+0xa9/0xd0 [ 374.833416] __x64_sys_ioctl+0x73/0xb0 [ 374.837330] do_syscall_64+0x1b9/0x820 [ 374.841224] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 374.846596] ? syscall_return_slowpath+0x5e0/0x5e0 [ 374.851533] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.856388] ? trace_hardirqs_on_caller+0x310/0x310 [ 374.861414] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 374.866442] ? prepare_exit_to_usermode+0x291/0x3b0 [ 374.871494] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.876354] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 374.881547] RIP: 0033:0x457569 [ 374.884753] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 374.903658] RSP: 002b:00007f2899ba1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.911373] RAX: ffffffffffffffda RBX: 00007f2899ba1c90 RCX: 0000000000457569 [ 374.918641] RDX: 0000000020000080 RSI: 000000000000541b RDI: 0000000000000004 [ 374.925933] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 374.933207] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2899ba26d4 [ 374.940491] R13: 00000000004bf67c R14: 00000000004cf550 R15: 0000000000000005 14:36:56 executing program 4 (fault-call:3 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:36:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:56 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x6, 0x0) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) [ 375.015109] vhci_hcd: invalid port number 0 14:36:56 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x2, 0x6, @link_local}, 0xfedf) 14:36:56 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:56 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 375.096260] FAULT_INJECTION: forcing a failure. [ 375.096260] name failslab, interval 1, probability 0, space 0, times 0 14:36:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x80000000, 0x400000) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 14:36:56 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) [ 375.164870] CPU: 0 PID: 17119 Comm: syz-executor4 Not tainted 4.19.0-rc8+ #285 [ 375.172274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 375.181635] Call Trace: [ 375.184268] dump_stack+0x1c4/0x2b4 [ 375.187928] ? dump_stack_print_info.cold.2+0x52/0x52 [ 375.193157] should_fail.cold.4+0xa/0x17 [ 375.197241] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 375.202372] ? check_preemption_disabled+0x48/0x200 [ 375.202399] ? graph_lock+0x170/0x170 [ 375.202420] ? graph_lock+0x170/0x170 [ 375.215060] ? find_held_lock+0x36/0x1c0 [ 375.219146] ? __lock_is_held+0xb5/0x140 [ 375.219180] ? ___might_sleep+0x1ed/0x300 [ 375.219201] ? arch_local_save_flags+0x40/0x40 [ 375.232049] __should_failslab+0x124/0x180 [ 375.236308] should_failslab+0x9/0x14 [ 375.240348] kmem_cache_alloc+0x2be/0x730 [ 375.240369] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 375.240397] ptlock_alloc+0x20/0x80 [ 375.240417] pte_alloc_one+0x6b/0x1a0 [ 375.257526] do_huge_pmd_anonymous_page+0x813/0x17e0 [ 375.262649] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 375.267959] ? __thp_get_unmapped_area+0x180/0x180 [ 375.272908] ? mark_held_locks+0x130/0x130 [ 375.272927] ? __lock_acquire+0x7ec/0x4ec0 [ 375.272946] ? print_usage_bug+0xc0/0xc0 [ 375.272970] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.272992] ? check_preemption_disabled+0x48/0x200 [ 375.296104] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 375.301660] ? pud_val+0x88/0x100 [ 375.305143] ? __pmd+0x60/0x60 [ 375.308367] ? debug_smp_processor_id+0x1c/0x20 14:36:57 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000feffffff00"}, &(0x7f0000000700)}) [ 375.313085] __handle_mm_fault+0x3880/0x53e0 [ 375.317547] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 375.322407] ? graph_lock+0x170/0x170 [ 375.326249] ? print_usage_bug+0xc0/0xc0 [ 375.330337] ? graph_lock+0x170/0x170 [ 375.334153] ? graph_lock+0x170/0x170 [ 375.338013] ? handle_mm_fault+0x42a/0xc70 [ 375.342264] ? lock_downgrade+0x900/0x900 [ 375.346546] ? check_preemption_disabled+0x48/0x200 [ 375.351590] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 375.357408] ? kasan_check_read+0x11/0x20 14:36:57 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) [ 375.361589] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 375.366908] ? rcu_bh_qs+0xc0/0xc0 [ 375.370487] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 375.375960] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 375.381518] ? check_preemption_disabled+0x48/0x200 [ 375.386562] handle_mm_fault+0x54f/0xc70 [ 375.390648] ? __handle_mm_fault+0x53e0/0x53e0 [ 375.395251] ? find_vma+0x34/0x190 [ 375.398829] __do_page_fault+0x67d/0xed0 [ 375.402914] ? mm_fault_error+0x380/0x380 [ 375.407082] ? graph_lock+0x170/0x170 [ 375.410912] ? graph_lock+0x170/0x170 [ 375.410937] do_page_fault+0xf2/0x7e0 [ 375.418543] ? vmalloc_sync_all+0x30/0x30 [ 375.418563] ? error_entry+0x76/0xd0 [ 375.418583] ? trace_hardirqs_off_caller+0xbb/0x310 [ 375.418602] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 375.418622] ? trace_hardirqs_on_caller+0x310/0x310 [ 375.429135] vhci_hcd: invalid port number 0 [ 375.431536] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 375.450560] page_fault+0x1e/0x30 [ 375.454041] RIP: 0010:__put_user_4+0x1c/0x30 14:36:57 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) [ 375.458492] Code: 1f 00 c3 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 8b 1c 25 40 ee 01 00 48 8b 9b 18 14 00 00 48 83 eb 03 48 39 d9 73 3c 0f 1f 00 <89> 01 31 c0 0f 1f 00 c3 66 90 66 2e 0f 1f 84 00 00 00 00 00 65 48 [ 375.477403] RSP: 0018:ffff8801c466f9c8 EFLAGS: 00010293 [ 375.482778] RAX: 0000000000000000 RBX: 00007fffffffeffd RCX: 0000000020000080 [ 375.490054] RDX: 000000000000006e RSI: ffffffff81b15713 RDI: 0000000000000282 [ 375.497348] RBP: ffff8801c466fa18 R08: 0000000000000000 R09: 0000000000000001 [ 375.504629] R10: ffff880187c0eee8 R11: 1d1a708fda32dd0f R12: 0000000000000000 [ 375.511908] R13: 0000000020000080 R14: 0000000000000000 R15: 0000000000000000 [ 375.519221] ? __might_fault+0x1a3/0x1e0 [ 375.523305] ? n_tty_ioctl+0x1a7/0x360 [ 375.527215] ? ldsem_down_read+0x32/0x40 [ 375.531298] tty_ioctl+0x5ad/0x1820 [ 375.534938] ? commit_echoes+0x1c0/0x1c0 [ 375.539013] ? tty_vhangup+0x30/0x30 [ 375.542749] ? rcu_bh_qs+0xc0/0xc0 [ 375.546325] ? __fget+0x4d1/0x740 [ 375.547399] vhci_hcd: invalid port number 0 [ 375.549797] ? ksys_dup3+0x680/0x680 [ 375.558018] ? find_held_lock+0x36/0x1c0 [ 375.562099] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 375.567048] ? tty_vhangup+0x30/0x30 [ 375.570786] do_vfs_ioctl+0x1de/0x1720 [ 375.574688] ? __lock_is_held+0xb5/0x140 [ 375.578778] ? ioctl_preallocate+0x300/0x300 [ 375.583200] ? __fget_light+0x2e9/0x430 [ 375.587186] ? fget_raw+0x20/0x20 [ 375.590654] ? __sb_end_write+0xd9/0x110 [ 375.594745] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 375.600294] ? fput+0x130/0x1a0 [ 375.603605] ? do_syscall_64+0x9a/0x820 [ 375.603624] ? do_syscall_64+0x9a/0x820 [ 375.603642] ? lockdep_hardirqs_on+0x421/0x5c0 [ 375.603664] ? security_file_ioctl+0x94/0xc0 [ 375.611608] ksys_ioctl+0xa9/0xd0 [ 375.611633] __x64_sys_ioctl+0x73/0xb0 [ 375.611660] do_syscall_64+0x1b9/0x820 [ 375.631865] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 375.637252] ? syscall_return_slowpath+0x5e0/0x5e0 [ 375.642196] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 375.647056] ? trace_hardirqs_on_caller+0x310/0x310 [ 375.652094] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 375.657130] ? prepare_exit_to_usermode+0x291/0x3b0 [ 375.662161] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 375.667009] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 375.672217] RIP: 0033:0x457569 [ 375.675407] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 375.694324] RSP: 002b:00007f2899ba1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 375.702032] RAX: ffffffffffffffda RBX: 00007f2899ba1c90 RCX: 0000000000457569 [ 375.709287] RDX: 0000000020000080 RSI: 000000000000541b RDI: 0000000000000004 14:36:57 executing program 4 (fault-call:3 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:36:57 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 375.716555] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 375.723823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2899ba26d4 [ 375.731081] R13: 00000000004bf67c R14: 00000000004cf550 R15: 0000000000000005 14:36:57 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local={0xd}}, 0xfedf) [ 375.809192] vhci_hcd: invalid port number 0 [ 375.813562] vhci_hcd: invalid port number 0 14:36:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:36:57 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @rand_addr}, &(0x7f0000000040)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000180)=0x16d) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@loopback, @in=@loopback, 0x4e24, 0x3ff, 0x4e20, 0x1000, 0x2, 0x0, 0x80, 0x2b, r2, r3}, {0x40, 0xffffffff973e8c93, 0x7, 0x1, 0x3, 0x2, 0x10001}, {0x5fed, 0x40000000, 0x3, 0xbf0}, 0xd23, 0x6e6bbb, 0x2, 0x1, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0xa}, 0x4d4, 0x3f}, 0x2, @in=@loopback, 0x34ff, 0x7, 0x3, 0xc2, 0x8, 0x3ff, 0xffff}}, 0xe8) 14:36:57 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:57 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 375.978420] vhci_hcd: invalid port number 0 14:36:57 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:36:57 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local={0x13}}, 0xfedf) 14:36:57 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488d") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 376.081874] vhci_hcd: invalid port number 0 14:36:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5428, &(0x7f0000000080)) 14:36:57 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x800, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0xfffffffffffff000, 0x200040) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000240)={0xf12c, 0x1, 0x1ff, 'queue1\x00', 0x7}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x20100, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000180)={{0x0, @empty, 0x4e23, 0x1, 'fo\x00', 0x4, 0x4, 0x6e}, {@loopback, 0x4e20, 0x4, 0x7fff, 0x1, 0x6}}, 0x44) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) syz_open_procfs(r3, &(0x7f0000000100)='personality\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r4, 0x59, 0x10}, 0xc) 14:36:58 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:36:58 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0xffffffffffffffff) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x800) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00', 0x1021}) [ 376.210132] vhci_hcd: invalid port number 0 14:36:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local={0x16}}, 0xfedf) 14:36:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5418, &(0x7f0000000080)) 14:36:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x7, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e22, 0x7, @loopback, 0x6}}, 0x13b0, 0xfff, 0xfffffffffffffffd, 0x1, 0x14}, &(0x7f00000001c0)=0x98) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000040)=0xb6, 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='schedstat\x00') ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f00000002c0)={0x47, &(0x7f0000000240)="f8dea854d441de141f30f928edb8b967e0e7f0b7549fe572030c48022ece75b0e86e08cd080c400afcbdecba04b2c0cd97a06b21722d4475e3fca2a1b4f393053f42455ad4e1b7"}) 14:36:58 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:58 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x40096101, 0x705000) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000000)={{0xf000, 0x5000, 0x9512fb51f4e7cb9b, 0x0, 0x9, 0x200, 0x10000, 0x9, 0x5, 0x2, 0x1817, 0x1}, {0x5000, 0x100000, 0xd, 0x6, 0x100, 0x5, 0x6, 0x3, 0x100000001, 0x5, 0x8, 0x4}, {0x1f000, 0x0, 0x1b, 0x8, 0x20, 0x1, 0x0, 0xfb8, 0x9, 0x10001, 0x7fff, 0x9}, {0x6000, 0x0, 0x4, 0x4, 0x7cd9c6bf, 0x3ff, 0x8, 0x569c62d9, 0x152, 0x200, 0x6, 0xff}, {0x1000, 0x103002, 0xc, 0x4, 0xffffffffffff0001, 0x4, 0xfffffffffffffffd, 0x1, 0x0, 0xffff, 0x8, 0xea72}, {0x0, 0x110000, 0xc, 0x2, 0x4, 0x7fff, 0x1000, 0x1, 0x0, 0x2, 0xcef, 0x13}, {0xf000, 0x0, 0xf, 0x8, 0xc6c7, 0x5, 0x1, 0xfffffffffffffe03, 0x8001, 0x8001, 0x7b2b3b8a, 0x7}, {0x116004, 0x10d000, 0x0, 0xfe6e, 0xf1f, 0x20, 0x74605b66, 0x6, 0x9, 0x10000, 0x80000000, 0x200}, {0x0, 0x106004}, {0xd000}, 0x40008, 0x0, 0x2000, 0x6008a, 0x2, 0x400, 0x100000, [0x80000001, 0xfffffffffffffff7, 0x979, 0x6]}) [ 376.420377] vhci_hcd: invalid port number 0 14:36:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x40049409, &(0x7f0000000080)) 14:36:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local={0xe}}, 0xfedf) 14:36:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:36:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) [ 376.575383] QAT: Device 44 not found 14:36:58 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) [ 376.637561] QAT: Invalid ioctl [ 376.641650] QAT: Device 44 not found [ 376.670935] QAT: Invalid ioctl [ 376.674052] vhci_hcd: invalid port number 0 14:36:58 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) quotactl(0xfffffffffffffffc, &(0x7f0000000000)='./file0\x00', r1, &(0x7f00000001c0)="58e54415ee4697aa") ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000000080)) 14:36:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x7fffffff, 0xfff, 0x5, 0x3, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x260981) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000240)={0x0, 0x65, &(0x7f00000001c0)="24cb2c506e4e2907e64061be3cd5c14e67c856174c4abd417bd626680fcbd6b8744c3a9acb083101ea9e49ea3b87a4deb215038af8907be1a04130f29ab184521db2398479e860da875a017204deb9f8e48a25ab542c09b94ab6f57db9bf0ac95d3d18fcb2"}) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000000)={0x0, 0x5, 0x10000000}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x0, 0xa}}, 0x20) r2 = syz_open_dev$usb(&(0x7f0000005f80)='/dev/bus/usb/00#/00#\x00', 0x0, 0x8000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000140)=0xc) setuid(r3) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000005fc0)) 14:36:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d76") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5422, &(0x7f0000000080)) 14:36:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local={0x14}}, 0xfedf) [ 376.866099] vhci_hcd: invalid port number 0 14:36:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x204000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:36:58 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:58 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:36:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5427, &(0x7f0000000080)) 14:36:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000000000)) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x208401, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') 14:36:58 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local={0xc}}, 0xfedf) 14:36:58 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000feffff00"}, &(0x7f0000000700)}) [ 377.135714] vhci_hcd: invalid port number 0 14:36:58 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000340)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000], 0x7fffffff, 0xfff, 0x5, 0x3, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x260981) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000240)={0x0, 0x65, &(0x7f00000001c0)="24cb2c506e4e2907e64061be3cd5c14e67c856174c4abd417bd626680fcbd6b8744c3a9acb083101ea9e49ea3b87a4deb215038af8907be1a04130f29ab184521db2398479e860da875a017204deb9f8e48a25ab542c09b94ab6f57db9bf0ac95d3d18fcb2"}) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000000)={0x0, 0x5, 0x10000000}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080), 0x0, 0xa}}, 0x20) r2 = syz_open_dev$usb(&(0x7f0000005f80)='/dev/bus/usb/00#/00#\x00', 0x0, 0x8000) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000140)=0xc) setuid(r3) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000005fc0)) 14:36:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local={0x11}}, 0xfedf) 14:36:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xfffffeffffffffff, 0x80) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400, 0x0) setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000080), 0x4) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0xffffffffffffffff, 0x1, {0x7, 0x1b, 0x7f, 0x400, 0x0, 0x8, 0x2, 0x1}}, 0x50) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:36:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5429, &(0x7f0000000080)) 14:36:59 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) [ 377.327616] vhci_hcd: invalid port number 0 14:36:59 executing program 3: ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc008551c, &(0x7f0000001000)) socket$inet(0x2, 0x0, 0xffffffffffff7fff) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80004) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000080)=0x7fff) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB="040000001c000000020000000700000069001d0000000000000000000000000000000000"]) r1 = memfd_create(&(0x7f0000000100)='eth0trusted\x00', 0x4) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) 14:36:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local={0x5}}, 0xfedf) 14:36:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x540d, &(0x7f0000000080)) 14:36:59 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) [ 377.526292] vhci_hcd: invalid port number 0 14:36:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:59 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d7660") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:36:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0xc020660b, &(0x7f0000000080)) 14:36:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local={0x2}}, 0xfedf) 14:36:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x6, 0x100) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='scalable\x00', 0x9) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x7, 0x201) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000200)) syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x100000000, 0x0) write$P9_RREMOVE(r2, &(0x7f0000000040)={0x7, 0x7b, 0x4}, 0x7) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0xff, 0x401) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000000140)={0x101, 0x714, 0x7ff, 0x81, 0x100000001, 0x1, 0x1ff, 0x6, 0x33f, 0xd889, 0xb6, 0x6}) 14:36:59 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:59 executing program 0: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000feffff00"}, &(0x7f0000000700)}) 14:36:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x0, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8, 0x80003) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) 14:36:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5460, &(0x7f0000000080)) 14:36:59 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:36:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local={0x12}}, 0xfedf) 14:36:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:36:59 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x6, 0x10002) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000100)={{0xa, 0x4e24, 0x100, @ipv4={[], [], @remote}, 0x8000}, {0xa, 0x4e20, 0xa635, @mcast1, 0x45}, 0x7, [0x7, 0x8, 0x9, 0xff, 0x2, 0x3, 0x5, 0x19]}, 0x5c) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f0000000040)) 14:36:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000380)='/dev/snd/controlC#\x00', 0x0, 0xfffffffffffffffb) syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x7, 0x20000) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x280, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000280)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000000c0)={{0x4, 0x0, 0x6, 0x8000, 'syz1\x00'}, 0x6, 0x127, 0x7, r3, 0x9, 0x5, 'syz0\x00', &(0x7f0000000040)=['lo\x00', 'vboxnet0{{\x00', '\x00', "bc21d700", '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00'], 0x72, [], [0x10001, 0x400, 0x8, 0xffffffff]}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000003c0)={0x9, 0x3, 'client0\x00', 0x5, "f1755369d9a95625", "8d86b1eff9bc12b45dfe01767d2a82da8c65a7464fb1074915baaedefbd020e7", 0x5, 0x91}) 14:36:59 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:36:59 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local={0xa}}, 0xfedf) 14:36:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5414, &(0x7f0000000080)) 14:36:59 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:37:00 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x20000000, 0x101002) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x2) listen(r0, 0x2000000001) r3 = dup3(r0, r1, 0x80000) openat(r3, &(0x7f0000000000)='./file0\x00', 0x80200, 0x4) poll(&(0x7f0000000240)=[{r0}], 0x1, 0x4) 14:37:00 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0xfffffffffffffffd) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f00000000c0)) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x200, 0x8800) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000680)={0x7, 0x0, [{0x2, 0x3, 0x0, 0x0, @sint={0xfffffffffffffe01}}, {0x101, 0x7, 0x0, 0x0, @adapter={0x1, 0x56d1, 0x3, 0x0, 0x401}}, {0x5, 0x4, 0x0, 0x0, @msi={0x3, 0x3, 0x8001}}, {0x8, 0x3, 0x0, 0x0, @msi={0x0, 0x80, 0x2}}, {0xfffffffffffff5f4, 0x0, 0x0, 0x0, @adapter={0xffffffffffffffff, 0x7, 0x7, 0x0, 0x9}}, {0x10001, 0x8685ef6322d007ff, 0x0, 0x0, @adapter={0x100, 0xf5cd, 0x1d5, 0x0, 0x7}}, {0x7ff, 0x3, 0x0, 0x0, @msi={0x7, 0xfffffffffffffbff, 0x10000}}]}) r1 = request_key(&(0x7f0000000640)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='ppp0proc!\x00', 0xfffffffffffffff8) r2 = request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000200)='proc\x00', 0xfffffffffffffffb) r3 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000001040)="8aa4aacb463f32020c6f718c247254b81bc9debf553555d88ec231244b39c43a665da42698bf2a9a9b47544350ca6cd19be16b269d7f9f89daad182adeb162b3f7af73a0bee8e76641be2716a70acf1ed15314afec04d56abb7c5fecbad81973a08286233ca8d1b11ced71b8b0b1a3b6840416765a5929f799e94d4238e78b0852bd8140ee75480755bc872f3804a9af5319956a25accf7ce0fe2b0c0bfc0bfb4c58ff6bb4acb75c03c34cb0d188ef2b70362c6ba0dda49ac7f693f9cb7170556928434f1cb22d9f45345581a59c0daf7733165ae5c7a8fc111d81422705c2ef8b44991266c25e989a5f23d8fe0b44e5f02117abc94000a1dbcebfe30ea53ec55d651f0ca450b4274ab8e9deab74439f8b67a054428c190d1bfdec363f7688f5755ffc5d3cedf0dcfc39bd3566e97effbaff32663d8a83677b39f990b7f6af911705061de08dd47469ac47f675388b8c7d5bd19537a33bebfa12ecac408a594c48537dfbe89ebdf8630d703b3a64dc41385fbbf1942e1e251af596c8de8521e0440bb60570176bdd5498eac4bf636a6595b865c88fa07c921d106a652b0825916c6326e54a1b14b36174a5c012cc85f0bb27bdd7e7c1d5bc229400949f00de865f4ea0476a368a0ea0017f865b118cb9b5ffbb2323b62142314c60ed2f3ef849d3c37c9d3f50df5efd05bcb90b670b774f1ccd58bc720edc6f8e5035670ce03120e64b2793352e3947576d917c44f1bc461a5027ba52eb41df7190de427f025a872021a204726e64d935128b089c3ac0db77485ff4f62c3523b8d9594e36a494e24a1329b48020582cc185779beb8a2f57269cbbabd7f0bdbe1885ce551b2b1531282718d56aa5475b6c9e111f954375152612d3313e774cbb9431bc75fe9f439fdc8554b0bfc8b96d6f38e7924a56bdc2af3254850fa0468b6cc2c97522166114095823b07706bd5044261270fa27f7e4811313ea2085cf2fc1605f982c402673414afa80b972f1a9934cb14642b6638b75c4fba0932d24f8ed44b86de61ade773640aa996cbd76ffb97c98f2d8ed4b63692ea2490fcdc05c2811c7b6166257d04e88820474cf129fbc3e22bd573750674d51eb0537cff530db513802ec995ae48a6a6dd9e7f2317535f3357b502f7a8d9d7b066aad6f7f825a783990cb8cc505758aae22538fc6944791d864931c95b6f9f6dd6ab422fc27eba5931ddab1e7947733410b60fe3b76a8f7304398bbb77dd17c6aa4ee77c14448a2dd87a78ab8d512834ec0221b738578ca98a5f3fd5942d143c3de342744f267fff0dd42db6dc2c8cc12e159840af2d262380100ae94bde69e90c6eb6201d03df1679cca476f4a627dfbb1a718e9dda0fd9bc4756e78852e33df289edf8de7405c2a366823fb6f417b35120c7181bce3b1041bd84baf97dcfed04a15feda86691fa8a117695aaf894e78bd5ec22f3401e924943c071e7f8d266f44da30f1a6a051de229cdd979e0894bc22904670f7af61ac4a8ea64e5aa0ae8e23fb2a247dd6232274739a033e0a3bba574a0b6c853e1483a19c42dbe1d3cd4721312fff55e57cf8e545c43d7c0221891398ed6a53947c21d80f97f802e59fed94f7a2dead06863ab046f342d89e7481dc125350f657d3ab7ac16865301d717845ed573e2c5fd219cf4a88e0a456fbf744ff8c530577de9bdb687233935f8478ead217432278a1b7542c16dfbce4fe73fa6c33bd6e6e4e10fce03f5d965c35ae3a28f4d47d0f5d729a63b80d540b82e49ef1584cfc2027ee758d25e5aaa1950044b252fcee7fac262632395fb9efffaf4751d34f1ead7c90a2c80f4ddbc29d3898432ef2f195618151d4627a60c988a729b6cbda85f2519720d9ff680c6303355050b43f5d3b68cf92646d1d859b4a47fae07229ddfa6f15fb61befd6c6cac85ca240a68959706ca9904f3132a6956d2bbf043cebb94083a501d952b8aceed27c1e38e1d45a5cd7e0e716a7b826c5278d586281814a03c018ae0c080e053a5de2e4c92d5ab6e90647606876edabacc94ccd4b3ec85bd3737acece03fd99a3465ac66fbb43eaa0bfc768c5006aac6a090d8e90d8deb19a9e5500fe493b1394ea362712d7805104cd6b88699156f19aaf5d0559c7a4d48a7026698bdfbdf98ce6118c5354ab3fc10053150fae7ae77b4775ac9bc45cf51b8ad27d5c6f7455780c69ba953a38c0f14195aea3859af58be4fe0b12c0b93ee3025f7bf4de8a894a9b0460844b31be11d870043d46faa88981641c2d171220e3f83a7dd1405f9846b955df9baf893fca2112d64bb6d87bbe469e38c533f697ebb9b06a02373a150d99aacece1e96e0d722ad62eb433331e8b10b7085385cda751170db5c0c51b31fa7574ffaaa5ee37c3b07524e3fe8b1b0efc2839b91714bff23200b9e16841a802edc5fbd309d102b61c7c71295d41fb2447fd9ad04f48bacce30b0d8452eb49b434877bc7ba937253592c4352bc3126ba2bb6b5c223cfd8bbc69720ecc932e192f0e22794c9d91f62764dee786152da901260a5183ac29298ec6ea3838e4733ef9e4a710cdfbd71080cda3db482db44cb7a32ce67c112da2011f99a47ceb5e506f878d586aa1af061ca89b0cda2f32b7847a29e5541d343d0921425297f104089ddc993bfc0f1ce3566b5e13dcdf4f934b2e73149d9a60f8d44d93cb2973024f47dad117e44d4cb000d70691b833d29f8025178c767dcbfa59204d697c1973753dc606c47b0c13676e47c7bd246606679f556e628889f5e4cbe1234224f6b37a1d82133a14fae1b898c36f4cc0bd1987abede09ca8f9dda3c073a129cb32c2f22e62a8cb816f41539db55758807bf3ec289bbb093db5bcf73de3aecc4330fd704e978488b6d92603c31cd1e8fc784fe755ec496131a8711570e622e2d52fc863f3c785c5956e5cd8e0e79beaa2e55e7c4c88757fef7f96656591cbfd166bc29e72dec5f476dd25fb0d89793afb6e760dbd74e144fd3f3c1f2c76246abac3ac18d900dd7e9093de44801e30f0dd8f6c4b8e3a686d98e11a97c5d3b7bd8832574c0cf5c3ad5d5e9bb28e72f129562efee73d52eda1c113304f1f8cdbd51c418e6da3e0b952be248fa47a5d6d94541492f4d959e32dd69bf01b91ec29080cccbcbfcd6ef11dfbb85416f7923cea2a90b4fa1846574720bcd6ab68f2d59676d5cab3227abc0f2399c0f041335ee46d0d2b73fd9ee7d1286bd462d4690153aa439b9b43688665682131e7fe9031deb4f4e1ed42d223160a02c85923cebae87d16f87eb3b5a989fe51c3d2dd47f8c8b6e4d21ce3dd749aba211b2b19a1cfe119577091c4c444f1291694dc0839d6f7b038c76559de3ae8316458d2548f9845de1987a51bdffe2de29f3553840b6dba8fe86cad3ed362512ab9cd6d0b6a4679e550be6620254b36597001ab6579bf0feb4c7f0eff29ec4fbe7b009cc228276e04b47f6e7ebaab484370294cf7aa89a5f44ef902d7cdc60d6ff25188d5ccb00585682d20d17295df2cf38f5676fffff5e75c5ff7ee30738eb85cb128649b5d565d2cdffcd4e96e4b946d7ce7726f848dda49754ad839f7227cff941a209e9cdafdd0826939f45352ed3bc342aa9c1635c9b0bb2af0a1cb1eef5e05fdd911d266d5686f0f6f561c4810ebcb611c931b7ba5969ea45ca4424273cbf584567e61c3fb79d6f07f9c9905f9fb84a8e0610a405d1d43993d8fcd72b6d61dd2cfa6f62a28bda915fcde56f1c167682bff267884be2e00ed8155413fc653a4a649b6ee32da585c6074b49907cf7792ae549754e95f43ccfafea5a52aa5efd5773d2166c56badeae1edb52e531ce4661e264b5322dc8ac22ce3500fa8877f8f55b31c0544799067c213a53c66a14e36e19706cd9d84f1a3ab5b39d02ec0378b453a2ebd88383e986cfda1edd0dd441f3fab55b4b3855c141d4fc28b3f5ec4bc8c644e34a0cf58a7193b919cb556fc940e779e22f0ef90d56bb32d2239feed57653ec39412f276607889e1cfb6c733750d9005fc0cf78a628755b6ad3d04e7872453e23982516049b11f08a375dc34cc46b7a562ced126fdd49f676dc161de6e5901f1c4a493f8b88701b3e525a3e8be1c72f185bb1f1a9aebf82ff4510489b09bfaba1ee5aba69cb4932adf4f919a3681ee327fa527ac65303de95f5328daa2bc5014787e40cfe591bf33a6ce414acbeda1142916fe331334c028ad5fb765b6caadbe81213c542fde0cd18de237bcd3135110d6852ce63d96a5760657106ebb425bed70a2ee4357d3d0a660299ec1d2e0bef92ea8c4a73d9786d9f1ac4bede0d157c2c3c977f4ca82c7eb1adeaf8801a426fdf438ffc85b8ee7019efca7b87569db2793a8591cb1a6de48fc4f2d7e33ce552ec97b6f526e4ea90d607813886be998fd6c5929d7774760b40241aa71df0993e86003cbc6bb21fb163b1065705eecd55470509f538037d8f2ba5afd351108e528278e654f13a938ccc2c483a9e6973e55585b238e1a0a420478054ccffacd2f0625b48c3a5ae958d57d531b871e8d0050067b1f0e9ce4ccd6ef495ead83831d5a64d59b946913117cb65d945f2d8b94a73e41d4a7491003271a6ec72f91b5f126433f4f4d31b1335e015445ec631cca4f53a0dd8946a25b4e7dc5deb30d0fd9b0d6cfe6bb3e568975d116197439101215be9a46af991b4ca52d0e80b20c072cbae590444a21add2d793925e3eddc4c03c326dc9578a7f242368404aeeaa1c7098c5189a0cc81cd0ae77bc86b8c37ded12b6f1ba07bf5bf086de4dcc22b8074f5db0e1a54de4c709fbf3610656fe3357c8992f6c62eff6b387cb920d098ec67b08456ff164bf4354fb2cb93844aa4fdc894b2a04c5b79d8b08839a0808b7769d3a525fe596056fc0ff317cfcd3e45eaf58887724c5fb79f20c5b5997d7ddd632631ed7921cd33c4c3a985117bd068574e20ef8ce441b7ad6f6a25a46527b908d2a525d5c6f93413007782ef877bb8c60101beee5dc01d4ec129d92ee8c7e515f49e48b4d42b9849baa91a6a0716f6d14523f279fdc5cfd8a20441260d561da243b3cbccd69e45933fa04e474378cb9c5bddc21f474183e7f60c9db5f21422ee596b16f4406fe3fe53a8a88aef620f609f13ba35bf1d098c340d8068e59a972671bbb8ba8e79f4635e2232a3bad041fca031728e66fc0bca214ca92e917fb25314bf188e7c7e1c6f85284734a827359ee1ea0ae8cb30b9d8c514a5a377c12ff7ea604ba8c731460aafb70972263e2507409838c275cdd7623c340dbfecbdd78471f6c444deff7e6802d1cc0c9e6c4b32aa2c3ae3b2244bc2f0685958638c5fbbdac706447e1fd5447a9cb26042ce9a9e5e57585eb7679e545b80cc4eee334ea9295d4981930c56aba5965a92a0d097ea155b50389ea27866b7af3e05424048cb77937cabc08ef6e6a407dd8718e60f681528d01641679f7705e58cc1405fd8dd008ed2b6f26255b8c80b50fb7b23e1c6e49379ee89ab9498e62f0593bbbf60ab6d0c1226e9a585a1e9466e18ac779cb9825b6022b4202ebfb62f0a3ec37a420cabfa35b63180da38445a718d1b6eccb5163b9cae0723715fa5092cf61e49ef3e2a3374aab44dfec3bf41dc112faea001235a7ceb24bcf14f779393cb9da6b31ae24fb38ca0c13d76217245732fd0f3540d03ed8b72dd6bb7e5bbf29ca48ad4fbb7012b512fa65a9a75bbfcdea2088a284f8c6752a0f7f785ccb33c32ebb9386d448355b1be0e63ad48734f998d331e4432b1d096e14aac76705b2fd8107d33be1b03d57106", 0x1000, 0x0) keyctl$dh_compute(0x17, &(0x7f00000002c0)={r1, r2, r3}, &(0x7f0000000300)=""/193, 0xc1, &(0x7f00000004c0)={&(0x7f0000000400)={'cmac(xeta-generic)\x00'}, &(0x7f0000000440)="ed783c6650c9ab43aed2eee10d3afd970f757b9fef87d4143cf926d9debf7d2f760fb016e1a13a38c26039d5642c484e1922f44f41009a0daab191a6ce608510ebb87e27a52b6c7c6eca19e06c4e2836c1f9b46d6004764eb68e179dea6d197cf8", 0x61}) 14:37:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:37:00 executing program 0: bind$inet6(0xffffffffffffffff, &(0x7f00002aafe4)={0xa, 0x0, 0x0, @ipv4}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0xd522, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev, [0x0, 0x300000000000000, 0x0, 0x0, 0x4000000, 0x0, 0xe8030000]}}}, 0x98) 14:37:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local={0x8}}, 0xfedf) 14:37:00 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000040)=@ipv6_delroute={0x28, 0x19, 0x701, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc008551c, &(0x7f0000001000)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x101000, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0x3ff) 14:37:00 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:37:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5437, &(0x7f0000000080)) 14:37:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:37:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0xfffffffffff7fffc) socketpair(0x10, 0x4, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x80800) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x200, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x7fffffff, 0x200000) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000100)={r2, r3}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:37:00 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_WIE_OFF(r1, 0x7010) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)) r3 = syz_open_pts(r2, 0x0) r4 = syz_open_pts(r2, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x1b, 0x2, 0x9, "17d8205c488f13d2263d069d73d8adf8", "953ccea3ea58"}, 0x1b, 0x2) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x7) fcntl$setstatus(r3, 0x4, 0x42000) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000140)={0x1, @local}) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhci\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000c00)={0x4, &(0x7f00000007c0)=[{}, {}, {}, {}]}) r6 = dup2(r0, r2) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000000200), 0x2) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000180)={0x36, 0xc, 0x3, 0x1e, 0x0, 0x100, 0x1, 0xf2}) 14:37:00 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:37:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x4020940d, &(0x7f0000000080)) 14:37:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local={0x7}}, 0xfedf) 14:37:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:37:00 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040)) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc008551c, &(0x7f0000001000)) 14:37:00 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:37:00 executing program 0: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_WIE_OFF(r1, 0x7010) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000000c0)) r3 = syz_open_pts(r2, 0x0) r4 = syz_open_pts(r2, 0x0) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000080)={0x0, 0xfb, 0x1b, 0x2, 0x9, "17d8205c488f13d2263d069d73d8adf8", "953ccea3ea58"}, 0x1b, 0x2) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x7) fcntl$setstatus(r3, 0x4, 0x42000) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f00000001c0)) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000140)={0x1, @local}) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vhci\x00', 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000c00)={0x4, &(0x7f00000007c0)=[{}, {}, {}, {}]}) r6 = dup2(r0, r2) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000000200), 0x2) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000180)={0x36, 0xc, 0x3, 0x1e, 0x0, 0x100, 0x1, 0xf2}) 14:37:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:37:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5413, &(0x7f0000000080)) 14:37:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local={0x9}}, 0xfedf) 14:37:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x100, 0x50200) fremovexattr(r0, &(0x7f0000000000)=@random={'os2.', '/dev/snd/controlC#\x00'}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400, 0x8) r2 = dup3(r0, r0, 0x80000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="66baf80cb848128e8aef66bafc0cb800000080eff2650f01df66b8a0000f00d0b9800000c00f3235010000000f30c4e1cf11f7660f38818aba42c4733e653e64f246b9870a00000f320f30c744240000000000c744240200000080c7442406000000000f011c24", 0x67}], 0x1, 0x31, &(0x7f0000000180)=[@dstype3={0x7, 0x6}], 0x1) 14:37:00 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)) 14:37:00 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x3f000000000, 0x8000000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x3, 0x200) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0x516) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1) 14:37:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0xc0045878, &(0x7f0000000080)) 14:37:00 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local={0x300}}, 0xfedf) [ 379.076200] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 14:37:00 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = socket$inet6(0xa, 0x81000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") remap_file_pages(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x2, 0x18, 0x714, 0x100, "3e7181b878ae4108294c85448ba728c369d0e14d31df0ecb745eccafc663e3f9"}) r2 = semget$private(0x0, 0x3, 0x13e) semop(r2, &(0x7f0000000280)=[{0x0, 0x8}, {0x4, 0x0, 0xfffffffffffffffd}, {}], 0x3) semop(r2, &(0x7f00000000c0)=[{0x0, 0x1}], 0x1) 14:37:01 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)) 14:37:01 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x101100, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)=r0) r1 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000080)={{0x0, 0x6, 0x380000000000, 0x527ec3ed, 'syz1\x00', 0x8f}, 0x1, 0x231, 0x3, r1, 0x2, 0xffffffff, 'syz0\x00', &(0x7f0000000040)=['!$\x00', '\x00'], 0x4, [], [0x7, 0x0, 0x47, 0xffffffffffffff18]}) 14:37:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x540c, &(0x7f0000000080)) 14:37:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local={0xf}}, 0xfedf) 14:37:01 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$rds(0x15, 0x5, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r3 = dup2(r2, r1) r4 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000700), &(0x7f0000001a80)=0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000001b00)=@assoc_value={0x0, 0x1}, &(0x7f0000001b40)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000001b80)={0x9, 0x9, 0x4, 0x7fff, r7}, &(0x7f0000001bc0)=0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in=@rand_addr, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000100)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000540)=0xe8) r10 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) getsockopt$inet6_buf(r3, 0x29, 0x23, &(0x7f0000000a80)=""/4096, &(0x7f00000006c0)=0x1000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0xc) getresgid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)=0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000800)={0x0, 0x0, 0x0}, &(0x7f0000000840)=0xc) r16 = getgid() stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000940)=ANY=[@ANYBLOB="02000000010001000000000002000200", @ANYRES32=r5, @ANYBLOB="02000300", @ANYRES32=r6, @ANYBLOB="02000100", @ANYRES32=r8, @ANYBLOB="02000200", @ANYRES32=r9, @ANYBLOB="02000100", @ANYRES32=r10, @ANYBLOB="040003000000000008000400", @ANYRES32=r11, @ANYBLOB="08000500", @ANYRES32=r12, @ANYBLOB="08000500", @ANYRES32=r13, @ANYBLOB="08000400", @ANYRES32=r14, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r15, @ANYBLOB="08000200", @ANYRES32=r16, @ANYBLOB="08000300", @ANYRES32=r17, @ANYBLOB="10000200000000002000000000000000"], 0x84, 0x1) sched_setscheduler(r4, 0x5, &(0x7f0000000140)) inotify_add_watch(r3, &(0x7f0000001ac0)='./file0\x00', 0x1) connect$vsock_stream(r3, &(0x7f0000000080)={0x2, 0x0, 0x0, @reserved}, 0xf) 14:37:01 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000feffffff00"}, &(0x7f0000000700)}) 14:37:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)) 14:37:01 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x180, 0x0) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18, 0xfffffffffffffff5, 0x5, {0x8814}}, 0x18) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)={0x0, 0xff}, &(0x7f00000000c0)=0x8) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r2, 0x8, 0xb003, 0x1295, 0x6, 0x6}, 0x14) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:37:01 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x202, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x8912, &(0x7f0000000040)="153f6234488dd25d766070") mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, r0, 0x0) 14:37:01 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000feffff00"}, &(0x7f0000000700)}) 14:37:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5424, &(0x7f0000000080)) 14:37:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xf) [ 379.558392] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 14:37:01 executing program 5 (fault-call:3 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:37:01 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:01 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x0, 0x10, 0x5, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpgrp(0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/connector\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200)=0x3, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000003c00), &(0x7f00000041c0)=0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) io_setup(0xff, &(0x7f0000000000)=0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x10006) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x20001, 0x0) io_submit(r3, 0x1, &(0x7f0000001700)=[&(0x7f00000016c0)={0x0, 0x0, 0x0, 0x7, 0x3, r0, &(0x7f0000001640)="f757ecf2922b6bab02311e6d9e22c069b9da6787a8e35620fa4e225cfcb2c72c20f9c2dfda6fb2bb91b927c8967605966ec1d2cf383a398ce2498ecbe6d900ebc3db080a42f9d301138a18b416108384bafca9e7c1465c58c6a543", 0x5b}]) r4 = socket$inet_sctp(0x2, 0x8000001, 0x84) syz_open_dev$audion(&(0x7f0000000580)='/dev/audio#\x00', 0x9, 0x401) setsockopt$sock_timeval(r4, 0x1, 0x0, &(0x7f00000003c0)={0x0, 0x7530}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@mcast2, @in=@rand_addr}}, {{@in6=@ipv4}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) bind$inet(0xffffffffffffffff, &(0x7f0000dc9ff0)={0x2, 0x0, @rand_addr}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r6, 0x3) r7 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r7, 0xc008551c, &(0x7f0000001000)) accept$packet(r6, 0x0, &(0x7f0000000000)) 14:37:01 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f000062fff8)={0x0, 0x2000000001}, 0x8) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000b94ff8)={0x0, 0x0, 0x1000}, 0x8) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x90a}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00005c0fe0)={0x3}, 0x20) write(r1, &(0x7f0000ce6ffe)="da", 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080), 0x8) 14:37:01 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0x28) [ 379.786031] FAULT_INJECTION: forcing a failure. [ 379.786031] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 379.815851] CPU: 1 PID: 17595 Comm: syz-executor5 Not tainted 4.19.0-rc8+ #285 [ 379.823241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 379.832598] Call Trace: [ 379.835201] dump_stack+0x1c4/0x2b4 [ 379.838851] ? dump_stack_print_info.cold.2+0x52/0x52 [ 379.844065] ? debug_smp_processor_id+0x1c/0x20 [ 379.848751] ? perf_trace_lock_acquire+0x15b/0x800 [ 379.853703] should_fail.cold.4+0xa/0x17 [ 379.857783] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 379.862928] ? graph_lock+0x170/0x170 [ 379.866756] ? graph_lock+0x170/0x170 [ 379.870583] ? lock_acquire+0x1ed/0x520 [ 379.874584] ? __lock_is_held+0xb5/0x140 [ 379.878710] ? trace_event_raw_event_ext4__map_blocks_exit+0x3f0/0x560 [ 379.885411] ? ___might_sleep+0x1ed/0x300 [ 379.889564] ? lock_release+0x970/0x970 [ 379.893548] ? arch_local_save_flags+0x40/0x40 [ 379.898141] ? __mutex_lock+0x85e/0x1700 [ 379.902225] ? __might_sleep+0x95/0x190 [ 379.906228] __alloc_pages_nodemask+0x34b/0xde0 [ 379.910938] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 379.915975] ? find_held_lock+0x36/0x1c0 [ 379.920058] ? __might_fault+0x12b/0x1e0 [ 379.924133] ? lock_downgrade+0x900/0x900 [ 379.928299] ? lock_release+0x970/0x970 [ 379.932290] ? arch_local_save_flags+0x40/0x40 [ 379.936902] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 379.941985] ? usbfs_increase_memory_usage+0xf7/0x1d0 [ 379.947202] ? usbfs_decrease_memory_usage+0x30/0x30 [ 379.952326] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 379.957882] alloc_pages_current+0x10c/0x210 [ 379.962302] ? check_ctrlrecip+0xa9/0x320 [ 379.966474] __get_free_pages+0xc/0x40 [ 379.970375] proc_control+0x227/0xef0 [ 379.974196] ? proc_bulk+0xa70/0xa70 [ 379.977936] usbdev_do_ioctl+0x1eb8/0x3b50 [ 379.982189] ? processcompl_compat+0x680/0x680 [ 379.986799] ? mark_held_locks+0x130/0x130 [ 379.991061] ? graph_lock+0x170/0x170 [ 379.994871] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.000427] ? check_preemption_disabled+0x48/0x200 [ 380.005473] ? graph_lock+0x170/0x170 [ 380.009293] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.014842] ? check_preemption_disabled+0x48/0x200 [ 380.019890] ? debug_smp_processor_id+0x1c/0x20 [ 380.024579] ? perf_trace_lock_acquire+0x15b/0x800 [ 380.029527] ? perf_trace_lock+0x7a0/0x7a0 [ 380.033769] ? graph_lock+0x170/0x170 [ 380.037578] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 380.043134] ? graph_lock+0x170/0x170 [ 380.046941] ? _parse_integer+0x180/0x180 [ 380.051096] ? graph_lock+0x170/0x170 [ 380.054919] ? lock_release+0x970/0x970 [ 380.058919] ? find_held_lock+0x36/0x1c0 [ 380.063024] ? __fget+0x4aa/0x740 [ 380.066490] ? lock_downgrade+0x900/0x900 [ 380.070812] ? check_preemption_disabled+0x48/0x200 [ 380.075863] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 380.081666] ? kasan_check_read+0x11/0x20 [ 380.085854] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 380.091142] ? rcu_bh_qs+0xc0/0xc0 [ 380.094723] ? __fget+0x4d1/0x740 [ 380.098200] ? ksys_dup3+0x680/0x680 [ 380.101927] ? find_held_lock+0x36/0x1c0 [ 380.106007] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 380.110956] usbdev_ioctl+0x25/0x30 [ 380.114592] ? usbdev_compat_ioctl+0x30/0x30 [ 380.119008] do_vfs_ioctl+0x1de/0x1720 [ 380.122913] ? __lock_is_held+0xb5/0x140 [ 380.126998] ? ioctl_preallocate+0x300/0x300 [ 380.131418] ? __fget_light+0x2e9/0x430 [ 380.135409] ? fget_raw+0x20/0x20 [ 380.138874] ? __sb_end_write+0xd9/0x110 [ 380.142949] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 380.148500] ? fput+0x130/0x1a0 [ 380.151794] ? do_syscall_64+0x9a/0x820 [ 380.155778] ? do_syscall_64+0x9a/0x820 [ 380.159764] ? lockdep_hardirqs_on+0x421/0x5c0 [ 380.164376] ? security_file_ioctl+0x94/0xc0 [ 380.168814] ksys_ioctl+0xa9/0xd0 [ 380.172284] __x64_sys_ioctl+0x73/0xb0 [ 380.176211] do_syscall_64+0x1b9/0x820 [ 380.180119] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 380.185508] ? syscall_return_slowpath+0x5e0/0x5e0 [ 380.190453] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.195321] ? trace_hardirqs_on_caller+0x310/0x310 [ 380.200345] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 380.205368] ? prepare_exit_to_usermode+0x291/0x3b0 [ 380.210398] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.215264] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.220471] RIP: 0033:0x457569 14:37:01 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:37:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5415, &(0x7f0000000080)) [ 380.223668] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 380.242677] RSP: 002b:00007f7ac647bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.250397] RAX: ffffffffffffffda RBX: 00007f7ac647bc90 RCX: 0000000000457569 [ 380.257673] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000004 [ 380.264944] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 380.272218] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ac647c6d4 [ 380.279544] R13: 00000000004bf6ac R14: 00000000004cf598 R15: 0000000000000005 14:37:02 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:02 executing program 5 (fault-call:3 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:37:02 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0x100) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x8003, 0x261) r1 = socket$packet(0x11, 0x3, 0x300) r2 = fcntl$dupfd(r1, 0x0, r1) write$cgroup_subtree(r2, &(0x7f0000000000)={[{0x2b, 'cpu'}, {0x2b, 'cpu'}, {0x0, 'memory'}, {0x2b, 'rdma'}, {0x2b, 'io'}, {0x2b, 'memory'}, {0x0, 'memory'}]}, 0x2c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) openat$cgroup_ro(r2, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x0, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x8f, @remote}, 0xc2ac) 14:37:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x545d, &(0x7f0000000080)) [ 380.493931] FAULT_INJECTION: forcing a failure. [ 380.493931] name failslab, interval 1, probability 0, space 0, times 0 [ 380.517092] CPU: 1 PID: 17632 Comm: syz-executor5 Not tainted 4.19.0-rc8+ #285 [ 380.524494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 380.533861] Call Trace: [ 380.536481] dump_stack+0x1c4/0x2b4 [ 380.540149] ? dump_stack_print_info.cold.2+0x52/0x52 [ 380.545372] ? graph_lock+0x170/0x170 [ 380.549208] should_fail.cold.4+0xa/0x17 [ 380.553329] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 380.558446] ? graph_lock+0x170/0x170 [ 380.558478] ? graph_lock+0x170/0x170 [ 380.558502] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.558522] ? check_preemption_disabled+0x48/0x200 [ 380.558567] ? check_preemption_disabled+0x48/0x200 [ 380.558589] ? find_held_lock+0x36/0x1c0 [ 380.558618] ? proc_control+0x831/0xef0 [ 380.566231] ? ___might_sleep+0x1ed/0x300 14:37:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x540e, &(0x7f0000000080)) [ 380.566261] ? arch_local_save_flags+0x40/0x40 [ 380.566281] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 380.566296] ? find_held_lock+0x36/0x1c0 [ 380.566325] __should_failslab+0x124/0x180 [ 380.566347] should_failslab+0x9/0x14 [ 380.566366] kmem_cache_alloc_trace+0x2d7/0x750 [ 380.566387] ? lock_release+0x970/0x970 [ 380.624481] ? arch_local_save_flags+0x40/0x40 [ 380.629095] usb_control_msg+0xc4/0x4e0 [ 380.633089] ? usb_start_wait_urb+0x370/0x370 [ 380.637600] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 14:37:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5450, &(0x7f0000000080)) [ 380.643167] proc_control+0x99b/0xef0 [ 380.646989] ? proc_bulk+0xa70/0xa70 [ 380.650747] usbdev_do_ioctl+0x1eb8/0x3b50 [ 380.655044] ? processcompl_compat+0x680/0x680 [ 380.659654] ? mark_held_locks+0x130/0x130 [ 380.663913] ? graph_lock+0x170/0x170 [ 380.667737] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.673288] ? check_preemption_disabled+0x48/0x200 [ 380.673303] ? graph_lock+0x170/0x170 [ 380.673323] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 380.682134] ? check_preemption_disabled+0x48/0x200 [ 380.682159] ? debug_smp_processor_id+0x1c/0x20 [ 380.682177] ? perf_trace_lock_acquire+0x15b/0x800 [ 380.682205] ? perf_trace_lock+0x7a0/0x7a0 [ 380.682224] ? graph_lock+0x170/0x170 [ 380.682248] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 380.682266] ? graph_lock+0x170/0x170 [ 380.719733] ? _parse_integer+0x180/0x180 [ 380.723891] ? graph_lock+0x170/0x170 [ 380.727712] ? lock_release+0x970/0x970 [ 380.731725] ? find_held_lock+0x36/0x1c0 [ 380.735840] ? __fget+0x4aa/0x740 [ 380.739319] ? lock_downgrade+0x900/0x900 14:37:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) [ 380.743490] ? check_preemption_disabled+0x48/0x200 [ 380.748535] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 380.754339] ? kasan_check_read+0x11/0x20 [ 380.758504] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 380.763812] ? rcu_bh_qs+0xc0/0xc0 [ 380.767376] ? __fget+0x4d1/0x740 [ 380.767402] ? ksys_dup3+0x680/0x680 [ 380.767418] ? find_held_lock+0x36/0x1c0 [ 380.767444] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 380.767478] usbdev_ioctl+0x25/0x30 [ 380.767497] ? usbdev_compat_ioctl+0x30/0x30 [ 380.774665] do_vfs_ioctl+0x1de/0x1720 [ 380.774682] ? __lock_is_held+0xb5/0x140 [ 380.774715] ? ioctl_preallocate+0x300/0x300 [ 380.774734] ? __fget_light+0x2e9/0x430 [ 380.774751] ? fget_raw+0x20/0x20 [ 380.774783] ? __sb_end_write+0xd9/0x110 [ 380.774806] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 380.774820] ? fput+0x130/0x1a0 [ 380.774838] ? do_syscall_64+0x9a/0x820 [ 380.774858] ? do_syscall_64+0x9a/0x820 [ 380.832440] ? lockdep_hardirqs_on+0x421/0x5c0 [ 380.837054] ? security_file_ioctl+0x94/0xc0 [ 380.841508] ksys_ioctl+0xa9/0xd0 [ 380.844994] __x64_sys_ioctl+0x73/0xb0 [ 380.848909] do_syscall_64+0x1b9/0x820 [ 380.852811] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 380.858201] ? syscall_return_slowpath+0x5e0/0x5e0 [ 380.863150] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.868014] ? trace_hardirqs_on_caller+0x310/0x310 [ 380.873048] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 380.878074] ? prepare_exit_to_usermode+0x291/0x3b0 [ 380.883094] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 380.887927] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 380.893102] RIP: 0033:0x457569 [ 380.896282] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 380.915333] RSP: 002b:00007f7ac647bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 380.923041] RAX: ffffffffffffffda RBX: 00007f7ac647bc90 RCX: 0000000000457569 [ 380.930324] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000004 [ 380.937590] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 380.944870] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ac647c6d4 [ 380.952132] R13: 00000000004bf6ac R14: 00000000004cf598 R15: 0000000000000005 14:37:02 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xc0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x35, 0xb, 0x5, 0x8, 0x1, 0x8, 0x0, 0xee}) 14:37:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x80045432, &(0x7f0000000080)) 14:37:02 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f000062fff8)={0x0, 0x2000000001}, 0x8) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000b94ff8)={0x0, 0x0, 0x1000}, 0x8) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x90a}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00005c0fe0)={0x3}, 0x20) write(r1, &(0x7f0000ce6ffe)="da", 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080), 0x8) 14:37:02 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:02 executing program 5 (fault-call:3 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:37:02 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'teql0\x00', {0x2, 0x4e23, @multicast1}}) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'tunl0\x00', {0x2, 0x4e22, @multicast1}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x3, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000380)=""/4096) sync() [ 381.090597] FAULT_INJECTION: forcing a failure. [ 381.090597] name failslab, interval 1, probability 0, space 0, times 0 [ 381.156728] CPU: 0 PID: 17656 Comm: syz-executor5 Not tainted 4.19.0-rc8+ #285 [ 381.164136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.173495] Call Trace: [ 381.176101] dump_stack+0x1c4/0x2b4 [ 381.179764] ? dump_stack_print_info.cold.2+0x52/0x52 [ 381.184979] ? kernel_text_address+0x79/0xf0 [ 381.189419] should_fail.cold.4+0xa/0x17 [ 381.193506] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 381.198632] ? save_stack+0xa9/0xd0 [ 381.202273] ? save_stack+0x43/0xd0 [ 381.205918] ? kmem_cache_alloc_trace+0x152/0x750 [ 381.210794] ? usb_control_msg+0xc4/0x4e0 [ 381.214954] ? proc_control+0x99b/0xef0 [ 381.218938] ? usbdev_do_ioctl+0x1eb8/0x3b50 [ 381.223387] ? usbdev_ioctl+0x25/0x30 [ 381.227204] ? do_vfs_ioctl+0x1de/0x1720 [ 381.231278] ? ksys_ioctl+0xa9/0xd0 [ 381.234914] ? __x64_sys_ioctl+0x73/0xb0 [ 381.239218] ? do_syscall_64+0x1b9/0x820 [ 381.243297] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.248685] ? find_held_lock+0x36/0x1c0 [ 381.252789] ? ___might_sleep+0x1ed/0x300 14:37:02 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:37:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5421, &(0x7f0000000080)) 14:37:03 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x78be9db, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0x400, 0x200, 0x400, 0x7ff}, 'syz0\x00', 0x1d}) 14:37:03 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) [ 381.256954] ? arch_local_save_flags+0x40/0x40 [ 381.261562] ? rcu_lockdep_current_cpu_online+0x1f0/0x2d0 [ 381.267112] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 381.272413] __should_failslab+0x124/0x180 [ 381.276699] should_failslab+0x9/0x14 [ 381.280567] __kmalloc+0x2d4/0x760 [ 381.284123] ? rcu_read_lock_sched_held+0x108/0x120 [ 381.289159] ? kmem_cache_alloc_trace+0x353/0x750 [ 381.294040] ? usb_alloc_urb+0x24/0x50 [ 381.297963] ? arch_local_save_flags+0x40/0x40 [ 381.302561] usb_alloc_urb+0x24/0x50 14:37:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5412, &(0x7f0000000080)) 14:37:03 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x800000000008, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000000000)) [ 381.306292] usb_control_msg+0x1dd/0x4e0 [ 381.310370] ? usb_start_wait_urb+0x370/0x370 [ 381.314882] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 381.320440] proc_control+0x99b/0xef0 [ 381.324274] ? proc_bulk+0xa70/0xa70 [ 381.328013] usbdev_do_ioctl+0x1eb8/0x3b50 [ 381.332266] ? processcompl_compat+0x680/0x680 [ 381.336897] ? mark_held_locks+0x130/0x130 [ 381.341149] ? graph_lock+0x170/0x170 [ 381.344974] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 381.350646] ? check_preemption_disabled+0x48/0x200 [ 381.355674] ? graph_lock+0x170/0x170 [ 381.359524] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 381.365074] ? check_preemption_disabled+0x48/0x200 [ 381.370122] ? debug_smp_processor_id+0x1c/0x20 [ 381.374804] ? perf_trace_lock_acquire+0x15b/0x800 [ 381.379762] ? perf_trace_lock+0x7a0/0x7a0 [ 381.384027] ? graph_lock+0x170/0x170 [ 381.387840] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 381.393386] ? graph_lock+0x170/0x170 [ 381.397201] ? _parse_integer+0x180/0x180 [ 381.401364] ? graph_lock+0x170/0x170 14:37:03 executing program 3: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xffffffffffffff9c}, 0x10) fcntl$setlease(r0, 0x400, 0x2) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc008551c, &(0x7f0000001000)) 14:37:03 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) [ 381.405180] ? lock_release+0x970/0x970 [ 381.409178] ? find_held_lock+0x36/0x1c0 [ 381.413257] ? __fget+0x4aa/0x740 [ 381.416728] ? lock_downgrade+0x900/0x900 [ 381.420893] ? check_preemption_disabled+0x48/0x200 [ 381.425928] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 381.431747] ? kasan_check_read+0x11/0x20 [ 381.435910] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 381.441206] ? rcu_bh_qs+0xc0/0xc0 [ 381.444795] ? __fget+0x4d1/0x740 [ 381.448265] ? ksys_dup3+0x680/0x680 [ 381.452010] ? find_held_lock+0x36/0x1c0 [ 381.456098] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 381.461053] usbdev_ioctl+0x25/0x30 [ 381.464693] ? usbdev_compat_ioctl+0x30/0x30 [ 381.469122] do_vfs_ioctl+0x1de/0x1720 [ 381.473024] ? __lock_is_held+0xb5/0x140 [ 381.477102] ? ioctl_preallocate+0x300/0x300 [ 381.481554] ? __fget_light+0x2e9/0x430 [ 381.485543] ? fget_raw+0x20/0x20 [ 381.489019] ? __sb_end_write+0xd9/0x110 [ 381.493106] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 381.498671] ? fput+0x130/0x1a0 [ 381.501963] ? do_syscall_64+0x9a/0x820 [ 381.505951] ? do_syscall_64+0x9a/0x820 [ 381.509942] ? lockdep_hardirqs_on+0x421/0x5c0 [ 381.514532] ? security_file_ioctl+0x94/0xc0 [ 381.518961] ksys_ioctl+0xa9/0xd0 [ 381.522446] __x64_sys_ioctl+0x73/0xb0 [ 381.526388] do_syscall_64+0x1b9/0x820 [ 381.530298] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 381.535671] ? syscall_return_slowpath+0x5e0/0x5e0 [ 381.535689] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 381.535710] ? trace_hardirqs_on_caller+0x310/0x310 [ 381.535729] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 381.535755] ? prepare_exit_to_usermode+0x291/0x3b0 [ 381.535780] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 381.535807] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 381.535820] RIP: 0033:0x457569 [ 381.535839] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 381.545598] RSP: 002b:00007f7ac647bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 381.545617] RAX: ffffffffffffffda RBX: 00007f7ac647bc90 RCX: 0000000000457569 [ 381.545628] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000004 [ 381.545638] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 381.545649] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ac647c6d4 [ 381.545659] R13: 00000000004bf6ac R14: 00000000004cf598 R15: 0000000000000005 14:37:03 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:37:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x80045432, &(0x7f0000000080)) 14:37:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0xc0045878, &(0x7f0000000080)) 14:37:03 executing program 5 (fault-call:3 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:37:03 executing program 2: openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0xffffffffffffff2c, @link_local}, 0xffffff57) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0xc0000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000280)={0x4, &(0x7f0000000100)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000300)={r3, &(0x7f0000000380)=""/134}) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f00000001c0)=""/143) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ppp\x00', 0x12000, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000140)={0x4000, 0x2000}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x800, 0x0) prctl$setfpexc(0xc, 0x10000) connect$l2tp(r5, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x2, 0x3, 0x3, {0xa, 0x4e21, 0x6, @mcast2, 0x5}}}, 0x32) 14:37:03 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000000000)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x8353, 0x2000) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101000, 0x0) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x3, 0x2008c0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x20, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r2, r3, 0x0, 0x2}, 0x10) 14:37:03 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) [ 381.928621] FAULT_INJECTION: forcing a failure. [ 381.928621] name failslab, interval 1, probability 0, space 0, times 0 [ 381.958475] CPU: 0 PID: 17712 Comm: syz-executor5 Not tainted 4.19.0-rc8+ #285 [ 381.965863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 381.975232] Call Trace: 14:37:03 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541f, &(0x7f0000000080)) [ 381.977850] dump_stack+0x1c4/0x2b4 [ 381.981519] ? dump_stack_print_info.cold.2+0x52/0x52 [ 381.986753] should_fail.cold.4+0xa/0x17 [ 381.990839] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 381.995957] ? debug_smp_processor_id+0x1c/0x20 [ 382.000647] ? perf_trace_lock_acquire+0x15b/0x800 [ 382.005593] ? mark_held_locks+0x130/0x130 [ 382.009840] ? graph_lock+0x170/0x170 [ 382.013664] ? find_held_lock+0x36/0x1c0 [ 382.017757] ? find_held_lock+0x36/0x1c0 [ 382.021867] ? ___might_sleep+0x1ed/0x300 14:37:03 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x80045432, &(0x7f0000000080)) [ 382.026030] ? arch_local_save_flags+0x40/0x40 [ 382.030645] ? usb_hcd_submit_urb+0x460/0x20a0 [ 382.035244] ? _raw_spin_unlock_irq+0x27/0x80 [ 382.039771] __should_failslab+0x124/0x180 [ 382.044029] should_failslab+0x9/0x14 [ 382.047879] __kmalloc+0x2d4/0x760 [ 382.051438] ? kasan_check_write+0x14/0x20 [ 382.055705] ? do_raw_spin_lock+0xc1/0x200 [ 382.059966] ? usb_hcd_submit_urb+0x6fc/0x20a0 [ 382.064585] usb_hcd_submit_urb+0x6fc/0x20a0 [ 382.069025] ? usb_create_hcd+0x40/0x40 [ 382.073019] ? do_syscall_64+0x1b9/0x820 [ 382.077095] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 382.082487] ? __x64_sys_ioctl+0x73/0xb0 [ 382.086574] ? do_syscall_64+0x1b9/0x820 [ 382.086591] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 382.086613] ? find_held_lock+0x36/0x1c0 [ 382.086637] ? __lockdep_init_map+0x105/0x590 [ 382.086664] ? __lockdep_init_map+0x105/0x590 [ 382.086709] usb_submit_urb+0x893/0x14e0 [ 382.109148] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 382.109182] usb_start_wait_urb+0x13d/0x370 [ 382.109205] ? sg_clean+0x240/0x240 14:37:03 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) [ 382.126503] usb_control_msg+0x332/0x4e0 [ 382.130591] ? usb_start_wait_urb+0x370/0x370 [ 382.130610] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 382.130641] proc_control+0x99b/0xef0 [ 382.130668] ? proc_bulk+0xa70/0xa70 [ 382.148225] usbdev_do_ioctl+0x1eb8/0x3b50 [ 382.152510] ? processcompl_compat+0x680/0x680 [ 382.157139] ? mark_held_locks+0x130/0x130 [ 382.161402] ? graph_lock+0x170/0x170 [ 382.165227] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 382.170786] ? check_preemption_disabled+0x48/0x200 [ 382.175832] ? graph_lock+0x170/0x170 [ 382.179676] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 382.185234] ? check_preemption_disabled+0x48/0x200 [ 382.190278] ? debug_smp_processor_id+0x1c/0x20 [ 382.194963] ? perf_trace_lock_acquire+0x15b/0x800 [ 382.199922] ? perf_trace_lock+0x7a0/0x7a0 [ 382.204181] ? graph_lock+0x170/0x170 [ 382.207999] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 382.213556] ? graph_lock+0x170/0x170 [ 382.217372] ? _parse_integer+0x180/0x180 [ 382.221540] ? graph_lock+0x170/0x170 [ 382.225360] ? lock_release+0x970/0x970 14:37:04 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:37:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0xc0189436, &(0x7f0000000080)) [ 382.229373] ? find_held_lock+0x36/0x1c0 [ 382.233473] ? __fget+0x4aa/0x740 [ 382.236949] ? lock_downgrade+0x900/0x900 [ 382.241317] ? check_preemption_disabled+0x48/0x200 [ 382.246357] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 382.252180] ? kasan_check_read+0x11/0x20 [ 382.252204] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 382.252235] ? rcu_bh_qs+0xc0/0xc0 [ 382.252263] ? __fget+0x4d1/0x740 [ 382.261711] ? ksys_dup3+0x680/0x680 [ 382.261728] ? find_held_lock+0x36/0x1c0 [ 382.261759] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 382.281472] usbdev_ioctl+0x25/0x30 [ 382.285120] ? usbdev_compat_ioctl+0x30/0x30 [ 382.289540] do_vfs_ioctl+0x1de/0x1720 [ 382.293451] ? __lock_is_held+0xb5/0x140 [ 382.293484] ? ioctl_preallocate+0x300/0x300 [ 382.293501] ? __fget_light+0x2e9/0x430 [ 382.293519] ? fget_raw+0x20/0x20 [ 382.309411] ? __sb_end_write+0xd9/0x110 [ 382.313520] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 382.319062] ? fput+0x130/0x1a0 [ 382.319082] ? do_syscall_64+0x9a/0x820 [ 382.319100] ? do_syscall_64+0x9a/0x820 14:37:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x80045432, &(0x7f0000000080)) [ 382.319118] ? lockdep_hardirqs_on+0x421/0x5c0 [ 382.319142] ? security_file_ioctl+0x94/0xc0 [ 382.339323] ksys_ioctl+0xa9/0xd0 [ 382.342839] __x64_sys_ioctl+0x73/0xb0 [ 382.346747] do_syscall_64+0x1b9/0x820 [ 382.350676] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 382.356768] ? syscall_return_slowpath+0x5e0/0x5e0 [ 382.361715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 382.361744] ? trace_hardirqs_on_caller+0x310/0x310 [ 382.371594] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 382.376640] ? prepare_exit_to_usermode+0x291/0x3b0 [ 382.376672] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 382.376709] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 382.376723] RIP: 0033:0x457569 [ 382.376749] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 382.376759] RSP: 002b:00007f7ac647bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 382.376792] RAX: ffffffffffffffda RBX: 00007f7ac647bc90 RCX: 0000000000457569 14:37:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$FIONREAD(0xffffffffffffffff, 0x80045432, &(0x7f0000000080)) 14:37:04 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400480, 0x0) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000040)={0x7f, 0x9, 0x9}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0xf4, 0x1, 0xffff, 0x84f9, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r3, 0x137e}, 0xc) [ 382.428866] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000004 [ 382.436139] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 382.443416] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ac647c6d4 [ 382.450692] R13: 00000000004bf6ac R14: 00000000004cf598 R15: 0000000000000005 14:37:04 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:04 executing program 5 (fault-call:3 fault-nth:4): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:37:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getpeername(r0, &(0x7f0000000100)=@can, &(0x7f0000000180)=0x80) getpeername(r0, &(0x7f0000000200)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000280)=0xfffffe93) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"33000000008000000000001f000800", r1}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0xfedf) 14:37:04 executing program 3: request_key(&(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f00000001c0)='/^+\x00', 0xfffffffffffffffc) r0 = request_key(&(0x7f0000000000)='syjkaller\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='/dev/snd/controlC#\x00', 0xfffffffffffffffa) keyctl$clear(0x7, r0) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc008551c, &(0x7f0000001000)) r2 = fcntl$getown(r1, 0x9) sched_rr_get_interval(r2, &(0x7f00000000c0)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r3, &(0x7f0000000200)="c7b088386c3e23ff0984da38b4140725344c70dc653af349b71db6fc5f79ec2cf194917c0f5a50e57a4a27aeb42844f07e4e3f030ba94a779ad6e3bbec819fe4851bdd8a2ea697558313a6ce9e8a97f756abc7e706e452b06beaf2239e78abc0ab7e5bead79b84f5bc81f35d83dff28f1131de3b391e12bf8378e9042777d08935dcf879fb58d736b19cbced199981ce59369591a1cf46943dc7180637e19535907d11b838fd2e0316", 0xa9, 0x4040, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 14:37:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x540b, &(0x7f0000000080)) 14:37:04 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x80045432, &(0x7f0000000080)) [ 382.675577] vhci_hcd: invalid port number 0 14:37:04 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:37:04 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r0, 0x80045432, &(0x7f0000000080)) 14:37:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3}) 14:37:04 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket(0x2, 0x800, 0x80000000) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)={@dev, @dev, 0x0}, &(0x7f0000000200)=0xc) accept$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000800)={'ip_vti0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000880)=0x14, 0x80000) accept4$packet(0xffffffffffffff9c, &(0x7f0000000900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000940)=0x14, 0x80800) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000002ac0)={0x0, @multicast1, @broadcast}, &(0x7f0000002b00)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002b80)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@broadcast}}, &(0x7f0000002c80)=0xe8) getpeername$packet(0xffffffffffffffff, &(0x7f0000002cc0)={0x11, 0x0, 0x0}, &(0x7f0000002d00)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000003380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000033c0)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f0000003400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003440)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003480)={{{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000003580)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000035c0)={@remote, @remote, 0x0}, &(0x7f0000003600)=0xc) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000003700)={@dev, @dev, 0x0}, &(0x7f0000003740)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000008000)={{{@in6=@ipv4={[], [], @loopback}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@dev}}, &(0x7f0000008100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000008ac0)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000008bc0)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000008c40)={0x0, @loopback, @remote}, &(0x7f0000008c80)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000008e00)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000008f80)={'team0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000008fc0)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f00000090c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000009100)={{{@in=@rand_addr, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000009200)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000009980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000009940)={&(0x7f0000009240)={0x700, r2, 0x300, 0x70bd29, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x168, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffff001}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r7}, {0xb4, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x800000000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}]}}, {{0x8, 0x1, r9}, {0x164, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x3c, 0x4, [{0x33b, 0x2, 0xffffffffffff8001, 0x63}, {0xb7e, 0x5, 0x1f, 0x8001}, {0x3, 0x100000000, 0x8, 0xffffffff}, {0xe4, 0x0, 0x1, 0x2}, {0x8f, 0x7fffffff, 0x6c1, 0x3}, {0x1, 0x5cf7a50, 0x6, 0x1}, {0x7, 0x9, 0x4, 0x95}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x81}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x144, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffffc1}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r18}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x2, 0x3ff, 0x0, 0x6f94}, {0x0, 0x7, 0x1, 0x8}, {0x4, 0x1, 0xffffffffffff512b, 0x2}]}}}]}}, {{0x8, 0x1, r19}, {0x84, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0xc2}}, {0x8, 0x6, r20}}}]}}, {{0x8, 0x1, r21}, {0x128, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff67c3}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8001}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x100000000}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x200}}}]}}]}, 0x700}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0', [{0x20, '/dev/snd/controlC#\x00'}, {0x20, ')-'}, {0x20, '/dev/snd/controlC#\x00'}], 0xa, "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"}, 0x132) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:37:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5411, &(0x7f0000000080)) 14:37:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) chmod(&(0x7f0000000000)='./file0\x00', 0x38) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x5, @link_local}, 0xffe9) [ 382.866481] vhci_hcd: invalid port number 0 14:37:04 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r0, 0x80045432, &(0x7f0000000080)) 14:37:04 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:04 executing program 3: inotify_init1(0x80800) r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd4, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5fd8b241}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x8, 0x10}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x4}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xacb8}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x8010}, 0x10) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) flock(r0, 0x2) 14:37:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0189436, &(0x7f0000000000)={0xa3}) 14:37:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5451, &(0x7f0000000080)) 14:37:04 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x3, 0x183, @random="2c503b857926"}, 0xfffffffffffffea7) 14:37:04 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:37:04 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r0, 0x80045432, &(0x7f0000000080)) 14:37:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x540f, &(0x7f0000000080)) 14:37:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x41045508, &(0x7f0000000000)={0xa3}) 14:37:05 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x4d2840, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e20, 0x2, @loopback, 0x800}, {0xa, 0x4e24, 0x10000, @ipv4, 0x9}, 0x8000, [0xfffffffffffffc01, 0x1, 0x100000000, 0xe012, 0x200, 0x2, 0xfffffffffffffffa, 0x4]}, 0x5c) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x400) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000040)) getsockname$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc008551c, &(0x7f0000001000)) 14:37:05 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @remote}, &(0x7f0000000100)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000030e9b2596e6c69610100", r1}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0xfedf) r3 = getpgid(0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r3) 14:37:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x80045432, &(0x7f0000000080)) 14:37:05 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x550b, &(0x7f0000000000)={0xa3}) 14:37:05 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername(r1, &(0x7f0000000100)=@in={0x2, 0x0, @rand_addr}, &(0x7f0000000180)=0x80) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200002, 0x0) ioctl$RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000040)={0x23, 0x25, 0x15, 0xa, 0xb, 0x401, 0x4, 0xde, 0x1}) 14:37:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541d, &(0x7f0000000080)) 14:37:05 executing program 2: r0 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @link_local}, 0xfedf) 14:37:05 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:05 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080)={0x3}, 0x4) r2 = getpid() ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)=r2) 14:37:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045505, &(0x7f0000000000)={0xa3}) 14:37:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5409, &(0x7f0000000080)) 14:37:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x80045432, &(0x7f0000000080)) 14:37:05 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x1) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1a) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f00000000c0)=r1) r2 = socket$packet(0x11, 0xfffffffffffffffe, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x80000, 0x0) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e22, 0xe323, @local, 0x1000}}, 0x190, 0x2, 0x0, "ae929e156182ca225637a648a3dbec84f17be229eadf062fb50213b4e5360a12f3fe7228c30eae82c5d38a1e3d97499782c58ba3cbfaf47b57674745de627f72ed3ccb03438224b0f6ba61e3a0665287"}, 0xd8) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @link_local}, 0xfedf) [ 383.645682] usb usb9: usbfs: interface 0 claimed by hub while 'syz-executor5' sets config #163 14:37:05 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:05 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x10000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000040)) syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000000080)) 14:37:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x80045432, &(0x7f0000000080)) 14:37:05 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0) ioctl$DRM_IOCTL_GET_MAP(r2, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x255a, 0x0, 0x42, &(0x7f0000ff7000/0x4000)=nil, 0xffffffffffffffff}) 14:37:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x802c550a, &(0x7f0000000000)={0xa3}) 14:37:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x2, &(0x7f0000000080)) 14:37:05 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:05 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x8000, 0x111000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffff9c, 0x0, 0x13, &(0x7f0000000000)='/dev/snd/controlC#\x00', 0xffffffffffffffff}, 0x30) ptrace$poke(0x4, r1, &(0x7f00000000c0), 0x7f) r2 = dup2(r0, r0) write$FUSE_INTERRUPT(r2, &(0x7f0000000100)={0x10, 0x0, 0x5}, 0x10) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x40000000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000000080)) 14:37:05 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80400, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'veth1_to_bond\x00', 0x4}) r1 = socket$packet(0x11, 0x3, 0x300) munlockall() ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0xfedf) 14:37:05 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5425, &(0x7f0000000080)) 14:37:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x4004551e, &(0x7f0000000000)={0xa3}) 14:37:05 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r1, 0x80045432, &(0x7f0000000080)) 14:37:05 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:37:05 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) r1 = syz_open_dev$audion(&(0x7f0000001040)='/dev/audio#\x00', 0x80000001, 0xa0101) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f0000001080)) flistxattr(r0, &(0x7f0000000000)=""/4096, 0x1000) 14:37:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5441, &(0x7f0000000080)) 14:37:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x8001, 0x1a1101) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0xfedf) 14:37:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r1, 0x80045432, &(0x7f0000000080)) 14:37:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185502, &(0x7f0000000000)={0xa3}) 14:37:06 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:37:06 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) userfaultfd(0x80800) socketpair$inet_sctp(0x2, 0x80000000000001, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x3def}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x800, 0x6}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x1, 0x10}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x82, @loopback, 0xffffffffffff0000}}, 0x0, 0x401, 0x2, 0xffffffff, 0x2}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0xfffffffffffffffe}}, 0xcf, 0x3}, &(0x7f0000000440)=0x90) mount(&(0x7f0000000a00)=@sg0='/dev/sg0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='aufs\x00', 0x2000, &(0x7f0000000ac0)='\x00') getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000900)={r3, 0x80, "917e90052b97797ff3dc56263a8e6a76884db94bb034fdf91eade14da72fbe7ddd74c23c9877ace617537811d3ee409ca52f8cfd1fa57910323d1e1560f983106dc0ac4ebdba39d43ee52d933a1056bd3f60020ddd2ca29b78fccb41deb4e4ec42c48661c03cb4bc74eafebb7dda38b510f6a04295b76d4886a7a1f742fd0140"}, &(0x7f00000009c0)=0x88) sendmsg$inet_sctp(r1, &(0x7f00000005c0)={&(0x7f0000000040)=@in={0x2, 0x4e24}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)="6a33d6d30b3b613e3722691c48a0a331b032cfbe46b0dd114b11b75bcf67216611c2d2a0ecee8830f4d79f1542b0432cc72828a290266d64", 0x38}], 0x1, &(0x7f0000000480)=[@sndrcv={0x30, 0x84, 0x1, {0x200, 0x8, 0x2, 0xff, 0x2, 0x200000, 0xfc, 0x40000000000000, r3}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x1, 0x7, 0x3, r4}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x20a, 0x2a, 0x8001, r5}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x7c}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x5}}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @sndinfo={0x20, 0x84, 0x2, {0xf47, 0x4, 0x43, 0x10001, r6}}, @dstaddrv6={0x20}, @sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffe00, 0x3, 0x2, 0x40, 0x8, 0x2, 0x5, 0x7ff, r7}}], 0x128, 0x40000}, 0x8000) alarm(0x5) pipe(&(0x7f0000000600)={0xffffffffffffffff}) execveat(r8, &(0x7f0000000640)='./file0\x00', &(0x7f00000007c0)=[&(0x7f0000000680)='\x00', &(0x7f00000006c0)='/dev/snd/controlC#\x00', &(0x7f0000000700)='self#&-::nodev]{\x00', &(0x7f0000000740)='\x00', &(0x7f0000000780)='/dev/snd/controlC#\x00'], &(0x7f00000008c0)=[&(0x7f0000000800)='!wlan1eth0vmnet1em0em0proc\x00', &(0x7f0000000840)='/dev/snd/controlC#\x00', &(0x7f0000000880)='/dev/snd/controlC#\x00'], 0x800) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:37:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5410, &(0x7f0000000080)) 14:37:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) prctl$getname(0x10, &(0x7f0000000000)=""/15) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"a76000006b96470526d9d81b00", 0x0}) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {r3, 0x4}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) truncate(&(0x7f0000000040)='./file0\x00', 0x8) r4 = dup2(r0, r0) write$UHID_CREATE2(r2, &(0x7f00000001c0)={0xb, 'syz0\x00', 'syz1\x00', 'syz0\x00', 0x36, 0x9, 0x8, 0xffffffff, 0x5, 0x10001, "c2d870d614c5a6bbcb9e3c0b1377aa6004a8fede29a30f5937a4bf63b18eabf675ccd96f419863f1b013c4b112acc875d6c6d6701904"}, 0x14e) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) 14:37:06 executing program 3: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x400002) ioctl$TCXONC(r0, 0x540a, 0x7fffffff) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc008551c, &(0x7f0000001000)) 14:37:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000000)={0xa3}) 14:37:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5416, &(0x7f0000000080)) 14:37:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r1, 0x80045432, &(0x7f0000000080)) 14:37:06 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:06 executing program 3: r0 = accept$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfffffffffffffc01, 0x40) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000080)={r0, 0x1, 0x9, "b25a2d6d1e66a387d0c7fae634a43123b43970c6c3bb14cf76e4bc18f4e0b5bc8b88e3e6cdb8a4bf3130d285102f777141092af494fb0bca40ff6e1d73c7283946f2ca37d348cdd34785ca93fc37c79edc6413ede6a4fa8a8abb88c3f79c59cb4d"}) r2 = socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x2, 0x0) ioctl$FICLONE(r1, 0x40049409, r2) r3 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x1f, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc008551c, &(0x7f0000001000)) 14:37:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5452, &(0x7f0000000080)) 14:37:06 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000feffffff00"}, &(0x7f0000000700)}) 14:37:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x80045432, &(0x7f0000000080)) 14:37:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc020660b, &(0x7f0000000000)={0xa3}) 14:37:06 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000380)=""/4096) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80000, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f0000001380)=""/4096, &(0x7f0000000100)=0x1000) r3 = dup3(r0, r0, 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000001c0)={{0x1ff, 0x1}, 'port1\x00', 0x22, 0x4, 0xacee4d0, 0x7, 0x400, 0x2, 0x7, 0x0, 0x1}) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x100000001, 0x1) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000180)=0x2, 0x9, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0xffffffffffffffe8, @dev={[], 0x14}}, 0x10) fsetxattr$security_ima(r3, &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=@sha1={0x1, "fa0ef8e16f94480ce70d484466669d894f1afaf2"}, 0x15, 0x0) 14:37:06 executing program 3: r0 = request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)='/dev/snd/controlC#\x00', 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, &(0x7f00000000c0)='ceph\x00', 0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000100)=0x1, 0x8) r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc008551c, &(0x7f0000001000)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() fchown(r1, r3, r4) 14:37:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x4008550d, &(0x7f0000000000)={0xa3}) 14:37:06 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:37:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x80045440, &(0x7f0000000080)) 14:37:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541f, &(0x7f0000000080)) 14:37:06 executing program 2: r0 = socket$packet(0x11, 0x2000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) r2 = memfd_create(&(0x7f0000000000)="6c6f000000000200", 0x5) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000040)=0xffffffffffffffc0, 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x400, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:37:06 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:37:06 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x40085511, &(0x7f0000000000)={0xa3}) 14:37:06 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x6, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x0, 0xc000) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000140)={0xff}, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) fsetxattr$security_smack_entry(r1, &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000180)='/dev/snd/controlC#\x00', 0x13, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) ioctl$TCSETA(r1, 0x5406, &(0x7f00000001c0)={0x9, 0xffffffff, 0x3, 0x3ff, 0x9, 0xc000000000000, 0x7, 0x4, 0x1000, 0x401}) 14:37:06 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541f, &(0x7f0000000080)) 14:37:06 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x4, 0x3, 0x8a, 0x3, 0x3, 0x7, 0x26c, 0x40, 0x2e9, 0x6, 0x100, 0x38, 0x2, 0x4, 0x6, 0x8000}, [{0x7, 0x0, 0xffff, 0xfffffffffffffff9, 0x0, 0x1, 0x8f22, 0x40}], "b5b758d3ff7f72fce316b9afc0e2c8d0aa4053662697a61e8b560eb2476c41e5e8e8d089d3f5b1dc5c9c564dd1af53562db192a2db366292a0c15b69d725c2e9a6470c05008dfd9b189afb5c27a7b33b90ab7e53678ce212ddeacb26378df200854ce9ddadd7cabf8b7ccf51e761", [[], [], [], [], [], [], [], []]}, 0x8e6) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f00000000c0)=""/182) 14:37:06 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000300)='/dev/adsp#\x00', 0x0, 0x80) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000380)=[0x6, 0xa3]) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dsp\x00', 0x1, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1d, &(0x7f0000000280)={@loopback}, &(0x7f00000002c0)=0x14) r2 = socket$packet(0x11, 0x3, 0x300) r3 = fcntl$getown(r2, 0x9) syz_open_procfs(r3, &(0x7f0000000200)='statm\x00') accept4$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14, 0x80800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @loopback}, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={"6c6f000000000200", r4}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @link_local}, 0xfedf) socket$inet6_udp(0xa, 0x2, 0x0) 14:37:07 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:37:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541f, &(0x7f0000000080)) 14:37:07 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4000, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="018009000800810100000000000000084a0b442cc97d848f24df33b02809f021928100ff00"], &(0x7f0000000080)=0x1a) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={r2, 0x9}, &(0x7f0000000100)=0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:37:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) write$FUSE_LSEEK(r2, &(0x7f0000000040)={0x18, 0xfffffffffffffffe, 0x2, {0x5}}, 0x18) 14:37:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc018554c, &(0x7f0000000000)={0xa3}) 14:37:07 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x801, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x7, 0x6, [0x9, 0x8a6c, 0x912, 0x3, 0x7, 0x0]}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000003c0)={r2, 0x100, 0x1}, &(0x7f0000000400)=0x8) socket$kcm(0x29, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @link_local}, 0xfedf) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000500), &(0x7f0000000540)=0x40) ioctl$TCXONC(r1, 0x540a, 0x100000000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffff9, 0x200080) r5 = gettid() bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0x50, &(0x7f0000000440)}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000140)={{0x6, 0x3, 0x7fff, 0x81, 'syz0\x00', 0x6}, 0x5, 0x2, 0x0, r5, 0x9, 0x59, 'syz1\x00', &(0x7f00000000c0)=["6c6f000000000200", '\x00', "6c6f000000000200", '\x00', "6574683047504c286b657972696e675b766d6e65743073656c696e75782a7d84656d316b657972696e67292d00", "6c6f000000000200", '\x00', '{self#\x00', "6c6f000000000200"], 0x57, [], [0x0, 0x4, 0x3, 0xffffffffffff8cba]}) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @broadcast}, &(0x7f0000000280)=0xc) 14:37:07 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:37:07 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x4004550c, &(0x7f0000000000)={0xa3}) 14:37:07 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) flock(r0, 0x0) 14:37:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$FIONREAD(0xffffffffffffffff, 0x541f, &(0x7f0000000080)) 14:37:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x50000) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f00000000c0)={"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"}) r2 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000040)={0x6, 0x3}) 14:37:07 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:37:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$FIONREAD(0xffffffffffffffff, 0x541f, &(0x7f0000000080)) 14:37:07 executing program 3: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc008551c, &(0x7f0000001000)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x7, 0x3, 0xcb, 0x3, 0x6}, &(0x7f0000000180)=0x98) munlockall() write$FUSE_WRITE(r0, &(0x7f0000000280)={0x18, 0x0, 0x8, {0x101}}, 0x18) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @local}}}, 0x84) 14:37:07 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) pread64(r0, &(0x7f0000000000)=""/117, 0x75, 0x0) 14:37:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x184}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000180)) 14:37:07 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:37:07 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$FIONREAD(0xffffffffffffffff, 0x541f, &(0x7f0000000080)) 14:37:07 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000180)='wlan1vmnet0]posix_acl_accessposix_acl_access)\x00', 0x2) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000001c0)={[0x200, 0x5c0, 0x35, 0xffff, 0x7, 0x401, 0x400, 0x1, 0x8, 0x80000001, 0x19, 0x1, 0x4, 0x40, 0xf3, 0x8], 0x1000, 0x400c0}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) clone(0x0, &(0x7f0000000000), &(0x7f0000008000), &(0x7f0000000ffc), &(0x7f0000000000)) prctl$intptr(0x24, 0x2) prctl$intptr(0x24, 0xf91) signalfd4(r0, &(0x7f00000000c0)={0x40000008f7}, 0x8, 0x800) r2 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x80) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) syz_open_pts(r0, 0x1000001) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x14001, 0x0) ioctl$KVM_GET_CLOCK(r3, 0x8030ae7c, &(0x7f0000000080)) accept$alg(r3, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) 14:37:08 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000180)="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") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='coredump_filter\x00') getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={r3, 0x9, 0x3}, 0x8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0x101a1) 14:37:08 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000480)='/dev/null\x00', 0x80282, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000500)={0x34, 0x0, &(0x7f00000004c0)}) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000380)=0x1c, 0x80000000080000) fsetxattr$trusted_overlay_upper(r1, &(0x7f00000003c0)='trusted.overlay.upper\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="0408b9927ffb1df4f5aec7d20c560f5ce8528903a14df668ba0d6325b2ac13ed11734cbdd7cca28e4046283f4d05708cd5de9833213d81ed28b53700008001e3667777151469f2699676bbf75a76ac816c67538912ad23de508c6f92d55626518cde9407d8dcc6872988809c00d27a630470e9c90116efe35dd87ee0e365"], 0x4e, 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x8000, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc008551c, &(0x7f0000001000)) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:systemd_logind_sessions_t:s0\x00', 0x1e8, 0x1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r2, 0x10, &(0x7f00000000c0)={&(0x7f0000000180)=""/252, 0xfc, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r2, 0x10, &(0x7f00000002c0)={&(0x7f0000000080)=""/33, 0x21, r4}}, 0x10) 14:37:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8004550f, &(0x7f0000000000)={0xa3}) 14:37:08 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541f, &(0x7f0000000080)) 14:37:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x200, 0x9, 0x7fffffff, 0x9, 0x8, 0x79d, 0x8, 0x0, 0xfffffffffffffffd, 0x401, 0x3, 0x401}) 14:37:08 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) r1 = semget$private(0x0, 0x0, 0x0) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000000000)=""/120) 14:37:08 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000feffff00"}, &(0x7f0000000700)}) 14:37:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541f, &(0x7f0000000080)) 14:37:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045519, &(0x7f0000000000)={0xa3}) 14:37:08 executing program 2: r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ethernet={0x0, @broadcast}, &(0x7f0000000140)=0x80, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e21, 0x100000000, @loopback, 0x6}}, 0x80000000, 0x8001}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x10001, 0xfffffffffffffff8, 0xc, 0x80, 0x0, 0x1, 0x400, 0x389e, 0x0}, &(0x7f00000002c0)=0x20) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000380)={r1, 0x3, 0x380000000, 0x0, 0x6, 0x5, 0x100000000, 0x1, {r2, @in={{0x2, 0x4e23, @loopback}}, 0xffffffffc7a60037, 0x0, 0x3f, 0x2, 0x5949}}, &(0x7f0000000300)=0xb0) r3 = socket$packet(0x11, 0xffffffffffffffff, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r4, 0x3, 0x6, @link_local}, 0xfedf) lsetxattr$security_smack_entry(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='security.SMACK64MMAP\x00', &(0x7f00000004c0)="6c6f000000000200", 0x8, 0x1) r5 = dup(r3) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f0000000040)={r6, 0x4}) 14:37:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0xffffffffffffffff) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x100000001) 14:37:08 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x180, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc008551c, &(0x7f00000001c0)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0) write$P9_RRENAME(r2, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7) 14:37:08 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541f, &(0x7f0000000080)) 14:37:08 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:37:08 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x6, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000140)) syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x0, 0x200) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0xfedf) sysfs$2(0x2, 0xfffffffffffffffa, &(0x7f0000000000)=""/20) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20100, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23, 0x80000000, @mcast1, 0x20}, 0x1c) 14:37:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8008550e, &(0x7f0000000000)={0xa3}) 14:37:08 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) r1 = socket$key(0xf, 0x3, 0x2) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000000)={r1, 0x0, 0x9, 0x3afddf0, 0x573}) 14:37:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000000)={0x7, 0x3f}) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000040)) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000004c0)={0x7, 0x3}) socketpair(0x1, 0x800, 0x7, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000380)={0x5, 0x10, 0xfa00, {&(0x7f0000000100), r4, 0x2}}, 0x18) ioctl$KDGKBMETA(r3, 0x4b62, &(0x7f0000000480)) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r5) 14:37:08 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r0, 0x541f, &(0x7f0000000080)) 14:37:08 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x3, 0x6, @link_local}, 0x10) 14:37:08 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:37:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0045878, &(0x7f0000000000)={0xa3}) 14:37:08 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r0, 0x541f, &(0x7f0000000080)) 14:37:08 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x40000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x0, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:37:08 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc018550a, &(0x7f0000000000)={0xa3}) 14:37:08 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = dup2(r0, r0) write$smack_current(r1, &(0x7f0000000000)='+/selinuxppp1@!eth0#user\x00', 0x19) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 14:37:09 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:37:09 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) recvfrom$packet(r0, &(0x7f0000000000)=""/14, 0xe, 0x40000040, &(0x7f0000000040)={0x11, 0xf6, r1, 0x1, 0x7f8000000000000, 0x6, @remote}, 0x14) 14:37:09 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r0, 0x541f, &(0x7f0000000080)) 14:37:09 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') socket$rds(0x15, 0x5, 0x0) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r2, 0xb00, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x91}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x5}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 14:37:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185504, &(0x7f0000000000)={0xa3}) 14:37:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541f, &(0x7f0000000080)) 14:37:09 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20181, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 14:37:09 executing program 3: socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000140)) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000040)=0x182a, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc008551c, &(0x7f0000001000)) 14:37:09 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x3, 0x6, @link_local}, 0x10) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x80, 0x402000) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000080)) 14:37:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541f, &(0x7f0000000080)) 14:37:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc018557a, &(0x7f0000000000)={0xa3}) 14:37:09 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sysinfo(&(0x7f00000009c0)=""/141) socket$alg(0x26, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)="2e2f6367726f75702e63707500609fb8ab74b0f30ef7048e470929889a2605dc92ffa1937e27b84b5d3511d2e95cccfd6656e1e43257e640083198770e5dab3441b5", 0x200002, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x8}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}, 0xb1a}}}, &(0x7f0000000600)=0x84) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000380)=0x40, 0x12) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300), &(0x7f0000000340)=0x30) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000100), 0x2) keyctl$join(0x1, &(0x7f00000005c0)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vsock\x00', 0x0, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xb, 0xffffffffffffffff, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@ethernet={0x0, @dev={[], 0x16}}, {&(0x7f0000000680)=""/183, 0xb7}, &(0x7f0000000300), 0xfffffffffffffffd}, 0xa0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz1\x00', 0x1ff) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xfffffffffffffffb, 0x6, 0x9, 0x3, 0x20, 0x4, 0x0, 0x0, 0x7, 0x0, 0x7}, 0xb) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000800)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47744279}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 14:37:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541f, &(0x7f0000000080)) 14:37:09 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x3, 0x0) pread64(r0, &(0x7f0000000000)=""/212, 0xd4, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000200)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) dup2(r0, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x240400, 0x4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000140)="d7ea17ae1dd04c903123127929e541df", 0x10) 14:37:09 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:09 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) userfaultfd(0xbf3705466ffffb03) 14:37:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x5514, &(0x7f0000000000)={0xa3}) 14:37:09 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:09 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=0x0) syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x5, 0x500) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000080)={{0x6, 0x7, 0x10001, 0x6, 'syz0\x00', 0xfff}, 0x1, 0x8, 0x6, r1, 0x5, 0x2, 'syz0\x00', &(0x7f0000000040)=['\x00', ':bdeveth1$\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '[eth0!\x00'], 0x39, [], [0x1, 0x7fff, 0x1, 0x7]}) 14:37:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r1, 0x541f, &(0x7f0000000080)) 14:37:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0045878, &(0x7f0000000000)={0xa3}) 14:37:09 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r1, 0x541f, &(0x7f0000000080)) 14:37:09 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = gettid() syz_open_procfs(r4, &(0x7f0000000000)='net/dev_snmp6\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @link_local}, 0xfedf) 14:37:10 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000feffffff00"}, &(0x7f0000000700)}) 14:37:10 executing program 3: syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000003c00)='/dev/vsock\x00', 0x42, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000003a80)=[{{&(0x7f0000000080)=@ethernet={0x0, @local}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/162, 0xa2}], 0x1, &(0x7f0000000200)=""/247, 0xf7, 0x7}, 0x6}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000300)=""/58, 0x3a}, {&(0x7f0000000340)=""/112, 0x70}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/32, 0x20}, {&(0x7f0000001400)=""/180, 0xb4}, {&(0x7f00000014c0)=""/32, 0x20}, {&(0x7f0000001500)=""/77, 0x4d}], 0x7, &(0x7f0000001600)=""/35, 0x23, 0xffffffffffffffc1}, 0xf0}, {{&(0x7f0000001640)=@ethernet={0x0, @remote}, 0x80, &(0x7f0000001900)=[{&(0x7f00000016c0)=""/183, 0xb7}, {&(0x7f0000001780)=""/54, 0x36}, {&(0x7f00000017c0)=""/153, 0x99}, {&(0x7f0000001880)=""/77, 0x4d}], 0x4, &(0x7f0000001940)=""/66, 0x42, 0x400}, 0xc3e}, {{&(0x7f00000019c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002a40)=[{&(0x7f0000001a40)=""/4096, 0x1000}], 0x1, &(0x7f0000002a80)=""/4096, 0x1000}}], 0x4, 0x40000000, &(0x7f0000003b80)) 14:37:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8004551a, &(0x7f0000000000)={0xa3}) 14:37:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r1, 0x541f, &(0x7f0000000080)) 14:37:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x18) getsockopt$inet6_dccp_buf(r1, 0x21, 0x0, &(0x7f0000000040)=""/23, &(0x7f00000000c0)=0x17) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 14:37:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0x47, "58d5591675cc5162946fa65f4b43b7397358d02b1e16f23956074179bc840126b6df60e148e1e97390b8a43d61e76a9f299aec8b73e71c144ee71bc6d08ef30b3447f10b972a5d"}) accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14, 0x80000) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@mcast2}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000002c0)=0xe8) recvmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000380)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000400)=""/220, 0xdc}], 0x1, &(0x7f0000000500)=""/73, 0x49, 0x1}, 0x10042) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'\x00', r2}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @link_local}, 0xfedf) [ 388.326389] Unknown ioctl -1073195748 14:37:10 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) [ 388.355823] Unknown ioctl -1073195748 14:37:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185503, &(0x7f0000000000)={0xa3}) 14:37:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541f, &(0x7f0000000080)) 14:37:10 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xc4000, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 14:37:10 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x8, 0x200) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0x9251, {{0xa, 0x4e22, 0x3f, @empty, 0x7ff}}}, 0x88) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc008551c, &(0x7f0000001000)) 14:37:10 executing program 2: r0 = socket$packet(0x11, 0x5, 0x300) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x400, 0x0) ioctl$KVM_NMI(r1, 0xae9a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0xffff) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0xfedf) 14:37:10 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:10 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000040)='net/dev\x00') r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc008551c, &(0x7f0000001000)) 14:37:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x5421, &(0x7f0000000000)={0xa3}) 14:37:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541f, &(0x7f0000000080)) 14:37:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x200802) r2 = memfd_create(&(0x7f0000000240)='selfvmnet1\x00', 0x7) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x7}, &(0x7f00000002c0)=0x8) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000040)=0xfffffffffffffffe) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000300)={r3, 0xff}, &(0x7f0000000340)=0x8) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:37:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={"6f0000000100", r1}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0xfedf) 14:37:10 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:37:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541f, &(0x7f0000000080)) 14:37:10 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x2, 0x2, 0x4, 0x0, 'syz1\x00', 0x2}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:37:10 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185548, &(0x7f0000000000)={0xa3}) 14:37:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) r3 = getegid() lchown(&(0x7f0000000000)='./file0\x00', r2, r3) fchmod(r1, 0x84) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000001c0)={0x0, 0x3a, 0x9, 0x540, 0x3, 0x9, 0x4, 0x5832, 0x3, 0x22}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:37:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x20000, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:37:10 executing program 0: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) getpeername$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc008551c, &(0x7f0000001000)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x7, 0x3, 0xcb, 0x3, 0x6}, &(0x7f0000000180)=0x98) munlockall() write$FUSE_WRITE(r0, &(0x7f0000000280)={0x18, 0x0, 0x8, {0x101}}, 0x18) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e24, @local}}}, 0x84) 14:37:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x4004550d, &(0x7f0000000000)={0xa3}) 14:37:10 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:37:10 executing program 3: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7fffffff, 0x800) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000000080)) dup3(r0, r0, 0x80000) 14:37:10 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x184}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000180)) 14:37:10 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x3e, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x3, 0x6, @link_local}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bond_slave_0\x00', 0x200}) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x8, 0x2) ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000100)) 14:37:10 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) socketpair$inet6(0xa, 0x3, 0x6, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, 0xfffffffffffffffe) setsockopt$inet6_tcp_buf(r3, 0x6, 0xe, &(0x7f00000000c0)="a3c0b7c714bd0037748f1610536535e648cb2e7228c1c477fb005221b39dbf03b5274faf4fb19a7abfa8c0d1d752e88b637ea519d240c5d057f54ea7b1a46a046afd005acdb96b4a69b2d7e0a0fd54bc7af3e6c940b408ce07e77e6c2e1b03b13d9f5fbeb00cffc897d4180778832aff8dec37f22e4117a7862ec2b85727a25fbda0c8fd50300c0ae8d26b61671b108bb0936cfccf5a53aade9452d09e20868b80ea641ca76ed49ef5276217b143c4683058", 0xb2) 14:37:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x5450, &(0x7f0000000000)={0xa3}) 14:37:11 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:37:11 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000000000)) 14:37:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x184}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000180)) 14:37:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x113, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000100)={0x15, 0x110, 0xfa00, {r3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @loopback}}}, 0x118) 14:37:11 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:37:11 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) write$P9_RRENAMEAT(r1, &(0x7f0000000000)={0x7, 0x4b, 0x2}, 0x7) getsockopt$inet_int(r1, 0x0, 0x10000003f, &(0x7f0000000240), &(0x7f0000000080)=0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0xe42, 0x2) waitid(0x3, r2, &(0x7f0000000100), 0x0, &(0x7f0000000140)) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000280)={0x671f, {{0x2, 0x4e24, @remote}}, 0x0, 0x5, [{{0x2, 0x4e21, @multicast1}}, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e22}}, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e24, @loopback}}]}, 0x310) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 14:37:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x184}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000180)) 14:37:11 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:37:11 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x1, 0x40000) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x101, 0x0) r2 = dup3(r0, r0, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f00000000c0)=0x54) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) close(r0) r3 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x8000, 0x101000) getsockopt$inet6_buf(r3, 0x29, 0xfb, &(0x7f0000000240)=""/4096, &(0x7f0000001240)=0x1000) recvmsg$kcm(r1, &(0x7f0000002500)={&(0x7f00000012c0)=@nfc, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001340)=""/166, 0xa6}, {&(0x7f0000001400)=""/42, 0x2a}, {&(0x7f0000001440)=""/126, 0x7e}], 0x3, &(0x7f0000001500)=""/4096, 0x1000, 0x6}, 0x21) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000001280)=0xfff, 0x4) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000140), &(0x7f00000001c0)=0x68) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000000100)) 14:37:11 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:37:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x2}) 14:37:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) fcntl$dupfd(r0, 0x406, r0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000180)) 14:37:11 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000000100)) socketpair(0x3, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) write$FUSE_DIRENT(r1, &(0x7f0000000080)={0x94a8379979294c20, 0xffffffffffffffda, 0x2, [{0x3, 0x0, 0x13, 0xe7, '/dev/snd/controlC#\x00'}, {0x5, 0x7, 0x0, 0x200000000000005}]}, 0x58) 14:37:11 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x2000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@rand_addr, @multicast2, 0x0}, &(0x7f0000000180)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f00000002c0)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000380)={{{@in=@broadcast, @in6=@mcast2, 0x4e22, 0x8, 0x4e24, 0x8, 0xa, 0x80, 0x20, 0x29, r2, r4}, {0x2, 0xcd98, 0x3, 0x0, 0x4, 0xfffe000000, 0x1, 0x18000000000}, {0x1, 0x8000, 0x7, 0x7}, 0x3, 0x6e6bbc, 0x2, 0x0, 0x3, 0x1}, {{@in6=@local, 0x4d3, 0xff}, 0xa, @in, 0x0, 0x1, 0x3, 0x9, 0x100, 0x8, 0x7f}}, 0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bcsf0\x00', r3}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @link_local}, 0xfedf) 14:37:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8008551d, &(0x7f0000000000)={0xa3}) 14:37:11 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:11 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0105502, &(0x7f0000000000)={0xa3}) 14:37:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) fcntl$dupfd(r0, 0x406, r0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000180)) 14:37:11 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) wait4(r1, &(0x7f0000000040), 0xc, &(0x7f0000000080)) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x204982, 0x0) r3 = geteuid() accept$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000340)=0xe8) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)=@report={0x184, 0x20, 0x900, 0x70bd2b, 0x25dfdbfb, {0x32, {@in6=@dev={0xfe, 0x80, [], 0xd}, @in6=@remote, 0x4e22, 0x0, 0x4e21, 0x2, 0x2, 0x80, 0x20, 0x0, 0x0, r3}}, [@replay_esn_val={0x38, 0x17, {0x7, 0x70bd26, 0x70bd2a, 0x70bd2b, 0x70bd2c, 0x740a, [0x8001, 0x1, 0x98, 0x100000000, 0x1, 0x38, 0x100]}}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, [], 0xb}, @in=@broadcast, 0xa, 0xa1de, 0xc5c}}, @ipv4_hthresh={0x8, 0x3, {0x3, 0x7}}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd25, 0x9}}, @proto={0x8, 0x19, 0x2b}, @policy_type={0xc, 0x10, {0x1}}, @policy={0xac, 0x7, {{@in=@loopback, @in=@multicast2, 0x4e20, 0x2a74, 0x4e24, 0xae, 0xa, 0xa0, 0x20, 0x88, r4, r5}, {0x9, 0xfffffffffffffffe, 0x200000000, 0x2, 0x8, 0x7, 0x5, 0x7}, {0x3, 0x4, 0x7, 0x1}, 0x2, 0x6e6bb9, 0x0, 0x1, 0x1}}]}, 0x184}}, 0x48881) 14:37:11 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) 14:37:11 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xa8, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20010000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @link_local}, 0xfedf) 14:37:12 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x4000000000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, 0xfffffffffffffffe) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x2) 14:37:12 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185568, &(0x7f0000000000)={0xa3}) 14:37:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000180)) 14:37:12 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000feffff00"}, &(0x7f0000000700)}) 14:37:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x5, 0x2, 0xf13, 0x9}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:37:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x5452, &(0x7f0000000000)={0xa3}) 14:37:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$KDDISABIO(r0, 0x4b37) r1 = syz_open_pts(r0, 0x10000) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:37:12 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000000000)=""/4096, 0x1000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:37:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000180)) 14:37:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) 14:37:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x4) r3 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000380)="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", 0x1000, 0xfffffffffffffffc) r4 = request_key(&(0x7f00000000c0)='encrypted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="6c6f000000000200", 0xfffffffffffffff8) keyctl$negate(0xd, r3, 0xff, r4) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:37:12 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:37:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045503, &(0x7f0000000000)={0xa3}) 14:37:12 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr}}, &(0x7f00000000c0)=0x1c, 0x800) accept(r1, 0x0, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x20000000000000, 0x800) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f0000000040)=0x773) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000240)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000280)={@loopback, 0x20, r3}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e20, 0x101, @dev={0xfe, 0x80, [], 0x1c}, 0x3f}, @in={0x2, 0x4e24}], 0x4c) 14:37:12 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000180)) 14:37:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8008551c, &(0x7f0000000000)={0xa3}) 14:37:12 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:37:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @remote}, 0x10) 14:37:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) 14:37:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0105512, &(0x7f0000000000)={0xa3}) 14:37:12 executing program 0: ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) [ 390.920170] device lo entered promiscuous mode 14:37:12 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x8000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x400000000000000}, &(0x7f0000000100)=0xffffffffffffffaa) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x3, 0xffffffffffff0aab, 0x2, 0x2, 0x4}, 0x14) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000000040)) finit_module(r0, &(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1) [ 390.950335] device lo left promiscuous mode [ 390.981612] device lo entered promiscuous mode 14:37:12 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) [ 391.014924] device lo left promiscuous mode 14:37:12 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) 14:37:12 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x2000000, 0x80, 0x6}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r1, 0x1ff}, 0x8) r2 = socket$packet(0x11, 0x2000000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @link_local}, 0xfedf) 14:37:12 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:37:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8108551b, &(0x7f0000000000)={0xa3}) 14:37:12 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x200, 0x8}, {0x3, 0x1f}, {0x20, 0x8}, {0x8001, 0x81}, {0xfff, 0x28}]}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000000c0)={0x10001, 0x8, 0x4, 0x2, 0x6, 0x1, 0x80000001, 0x10000, 0x5, 0x5}) ioctl$TIOCCONS(r1, 0x541d) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000140), &(0x7f0000000180)=0xb) 14:37:12 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:37:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045503, &(0x7f0000000000)={0xa3}) 14:37:13 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0xfffffffffffffffc, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000080)=0x80) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x8d, "f488f94313fea623b9956147b26b97ec045f5123a33b414adde3e24c47efcb9730e2b6ad05e9d744a5ef279f5e069867dda662db35a5daeafe15ef3d9e576303519c25f878cdd62d1e483944a492e34029079e2c293c92e50167835edf39d6863f2d3d2b9e8fdcf6ea1cdd837b650de2a1290c2361680e2ea623c535e053529ecf27bc9edf0a4f2cb85b4f892f"}, &(0x7f0000000180)=0x95) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB="0800000063d1eec0cf81323a75695f219473961384"], &(0x7f0000000200)=0x10) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:37:13 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x3, 0x6, @dev={[], 0x11}}, 0x10) 14:37:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) fcntl$setsig(r1, 0xa, 0x33) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f00000000c0)="a3afaa713bb1785c8181887574df051d3ac5b51b5a5a77c2f27b8ede93ffe1648b6de27316386421aa6cd68001c7ac66a6adc681574dbfa6b145b86e8a8d0e9cbf47db4281247594b759fc6cf7bf7d2a5c8faedc2bb9d2173860d8fe2fb914820df57ab1442bb64a7dba524d88bea715acebe2b3997816d3b0b96ee80df7162e81c20019faeddc13016d781255d0a5335ec47604faca9cfd1b8a95c3ec193dc82746f41b37d8f41bc1b3e1771c522477cc9bdc4deab48ab35b51044836daf2b197dfcee92f49348f3ed90adcaf60988c90b2be74ccabb7d215dd005379362debf04510985c12e4173e252e8a") fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U-', 0xe5}, 0x28, 0x1) 14:37:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x40049409, &(0x7f0000000000)={0xa3}) 14:37:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185507, &(0x7f0000000000)={0xa3}) 14:37:13 executing program 3: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0xa, 0xfffffffffffffffc) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00000001c0), 0xc, &(0x7f0000000700)={&(0x7f0000000780)=@setlink={0x40, 0x13, 0x711, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xc, 0x4, @remote}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}]}, 0x40}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'yam0\x00', 0x5e00}) 14:37:13 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045503, &(0x7f0000000000)={0xa3}) 14:37:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0x5, 0x4, 0xffffffffffffff00, 0x4, 0x2, 0xbc24, 0xffffffff, 0x8, 0x8000, 0x7215}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x9, 0x100) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f00000002c0)=""/67) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) open(&(0x7f0000000240)='./file0\x00', 0x4401, 0x1) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000100)=""/174) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f00000001c0)={0x100000001, 0x3, 0x6}, 0xc) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x16) bind$can_raw(r3, &(0x7f0000000200), 0x10) 14:37:13 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:37:13 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0xfedf) [ 391.616199] validate_nla: 14 callbacks suppressed [ 391.616209] netlink: 'syz-executor3': attribute type 4 has an invalid length. [ 391.652280] Unknown ioctl 21667 14:37:13 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) [ 391.688318] Unknown ioctl 21667 14:37:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x5460, &(0x7f0000000000)={0xa3}) [ 391.717363] netlink: 'syz-executor3': attribute type 4 has an invalid length. 14:37:13 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x3, 0x6, @dev={[], 0x11}}, 0x10) 14:37:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x7ff, 0xfffffffffffffff8}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0xe0100, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000040)=0x1) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) 14:37:13 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) [ 391.867980] device lo entered promiscuous mode 14:37:13 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000003, 0x8000) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000240)={r3, 0xfffffffffffffffe}) ioctl$KDGKBSENT(r2, 0x4b48, &(0x7f0000000180)={0x7f, 0x8000, 0x1f}) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000140)=0x40) 14:37:13 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ip6gretap0\x00', 0x4100}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80000, 0x0) write$P9_RWALK(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="230000006f010002000600000086413554000000000001000000000000000000000000203f120a9dd0344b9e6a20421bcdc29424476b6a549891c0f26d98f2f9735590566e985c75250cce4c922210b720d7db20303faf3b4c0acb32ec866749bc3608d7eff092206208ed917a6c9fe20b610905beb7dd28391e140464efbc8e39f0486bd7a535a6dedc2f4eb66db88376ff1d9c062e60c6ccf7484f06800a4527dbc2c82cc987392ae866a87719c577bc2d0bd6907812f53b27bb638d0509f4911357bd"], 0x23) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4, @in=@dev}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000100)) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) [ 391.916056] device lo left promiscuous mode 14:37:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x5451, &(0x7f0000000000)={0xa3}) 14:37:13 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:37:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x3f, 0x0, 0x0, 0x80}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x93b) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:37:13 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:37:13 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x20000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r1, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) shutdown(r1, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f000062fff8)={0x0, 0x2000000001}, 0x8) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000b94ff8)={0x0, 0x0, 0x1000}, 0x8) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x90a}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00005c0fe0)={0x3}, 0x20) write(r1, &(0x7f0000ce6ffe)="da", 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080), 0x8) 14:37:13 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x5, 0xe41fee4991f0377f) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:37:13 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8038550a, &(0x7f0000000000)={0xa3}) 14:37:13 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) r2 = dup(r0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0, 0x400}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={r3, 0xffffffff}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000000c0)={r4, 0x48, "64d606606c2d879586d394356fc1673a81c3ef05a8d95c667cb9ae45a34c31f6a74c6851986f6e88a404b80e2a7736c5a922050dfad2b39d3a1494c474e7453a6b6b969c3486a312"}, &(0x7f0000000140)=0x50) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:37:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc00c5512, &(0x7f0000000000)={0xa3}) 14:37:14 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:14 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair(0x1b, 0x1, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$input_event(r2, &(0x7f0000000080)={{0x77359400}, 0x4, 0x2, 0x7}, 0x18) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000140)={0x0, {{0x2, 0x4e21, @loopback}}}, 0x88) write(r0, &(0x7f00000000c0)="bb88eac06150174dd153ff8c1aa969b1a95e3531e060c4b79b5e4ed7240a6aa8abacacd95ab595589d50fba01f485a743a1fed46e3157ac1d21ec50dedbeb94d45166e756a595e73f52b88b499f21ee16512c5d3349b67", 0x57) r3 = getpgrp(0x0) ioctl$TCSBRKP(r1, 0x5425, 0x8) fcntl$setownex(r2, 0xf, &(0x7f0000000200)={0x2, r3}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x900, 0x0) 14:37:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ptrace$setregs(0xf, 0x0, 0x0, &(0x7f00000000c0)="ba2af11ffd084f198e88245befc9f2a6d987f0b75d389d2973c5d900e28f67c7359ad153dc1d47b42be4929b0b079ea54c3d9c6cd27b4a840b13bdc20b8a5a8252c8205dd7da4702a230ec11b30e079092a08f358bac3ef342d6d539a0828b461c887c4f5c0ff72740c8affbb64b777c4801688b3a83ce0e876cbf07d8808520cf12d05aeb267e76992d5f2204a8dac06ac82b269b8456792f09daa8bfbc80ba2ee95c7fd8fabcaaaa4378326a1b91ec04210ca43405d4160c6a7edbce22207550a075ea7f7541d396129efcb3986f6d7a456ad7a4f6162e46bce10e056bdf3e3c7a96d8c7dfaebcc66a9dec8b3647af5a133f") ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x400}) r1 = syz_open_pts(r0, 0x1) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:37:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'yam0\x00', r1}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="aee6f1f01cf5"}, 0x10) 14:37:14 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) 14:37:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x4020940d, &(0x7f0000000000)={0xa3}) 14:37:14 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) [ 392.434343] device lo entered promiscuous mode [ 392.504873] device lo left promiscuous mode 14:37:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000000c0)={{0x9, 0x5, 0xffffffff, 0x8, 'syz0\x00', 0x24}, 0x0, 0x40, 0x1, r1, 0x0, 0x10fb62c3, 'syz1\x00', &(0x7f0000000080), 0x0, [], [0x8, 0x26f42e5, 0xe1, 0x10000]}) r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc008551c, &(0x7f0000001000)) 14:37:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f00000000c0)={{0x2, 0x4e20, @rand_addr=0x1ff}, {0x307}, 0x12, {0x2, 0x4e22}, 'bcsf0\x00'}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40000, 0x0) sendmmsg$alg(r3, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000140)="5e537618bc61843e98304304375db1762a9128f6862f8affd26dd10dff9de7a3f44488ab8ce5aa319dbe206ddfc6be20678e4bf8f346ebc9350139", 0x3b}, {&(0x7f0000000180)="de285d6169524b2d518b4013f0bdc5dac742e9988b9c8361dbb6d89a590dc991aca2b9a5bd43f63cb1c342620e9381e579d1782fde71846f97f7784171dbe89031efd2cb0c246e3e5a5276c15b523466d09528dc66e63fe77385da2c1444754a1042089a026761d4a9828a23f77fb05a4bcc066dc8c41ee1720d0fd87c8f25a86ebd0cc5456c0714eee875775dacea62c880c4c0a6da00005d20a59531876a898de7c6d9b9575509b6f1d3ca4856bd74c68c36b0fe9ed8fe9f8d11765f94cd633ed14be2090e2df37c6d1f2b2865ada123ec72f10a6402c6543f688a50400d86763ffe4eed17bf79d56486c2252e469dc65a69ce456b3bf4addfcb6e12fd8a277bea04fa2956ff91ec3707d16e0be70870e93c1b2374dda5b0a4536070c8980ddd6973d6a93faa8bf16e5767cfe4b90885ef788edf5dc68182ce4cbeb16ba3790dba99282b94bdfcecdff8e0ccab5eb79fb95b91d2e5a5f45f2965471c4679b3dc69c387fe6a8e1aa7dd4d0653b0c8cbc3404be342c224e28ed76be7a2cf796c05f6107fa032dfb0cd762e1c7cb195fabf7b278ba0148f27893f88ea62dd212c355f9263bc5a73706dd766106cd67e80b8d3a4a7e8bec23447f36c69a210366c308cf6d49d89d520adfaa151e713dbdfce100f9ea1d0b64d7479350a79a944aaa3bdb847ca32933546c3fca4df695844d1aca8349b1c5b7ff93367476c7fdfaecaec2451a7d4f9847a5bf058213c7aac3a5bc4fdf61ae6661971b12dd095b34244cf3db233e0d662e348d59665a725498408fa9ccc306e358ac4db2875cf82a1ac7a34003a6c4370b3208d6d2b913262997548e5211edba9c522e1324c8b963ce0fd1ac5e41d12f67f9f3d5505e22140f5c6024e2382cb6ad18078a6131c41756d7de6082738ffd6a5d03a7a7a24b5f33d7e26eef025a276a745b8a0f86542c7e9914634af0e52e97a0001e43c9643f1c15d3cf949fc41e6f548037a54e2208ec3c16ea60f4a926cb7d21663e8526b823937fabe98bb6a472dbdd21ee00dbc4a9cdad5540ba8e5a535eaf092b6640b0d2a677d5f22cb32f155ec592e2b49f3e52b9786618bf1261271ccfdb09d2af3a53b019d22f080d399128bd250edefa0b87d863ece0b230e62d3399dd9927d37d62fb7c1471635a62ba14cd225d7722e9c898356e7b38ca9449a10860057bb6d49fc1548796c7560f04f7f8ea06ab6b9ae4c9e6f723b20b0c8e0cdf44f3d349406261c183e3ac2c3c29bd2ffad1e9deffeaa699cab8ecd0dbdd828e7488bcd25c764e50cc566edba82a5f18fece61e9ec3aed7a75183ae218f56a026844b561ce180452319195402b113df481d2bb6491f5b84e43a64d816e8c4434e562a1daee4cf0ea5b169342c214422b9b93362bf707849b69af0786b38be5cda4fd076077bc6c46576689acf6ee4bed45270d890416dbdca3ab9953b9fc8bbfdc504aacaabb9cf3f6e204e256d05de36a0c0d397243131d53aacc5a08193b4ddb963c9ce6ec88c24df9ec27183db09431782d728da94e7ff8c79aa6becef9ef0b28f2fb7ff4831b7f2040f0ca2770258f380366a38352066f04e66fadb4c40d7b0dce462f309119c658d2186ca3992fac4e5f177d9d563cf4b1e1024a70b7068645544e77406a50569dcfc039881b4505d180e6fd14198e64632a95d6da2335eba7e18803838f6bcc8705f57e7b137d27210e193fcde9b0b08372c4b815050354dff4cf73fe55dd308bd2f42e7683cea62736c921b61b617ccea680bd2f27e9d34dee956fdef9f38a7bf93ef137d76fcd2b4123df10d0df81584bb844a6fe6a211e9b3ca519fa9b71436fa7c31e8cc3651a824398d6d28764fb9b2badc3f1c411ef32c55d05b2cef6ef5170dce3f66d3bec720136a499ee12f888367a76dcc9cfa7b8ee5524212472157ab9bc0d948cc1cfb8215e297ce9342e32a217d6f75b2f61e73dba539d243577122ff0c661e90c4a07c9de07947dfa7899b845a03d76b8d421cc7a69097abe681c43cc6f4de9640d783e071f75d8db9f685419da808b5a81985576be68a1253bb929aaded31d3c97037c6cdd6a769f8e8202738b4a68710a6a4e8ba19f7d945cafbefe65450fe54eaef4aa1a8820961d6cbec1b0f508475309833f7016d7c7db9a5eab0c4816b83527cac04d596f1bc55e12245b3a4fb4729d0f4bd373026126a876c982ab703cdc832d326d684e41bed4de240743623616f5609089c12d9df83e6d4fffff9d57581b29cce1911c6e0e7614fcc2a19b5a334ce9bda2faf1449ca57f24c65421f0cd20bd052100d4c00b7924b647cd60dd0c6c62eceb2d63db3900998275ca51573cab5980dd70f0cef1d12a393c144d8f48d6eeb666d9e277e6afa1f606447eeee646af75b8e8f232491ecb12b64e59025708e8328a2ae4f91c80227b89f00fc35de84be8c8b4d7a61b9b56ee6edc4e1afadd32ad0de720df61a6fea61caaf6a6c011e7dbe1de943f756eea3fa57bdb55398d2635046adece55ed9636ed060ae9d849f697590e8b3ae2717138ce3223ce99cd3b4e4fa925e611badc9d47c85160c29bdcdd35942385e3fb509bde96004021abf72b983aa8ca24b30344b7c5e9996ce02716abeb4dec4478fb8c77e9c2db35ed7af8b6e52b88673d675cd4226ec69b671c0a9e728c599054fa26232085408c09d5d6ffcc72183fb33c33330b328b5f5ff549bf62925f6664be6d8439ec4089f1f85f339c67d02072ae0e3f994029f14a1d934044eceaf02d2a18c2d0041697d4abd396dd5b17ad02cad8a7331028ca785711af736f033bcea80962d51f61aa9ba2af75fcfa4ec83b8c2d5057e89822c4bb3a418be1a97919fcaee38363cad88c8c40e55c9cfc4bc92b597d8eefd8cd778435aaed366e26a9f760c768608c723db0a50ffa23b6f41c1c400bdb7ecac2063a08b8c648a468143e67d7a0396bdb01177e7ca338702592e9c5d0ee7b4eff164601a3c8d0b636d384b439b01d4ca2e01fa73d83b319869323f7c48e92080300adb85225f0e0e68961b28713e6e153aab2ef8da0e3a2f2071e7cc1936d61d3b93c333f3e1e30ed0de73386a5314970cfe08f0aed009a9dd3a4ae6d1191345bb3cee9f0500a6646457f70bfcae38366eb07b09e419989907f51e07cf4c0c14754d9ccd46bad5680d1b912a608101c952d65324f035ea803d5512dc3c43c5c0d042c801066cbec2fe274b8319dd7316f018b120433f3c8591b0ff2e352724a1187f24529e78ee60b16dbd197d68136d1b5aa1e608fe652fe59258160d72bbe74ce168969d7a04f425afa8b2c49f669a7f4a337efe995aa4b66ca4b02de57097db2ed095d00d2addf1fc28f41ac33b4cc255b5a7c828726a3cd1a61ca4499f586998778a5c8ce959af7dbe239f84d2bc53e5efd61780c02abc316a98ae884a97d3087e883a126c79e4292fd12c1e38f0dcad4d46de80842e3e0529f09604eae29a7d69c7a58d9451389501c982ffcd721c6ac85df2be871a3bd9243931e818efa72f5a6331a9b29de8a95751102455ccb1d2bd9995683ed19bd14fc1dd8837f6c9a671494d162b50cb232d557b004b65e0553502c7846fc6ecdf0a45181b7d88b8ca4db66f12ef3f57333d2d2e7691a1ebd5b891284ff2be8d5ff8314a7ff5bbf28c75991cf831221a65298667048c65a276d8c765426788ade884ad314d2193e533ef4c3c1930ec44805adde76992f860a03d255ea0d2e770a69401e2185013c505af637b2f0bdd09b3dd1ca2ac11c23474e8772d97fb2a1a747d7cda8c31f220f4707b3aa1c7426da2afe59c4446fba94bf048bbc215c6a881863eb9e10d2a553dc889d3eae3f1668a48c5f26bce19e494f14102d725fe8378124ab2a380fd7df8efeabc01ccefb056029678a0fe539ad62734716bd8d30fd0767087e64191607406b07b78770eaf0f09b915f22043f5d2971f1a57c0098b1609ff6e8e4506a1cff53b026ee9d31de4ea07f45151ec3834d331d007abf635753b0d7a3a8b06ee88a3ff4cfeb700da1e8959b24c49479146b066ce07796f772c4265c92dc45da76a77df34240466aff96c9d8ba46412ab9753328b799ec29d43ae90040b0bab7885f3dc9d4c0183552dc01169f6856b6e66ebb861e05ff17062c9ea8e5e945ea39c0b86f2318c21d9c227421b4126b13d54736f1494467daf1253dcca0cdc222a79e0c056e69f07c3d075a102f42dcf800ae491b2465420c30ca7ec0f91c438b25c1e4dcdec30d57b429cb2cf8560d4e26cce076a7c2b89201befb01ec237d15c185e6146dee5bdfc3fa1a38fc0d71d3fadbbe431ffa6b514d8ffa0bd00d5bac15e993cacaea8f89f8de08cff3b0062716a2ce7f9898824ad421e1cf00c40f81b929705da83a594a08cc74b31cf073cd8ab2239678acf53d129e066e2e94312ee0390fe7cfa574592a581bd651592a5b2dd6d3f64a3eaf145ba3e84b8092c1cddf94dc2457bb9f5f6da70dd0795adf68031161b2b900b8ee24d5e0b915fb278f8e3ff08b1930279579ae831ee1bc336d47c6470c859b93a095d7058903cd50be42da0b08945808afe09ef3a455d053dc2679e3f6028ce10ae57d158b95207f3d52f6e60c0be245ed3a02949992053f8ad9ad34be5c8164a4af8be763e007880c853e708a832bf992bcf008bf564bee01c4c611a235ca48d3f837d5a849ceb2c5b07378fce15f10d405c9df10c8c19ba4fb29f9c13d2ac2c71b1d792307f397e5a6154e8e9c678397bafd896bcef60dacf42c70871b356b56517fd4e32736167b0de5c9db1de997e62dae3f559022d38e48623aa553c03e35c9ca5f04cab1c3375a8186fad4e7708d530c132d50af56550b12a1ecaf072ee6b31e8eb18929c9c7f2430631ae390e5ac6ca71157daa643bea949ce102a0279a599ffb25eb3786ba14c5c9895cdbf683376fafbfcf44f81a237602c2927081dcead9af44551087ec2b6443c8c61ac233d6e683b4e3fbe7659c1e7cf4020af94c09d8bb7a72d7ff794b820c57c71eaf00c713bd9b864b1b6d43bc3fc9defaf6eab7fabcb98d287e859fd0cb701c364675eb4247f4fb26c6b374099e9d52235b419e749ac83d0c5cb166d006c8843a8276e0d64a71890531cea2868bf65144f99546a60f759f4c1bcf32ea40de6567152f406ba8c0f0990a0156cc28e9d5894ad57617ba1f62ebdee967ec3cf58fe35a2703c29a42c4d0d8e9da29012f93673254af34db23f160210f8e8b605a17085127b327d19bb1fce7447a15d98ede937620f8dd389fb9aec95474fa8c6c86770951f275765c7f0592b490e8cc03c80be052372fab30429112c7af0faa5a7e31dfef83f8aa18af24789afd9d26fcd98f08f719c79fa9a00b7b65959ca99634399062ea8ce7ad36b645374f928e91f36acf34e7dc9cb168e7095e375eb4c421e7aad789ab9f1289d0f4950f83d6de0cfd312be300dddd257a5429ba5a059a8fa8009554231e3cdd6c87266eab9e5359f8ef2202c83a3a790111c70d23111f124ae7b6854f6565c17d5dd095448c76a8be4b0d672613e29fa36eca84dfb91a38e65d50af553872e0fe80ca1361ad7a2052aa65448cf5a2466cb67eff28b79d8726feed523890aa1a0f0d252bff027b8f725ea297881af8c1c877f53a43f0f768768993cf3822c8c28d3d11b6af9fe02cb4acc32c417a410e324cfd4627e3a0fb3889336e5a5d0bdf98e62dda50ec49619d2892fe02aa233268ec7aee03cec535e7e9dfb18add1d44144765fa227dac365bd3ea02e5b2c2d4cd705a0d091be", 0x1000}], 0x2, &(0x7f00000011c0)=[@iv={0x60, 0x117, 0x2, 0x49, "78c6c0650f13cd43a115744a3b495a128fff42311bd1009434cacf8cf21180276c5c1c90cdff038375e079578e41a6e0fad9114cce5d2a87af36571f8f9b635b063c085947e65734ce"}, @assoc={0x18, 0x117, 0x4, 0x93f}, @iv={0xf8, 0x117, 0x2, 0xe3, "002fdb150c4a8bcef24365faf2b1f096666e2c4136d1b3d9437fbd54a2d657f3dbfe7aa2a3a31a4a2d98b3b8efe7ea7882b69058b1f18e280bc359351be3fe625de400f6cdd77e2a4a19f1e30590b91dbd9deb1533dc680b34bffbb794785a4a17694fdf3a52fc386dbb095c6844f11e71c1716474777082d8d3878397e5e7c00a874a93aaaf351b2c4dbcadfae5c2029ad6680b782ad68ac08d2acea2a86bc1d78cc50769f04134fbdc65f894221c877720142c91cd3e75e5c25264fc7defd1918a03c7e948f891483488e5b319f28abacbabd2040262bf1c64aefa21075cd4472658"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x88, 0x117, 0x2, 0x74, "5ace4475a042565371cf6c0413de182c271dca79ef2a5b428011ec7c4e0af4b406482c382d51271983ec195fe0b17472d8c40895d80113cc9bdfcb34e398c2ee3770ad206541e93488d843a93c4dc5375c9778fb94f388c26aa2153ca474184f8c78fad440663848be386363da208c52222f8bf0"}], 0x210}, {0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001400)="e03fb44f3ec2884357b8a06ab6dc5726dec203d8b68daabd8661b4fddd4deae070aef7118e3985d7925c463bba63a75a0555c63d5c87024981ed7ba71befb13e24fc81adfb2ed13e92f3f6bf056cbb8c012da07d9ca40641564c829267a081c7091ba7f735ba777d336f2f128c7f62cb1b7815b387e73f815168abe7bf5860e05d177d5ccbf648a14ba6c980a7e03ee152feeb45a1881a1c7b4112e81127ae0be37d2791f2e782da8cbc6efc58f45b28c5a91d83b34979470a2de55ce353790c7161d9e0cef555d594db8489ac", 0xcd}, {&(0x7f0000001500)="758979bdc749bc7c7d8fc9986ae0f8d344a0a9cb7364f0c0e2eb2757906c44a8959e8938deb55bfb031c7c45924a0656a63f1b7e0312c5f15e35a721b85ab1ae4d9e93562696b56342d15a430dd12784bf927bf2c0a0052d7316", 0x5a}, {&(0x7f0000001580)="6c76f6a3cae412f48c9be3bb92531413398df174f639cbce15a5bfe76d03af8483fbe6fd20b415255578e8a8e1d2311102a429470b8909c28ec37802c8b0f70ad7225a9a909f3fdd1c7a81057e02d9c2c19b8e18d7250f994ae9da58ba74241295e3206e87e61f0537b71f2d11ae3270e91439bdb7f67f67bd10923c8f6ea4b54f9d94cd36e2230ee2b91464908457455186a45d4e8fd09ca6d33412b500ea5e451395701f5bfbe72bca9cfceda9a061d02895175ffed48b0cbe5dbed4e23a68d6e40cb15cccd1e83edde0ea3d2ea8687de893b38a5290800aee894c2b350032aca9e7071ab1f3430ca89df27202", 0xee}, {&(0x7f0000001680)="8e9447108ccbc6d4b61ba52b05e31b507a64d284c9d78a399c9921fbd8240803a81a6bbc1a708aef61dc49f4db124c769c671100495bfa5a06af25d154aa86ef51dc26b26ff3d8ae99cfa1484c880d692983eb4be33f966d4b49d9b7c58e44f5b8930891a12d7862f40cde4cb9bd3d691ca0e4de1582979c936bc8d4619014c3d3071d", 0x83}], 0x4, &(0x7f0000001780)=[@assoc={0x18, 0x117, 0x4, 0xffffffff}, @op={0x18}], 0x30, 0x4000}], 0x2, 0x4) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:37:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80085504, &(0x7f0000000000)={0xa3}) 14:37:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x3, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000100)={'NETMAP\x00'}, &(0x7f0000000140)=0x1e) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$SG_SET_DEBUG(r3, 0x227e, &(0x7f0000000040)=0x1) 14:37:14 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:14 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:14 executing program 3: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/exec\x00', 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0xfff, 0x400) accept$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, &(0x7f0000000340)=0x10) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000080)=""/73, 0x49}, {&(0x7f0000000100)=""/210, 0xd2}], 0x3, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = socket$kcm(0x29, 0x7, 0x0) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000280)=0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc008551c, &(0x7f0000001000)) 14:37:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045515, &(0x7f0000000000)={0xa3}) 14:37:14 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x4000) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7, 0x40) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000100)={{0x3, 0x2, 0xfd6, 0x3}}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x10000, 0x0) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000040)=0xffffffff) 14:37:14 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:14 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) getsockopt(r0, 0x7a0dbf04, 0x800, &(0x7f0000000240)=""/14, &(0x7f0000000280)=0xe) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @loopback, 0x8}}, 0x8000, 0x40, 0x80, 0x1f, 0x8}, &(0x7f0000000040)=0x98) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r3, @in={{0x2, 0x4e22, @multicast1}}}, 0x84) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:37:15 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000080)=[0x2, 0x0, 0xd], 0x3, 0x5, 0x3, 0xd9, 0x710a, 0xfffffffffffffff8, {0x9, 0x54ce, 0xfffffffffffffffa, 0x80, 0x10001, 0x3, 0xfffffffffffffff7, 0x7, 0x4, 0x1, 0x5, 0x0, 0xff, 0x3f1, "ad696f374c791a0bf1d4b0a2fe7e9159c37c6aec3c9caf696a3a4878dd078588"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) ioctl(r0, 0x8, &(0x7f0000000000)="6aeedc39862efe067bc34d73a50c49bea79b1849aa9cc9273bbfd156c09de62e3a7178995639585487b1a62964763f") mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000000, 0x84033, r1, 0x0) 14:37:15 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:37:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) getrlimit(0x6, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:37:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x2, &(0x7f0000000000)={0xa3}) 14:37:15 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0xd, 0x19, "59c663ce6b9d775607a55ebe7b02c39ea295fbd433fc95625364b86af2b8dc73bac2810ddcdb909e415813bd0caa05aec124fdb7d2d540fe4d8e5277b0c04676", "8bb865f3a379cf0016709dcad73c45d52ba3c5d695d73f7b11b22b46184e2128", [0x7021, 0x6]}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:37:15 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x800c, 0x4, 0x2, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000140)={r4, 0x10000}, &(0x7f0000000180)=0x8) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc008551c, &(0x7f0000001000)) 14:37:15 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000000c0)) 14:37:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185506, &(0x7f0000000000)={0xa3}) 14:37:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$FIONREAD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) 14:37:15 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:37:15 executing program 3: ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc008551c, &(0x7f0000001000)) setxattr$security_smack_transmute(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000180)='TRUE', 0x4, 0x3) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x92000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x600000, 0x2) prctl$setname(0xf, &(0x7f00000000c0)='\x00') 14:37:15 executing program 2: socketpair(0x9, 0x7, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f00000000c0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)="564c58a32509258ae15857812639fdf95c65dd51600320107fbc877b98b88631066a88f7b2cb06126365c2710cf2acd6adcd075f50dc72793424d5e6f63f23049067b9235eb3779023114c6b0fdfb97ad399eb433d8900fb419481f17514406cee8bd7b6b1d7e3c19e4293441f159def062ed1934c5c416c7ab04abd55d7be7ecdf44980a0a508cb4e93b809cd5628643431a04efaff811d3c03f3ed4ea46f9f9eb74b3d8fc46c9d85c45fc71e4bb0c92d61cbef4a95", 0xb6}, {&(0x7f0000000200)="a1d7568895dd85cf54a05995cc6360f83a9dd1425e77fd5a4107486cb5bffef187063ffa80cd1ae368ffc90805d504a3cc76ba1eae729933ebebea1cdca1f81141a92219827622979aeb634f7cfd9acac85b4f1618710f06eabcad3ff1cd55190eb780e84c6b0b34e2f6737332bb6d2d7b79334f9e7974bfa32efd95ac5c24ad505bb463da08c22805c37c8e785182fe722c7054d85e83448e38df283f23e6220a088f9fa09b2fcdc89805c23a3b8a96ec6b990297e7267a0a715b57ed34e817e2c7f06b212e3688a418728403a16099874a2264a0b9e194a42006", 0xdb}, {&(0x7f0000000380)="c8804a340f1e4371b326003864a5d23b09a55ac569f3a7fe36026d22e8b5e5cb12fb433f628abdee46c40195c885ade9ebc745939032fb4fa006dd317cea330ebb73b54748d6f11f9cfb1214dc886b024e506937c686714d8e1e6f2165bcac7fa5", 0x61}], 0x3, 0x0, 0x0, 0x90}, 0x48001) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0xfedf) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x800) 14:37:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:37:15 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x551f, &(0x7f0000000000)={0xa3}) [ 393.771980] Unknown ioctl 9216 14:37:15 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) [ 393.824981] Unknown ioctl 9216 14:37:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0105500, &(0x7f0000000000)={0xa3}) 14:37:15 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000000040)) r1 = open(&(0x7f0000000080)='./file0\x00', 0x18201, 0x8000100) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f00000000c0)={'syz_tun\x00', {0x2, 0x4e23, @remote}}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)) 14:37:15 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r0, 0x5423, &(0x7f0000000080)) 14:37:15 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6, 0x4000) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xd000, 0x10000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, 0x0}) ptrace$setregs(0xf, r3, 0x1, &(0x7f00000001c0)="548f885e7728acf4749595e224c719639b1103e868f1791c95505dd122f2ff5c4f2cbf149eff5553cd9c600edc0a893e514357866af610eb4569adb0292949046964815b5f35bf18193a4eda4647c18f824c797c6a47b7a0edebceebefd0706b358e613f4c832ee088") ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x20, 0x6c, "6f544e01a4f73626c352d8b516df11d98ee8affb07e9d424b512157b61e6baef8eb4cf9c325de94dca053f798b2fc99c99f795aa1af808e34bba461e68035188c9ed91030123275d00974dd954d4e217f7dc049004684ff77dd5846f6e406188a449494ec87ebac77585dacc"}}) 14:37:15 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/tcp6\x00') r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x0) r5 = accept4(r3, 0x0, &(0x7f0000000040), 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000000c0)=@srh={0x0, 0x2, 0x4, 0x1, 0x0, 0x0, 0x0, [@loopback]}, 0x18) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000240)) dup3(r1, r5, 0x80000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000400)={0x0, 0x0, 0x40}, &(0x7f0000000440)=0x14) r6 = syz_open_pts(r0, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000080)) 14:37:15 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:37:15 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r0, 0x5423, &(0x7f0000000080)) 14:37:15 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x3}, 0x4) 14:37:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x8010550e, &(0x7f0000000000)={0xa3}) 14:37:15 executing program 2: r0 = socket$packet(0x11, 0xffffffffffffffff, 0x300) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x400001, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) getpeername$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @loopback}, &(0x7f0000000180)=0x10) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000040)) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x3, 0x6, @link_local}, 0xfedf) 14:37:16 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:37:16 executing program 0: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r0, 0x5423, &(0x7f0000000080)) 14:37:16 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) r2 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x10001, 0x40) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e24, 0xaf, @empty, 0x7}, @in={0x2, 0x4e20}, @in6={0xa, 0x4e24, 0x80000001, @remote}, @in6={0xa, 0x4e24, 0xa9e0, @mcast1, 0x7ff}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e22, 0x7fff, @mcast1, 0x80000000}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @broadcast}], 0xc0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) 14:37:16 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x101c00, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) 14:37:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc018556c, &(0x7f0000000000)={0xa3}) 14:37:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:37:16 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:37:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185574, &(0x7f0000000000)={0xa3}) 14:37:16 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000000240)) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000040)) 14:37:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:16 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) [ 394.722987] QAT: Invalid ioctl 14:37:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x4008550c, &(0x7f0000000000)={0xa3}) [ 394.766503] QAT: Invalid ioctl 14:37:16 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:37:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:16 executing program 3: ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc008551c, &(0x7f0000001000)) socketpair(0x4, 0x4, 0xffffffffffffffc1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x7a, 0x3, 0x3}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0xffffffffffffffff, 0xe4b1}, 0x8) 14:37:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) syz_open_procfs(r2, &(0x7f00000000c0)='net/arp\x00') socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:37:16 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xfffffe22) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:37:16 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:16 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:16 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x7f, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x7fff, 0x6, 0x7, 0x6b41, 0x46, 0xec0, 0x8, 0x101, 0xffff, 0x8000, 0x325, 0x1}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:37:16 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) fallocate(r0, 0x8, 0x8000, 0x80000000000002) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x5b0, 0x8000) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @local}}, [0x2, 0xffff, 0x6, 0x20, 0x7fff, 0x200, 0x7, 0x7fffffff, 0x10001, 0x100000000, 0x5, 0x8, 0x7, 0x3, 0x8001]}, &(0x7f0000000040)=0x100) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000001c0)={r3, 0x3f}, 0x8) 14:37:16 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:37:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x40000, 0x0) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000140)) r2 = syz_open_pts(r0, 0x0) socketpair$inet(0x2, 0xa, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x8) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x12, 0x5, 0x9, 0x5}}) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) [ 395.222756] syz-executor4 uses obsolete (PF_INET,SOCK_PACKET) 14:37:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045510, &(0x7f0000000000)={0xa3}) 14:37:17 executing program 3: r0 = dup(0xffffffffffffffff) write$9p(r0, &(0x7f0000000000)="1d31ca3e1d8c7990fa0b2e778adf5169d6b3c8c867dcdeb4ca921c87430df410d2fd9ee1e4316abbc18b0fc0158e72", 0xfffffffffffffda5) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc008551c, &(0x7f0000001000)) 14:37:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:17 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:17 executing program 2: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0xfedf) 14:37:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioperm(0x7, 0xa8, 0xb843) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:37:17 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) dup2(r0, r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e20, 0xe266, @ipv4={[], [], @broadcast}, 0x2}], 0xfffffffffffffcaa) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:37:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:17 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000feffff00"}, &(0x7f0000000700)}) 14:37:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185505, &(0x7f0000000000)={0xa3}) 14:37:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000040)=0xfffffffffffffff7) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) syz_open_pts(r0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000100)) 14:37:17 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.nlink\x00') r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x80000) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000100)=""/42) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x3}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={r2, 0xfff, 0x33, 0x80400, 0xc}, &(0x7f0000000080)=0x64a34d34) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r3, 0x9}, 0xc) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000001c0)={r2, 0x1}, 0x8) 14:37:17 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)) 14:37:17 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x2610, 0x2fd, 0xff, 0x6, 0x0, 0x7, 0x4201, 0x1, 0x7, 0x8000, 0x3, 0x5, 0x3, 0x20ca, 0x3, 0x2, 0x8, 0x7, 0x7efc, 0x1, 0x9, 0x8001, 0x80, 0x6, 0x8000, 0x8000, 0x80000000, 0xfe, 0xaa, 0x4, 0x80000000, 0x0, 0x5, 0x0, 0x40, 0x4, 0x0, 0x6e9b, 0x0, @perf_config_ext={0x3, 0x9d}, 0x12013, 0xc167, 0x3ff, 0x5, 0x3, 0x3, 0x10001}, 0xffffffffffffffff, 0xf, 0xffffffffffffff9c, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000000c0)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0xfedf) 14:37:17 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:37:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185508, &(0x7f0000000000)={0xa3}) 14:37:17 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) getsockopt(r0, 0x7a0dbf04, 0x800, &(0x7f0000000240)=""/14, &(0x7f0000000280)=0xe) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @loopback, 0x8}}, 0x8000, 0x40, 0x80, 0x1f, 0x8}, &(0x7f0000000040)=0x98) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r3, @in={{0x2, 0x4e22, @multicast1}}}, 0x84) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:37:17 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2, 0x40) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) socket$can_raw(0x1d, 0x3, 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}) r2 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 14:37:17 executing program 3: openat$zero(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/zero\x00', 0xc02, 0x0) syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x1f, 0x80) r0 = openat$cgroup_procs(0xffffffffffffff9c, &(0x7f0000000980)='cgroup.procs\x00', 0x2, 0x0) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x100f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f0000000280)={0x5, 0x10, 0xfa00, {&(0x7f0000000000), r2, 0x1}}, 0x18) r3 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000340)='/dev/midi#\x00', 0x8000, 0x200000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc008551c, &(0x7f0000001000)) 14:37:17 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) accept(r0, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f00000000c0)=0x80) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:37:17 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:37:17 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185560, &(0x7f0000000000)={0xa3}) [ 396.199333] device lo entered promiscuous mode [ 396.246325] device lo left promiscuous mode 14:37:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa1}) 14:37:18 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000feffffff00"}, &(0x7f0000000700)}) 14:37:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) 14:37:18 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) getsockopt(r0, 0x7a0dbf04, 0x800, &(0x7f0000000240)=""/14, &(0x7f0000000280)=0xe) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @loopback, 0x8}}, 0x8000, 0x40, 0x80, 0x1f, 0x8}, &(0x7f0000000040)=0x98) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r3, @in={{0x2, 0x4e22, @multicast1}}}, 0x84) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:37:18 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000040)=0x7) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) mq_notify(r1, &(0x7f00000000c0)={0x0, 0x14, 0x6, @tid=r2}) 14:37:18 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x3, 0x6, @dev={[], 0x21}}, 0x10) [ 396.399310] usb usb9: usbfs: process 19148 (syz-executor5) did not claim interface 0 before use 14:37:18 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) [ 396.457023] device lo entered promiscuous mode 14:37:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x20000, 0x0) openat$cgroup(r1, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) ioctl$TCSETS(r2, 0x5402, &(0x7f00000000c0)={0x7, 0x6, 0x8, 0x4, 0x100, 0x2, 0xdc3, 0x10001, 0xfffffffeffffffff, 0x6, 0x5, 0x7}) 14:37:18 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) [ 396.500305] device lo left promiscuous mode 14:37:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7a00}) 14:37:18 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) getsockopt(r0, 0x7a0dbf04, 0x800, &(0x7f0000000240)=""/14, &(0x7f0000000280)=0xe) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @loopback, 0x8}}, 0x8000, 0x40, 0x80, 0x1f, 0x8}, &(0x7f0000000040)=0x98) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r3, @in={{0x2, 0x4e22, @multicast1}}}, 0x84) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:37:18 executing program 3: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f00000000c0), r2, 0x2}}, 0x18) ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000080)={r1, 0x2}) r3 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0xc008551c, &(0x7f0000001000)) 14:37:18 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x0, @link_local}, 0xfedf) [ 396.656980] vhci_hcd: invalid port number 0 [ 396.673636] device lo entered promiscuous mode 14:37:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) [ 396.697596] device lo left promiscuous mode 14:37:18 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000040)={0x7, 0x15, 0x1}, 0x7) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 14:37:18 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x60000000}) 14:37:18 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200"}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) getsockopt(r0, 0x7a0dbf04, 0x800, &(0x7f0000000240)=""/14, &(0x7f0000000280)=0xe) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @loopback, 0x8}}, 0x8000, 0x40, 0x80, 0x1f, 0x8}, &(0x7f0000000040)=0x98) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000002c0)) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r2, @in={{0x2, 0x4e22, @multicast1}}}, 0x84) 14:37:18 executing program 3: socketpair(0x1d, 0x2, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc008551c, &(0x7f0000001000)) 14:37:18 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x7, 0x51) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/netstat\x00') r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={0x0, 0x7, 0x5, [0x5, 0x2, 0x8, 0x9, 0x9]}, &(0x7f0000000240)=0x12) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={r4, 0x100000001}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000001c0)=r5, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/if_inet6\x00') ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x2, 0x7fffffff}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r6, 0xc0045520, &(0x7f0000000040)=0xffffffffffffffb2) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @link_local}, 0xfedf) 14:37:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x100000}) 14:37:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:37:18 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:37:18 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200"}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) getsockopt(r0, 0x7a0dbf04, 0x800, &(0x7f0000000240)=""/14, &(0x7f0000000280)=0xe) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x10000, @loopback, 0x8}}, 0x8000, 0x40, 0x80, 0x1f, 0x8}, &(0x7f0000000040)=0x98) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000002c0)) [ 397.011550] vhci_hcd: invalid port number 0 14:37:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x600}) [ 397.055126] can: request_module (can-proto-5) failed. [ 397.061808] vhci_hcd: invalid port number 0 14:37:18 executing program 2: r0 = socket$packet(0x11, 0xffffffffffffffff, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x4, 0x7fffffff, 0x6, 0x5}, 0x10) 14:37:18 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) [ 397.119243] can: request_module (can-proto-5) failed. 14:37:18 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200"}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) getsockopt(r0, 0x7a0dbf04, 0x800, &(0x7f0000000240)=""/14, &(0x7f0000000280)=0xe) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000002c0)) 14:37:18 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x84000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) r1 = memfd_create(&(0x7f0000000000)='/dev/ptmx\x00', 0x7) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x9, 0x4) 14:37:19 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1e47, 0x80000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x40) write$P9_RCREATE(r1, &(0x7f00000000c0)={0x18, 0x73, 0x1, {{0x1, 0x2, 0x2}, 0x5032}}, 0x18) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000140)=""/12) [ 397.203651] vhci_hcd: invalid port number 0 14:37:19 executing program 2: r0 = socket$packet(0x11, 0x2000000003, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'team_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:37:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x400000000000000}) 14:37:19 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200"}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000002c0)) 14:37:19 executing program 3 (fault-call:3 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:19 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) [ 397.371405] device team_slave_1 entered promiscuous mode 14:37:19 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x8000) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) [ 397.415330] vhci_hcd: invalid port number 0 [ 397.445178] device team_slave_1 left promiscuous mode [ 397.466291] FAULT_INJECTION: forcing a failure. [ 397.466291] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 397.498962] CPU: 1 PID: 19273 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #285 [ 397.506345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 14:37:19 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200"}) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000002c0)) 14:37:19 executing program 2: r0 = socket$packet(0x11, 0x40000000003, 0x300) accept$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) accept4$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={"626f6e6430000000597676ad0e580432", r1}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0xfedf) 14:37:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6c00}) [ 397.515703] Call Trace: [ 397.518306] dump_stack+0x1c4/0x2b4 [ 397.521953] ? dump_stack_print_info.cold.2+0x52/0x52 [ 397.527162] ? debug_smp_processor_id+0x1c/0x20 [ 397.531853] ? perf_trace_lock_acquire+0x15b/0x800 [ 397.536814] should_fail.cold.4+0xa/0x17 [ 397.540922] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 397.546053] ? unwind_get_return_address+0x61/0xa0 [ 397.551007] ? graph_lock+0x170/0x170 [ 397.554821] ? graph_lock+0x170/0x170 [ 397.558637] ? __lock_acquire+0x7ec/0x4ec0 [ 397.562909] ? perf_trace_lock_acquire+0x15b/0x800 [ 397.567867] ? __lock_is_held+0xb5/0x140 [ 397.571951] ? ___might_sleep+0x1ed/0x300 [ 397.573655] device bond_slave_1 entered promiscuous mode [ 397.576122] ? lock_release+0x970/0x970 [ 397.576180] ? arch_local_save_flags+0x40/0x40 [ 397.576199] ? check_preemption_disabled+0x48/0x200 [ 397.576224] ? __might_sleep+0x95/0x190 [ 397.576253] __alloc_pages_nodemask+0x34b/0xde0 [ 397.576272] ? perf_trace_lock+0x7a0/0x7a0 [ 397.592141] vhci_hcd: invalid port number 0 14:37:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x100000000000000}) [ 397.595453] ? __alloc_pages_slowpath+0x2d80/0x2d80 [ 397.617646] ? graph_lock+0x170/0x170 [ 397.621450] ? find_held_lock+0x36/0x1c0 [ 397.625552] ? check_preemption_disabled+0x48/0x200 [ 397.630592] ? print_usage_bug+0xc0/0xc0 [ 397.634681] ? print_usage_bug+0xc0/0xc0 [ 397.638759] ? print_usage_bug+0xc0/0xc0 [ 397.642845] ? ima_match_policy+0x848/0x1560 [ 397.644834] vhci_hcd: invalid port number 0 [ 397.647275] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 397.657126] alloc_pages_current+0x10c/0x210 [ 397.661558] pte_alloc_one+0x1b/0x1a0 14:37:19 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x500}) [ 397.665376] do_huge_pmd_anonymous_page+0xba9/0x17e0 [ 397.670512] ? __thp_get_unmapped_area+0x180/0x180 [ 397.675493] ? mark_held_locks+0x130/0x130 [ 397.679756] ? mark_held_locks+0x130/0x130 [ 397.684021] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 397.689586] ? check_preemption_disabled+0x48/0x200 [ 397.694628] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 397.700185] ? pud_val+0x88/0x100 [ 397.703658] ? __pmd+0x60/0x60 [ 397.706869] ? debug_smp_processor_id+0x1c/0x20 [ 397.711560] __handle_mm_fault+0x3880/0x53e0 14:37:19 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) [ 397.716007] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 397.720879] ? graph_lock+0x170/0x170 [ 397.724699] ? print_usage_bug+0xc0/0xc0 [ 397.728797] ? graph_lock+0x170/0x170 [ 397.732619] ? graph_lock+0x170/0x170 [ 397.736493] ? handle_mm_fault+0x42a/0xc70 [ 397.738773] vhci_hcd: invalid port number 0 [ 397.740753] ? lock_downgrade+0x900/0x900 [ 397.749225] ? check_preemption_disabled+0x48/0x200 [ 397.754281] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 397.760095] ? kasan_check_read+0x11/0x20 14:37:19 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000feffff00"}, &(0x7f0000000700)}) [ 397.764287] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 397.769598] ? rcu_bh_qs+0xc0/0xc0 [ 397.773151] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 397.778616] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 397.784194] ? check_preemption_disabled+0x48/0x200 [ 397.789233] handle_mm_fault+0x54f/0xc70 [ 397.793323] ? __handle_mm_fault+0x53e0/0x53e0 [ 397.797947] ? find_vma+0x34/0x190 [ 397.801528] __do_page_fault+0x67d/0xed0 [ 397.805621] ? mm_fault_error+0x380/0x380 [ 397.809790] ? graph_lock+0x170/0x170 14:37:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x60}) [ 397.813609] ? debug_smp_processor_id+0x1c/0x20 [ 397.818321] do_page_fault+0xf2/0x7e0 [ 397.822147] ? vmalloc_sync_all+0x30/0x30 [ 397.826319] ? error_entry+0x76/0xd0 [ 397.830053] ? trace_hardirqs_off_caller+0xbb/0x310 [ 397.835090] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 397.839961] ? trace_hardirqs_on_caller+0x310/0x310 [ 397.845011] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 397.849884] page_fault+0x1e/0x30 [ 397.853352] RIP: 0010:__get_user_4+0x21/0x30 [ 397.857776] Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 55 65 48 8b 14 25 40 ee 01 00 48 3b 82 18 14 00 00 73 43 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 25 65 [ 397.874456] vhci_hcd: invalid port number 96 [ 397.876684] RSP: 0018:ffff88018ae47a20 EFLAGS: 00010202 [ 397.876714] RAX: 0000000020000083 RBX: 0000000000005423 RCX: ffffc90007ebe000 [ 397.876724] RDX: ffffffffffffffff RSI: ffffffff81b15713 RDI: 0000000000000282 [ 397.876734] RBP: ffff88018ae47c08 R08: 0000000000000000 R09: 0000000000000000 [ 397.876745] R10: ffff8801c7e40dc0 R11: 3ac10425b4e3c09a R12: 1ffff100315c8f48 [ 397.876754] R13: ffff8801cba08a80 R14: 000000000000001a R15: ffff8801d8499c80 [ 397.876786] ? __might_fault+0x1a3/0x1e0 [ 397.876819] ? tty_ioctl+0x353/0x1820 [ 397.876838] ? tty_vhangup+0x30/0x30 [ 397.876866] ? rcu_bh_qs+0xc0/0xc0 [ 397.876896] ? __fget+0x4d1/0x740 [ 397.915747] ? ksys_dup3+0x680/0x680 [ 397.915766] ? find_held_lock+0x36/0x1c0 [ 397.915794] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 397.915817] ? tty_vhangup+0x30/0x30 [ 397.915837] do_vfs_ioctl+0x1de/0x1720 [ 397.915854] ? __lock_is_held+0xb5/0x140 [ 397.915876] ? ioctl_preallocate+0x300/0x300 [ 397.915894] ? __fget_light+0x2e9/0x430 [ 397.915913] ? fget_raw+0x20/0x20 [ 397.954412] ? __sb_end_write+0xd9/0x110 [ 397.954435] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 397.954448] ? fput+0x130/0x1a0 [ 397.954465] ? do_syscall_64+0x9a/0x820 [ 397.954490] ? do_syscall_64+0x9a/0x820 [ 397.954507] ? lockdep_hardirqs_on+0x421/0x5c0 [ 397.954527] ? security_file_ioctl+0x94/0xc0 [ 397.954546] ksys_ioctl+0xa9/0xd0 [ 397.954566] __x64_sys_ioctl+0x73/0xb0 [ 397.966224] do_syscall_64+0x1b9/0x820 [ 397.966239] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 397.966290] ? syscall_return_slowpath+0x5e0/0x5e0 [ 397.966305] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 397.966335] ? trace_hardirqs_on_caller+0x310/0x310 [ 397.966364] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 397.966384] ? prepare_exit_to_usermode+0x291/0x3b0 [ 397.966412] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 397.974796] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 397.974809] RIP: 0033:0x457569 14:37:19 executing program 3 (fault-call:3 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:19 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000feffffff00"}, &(0x7f0000000700)}) 14:37:19 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x700000000000000}) [ 397.974825] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 397.974834] RSP: 002b:00007f2c3345fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.974852] RAX: ffffffffffffffda RBX: 00007f2c3345fc90 RCX: 0000000000457569 [ 397.974861] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000004 [ 397.974871] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 397.974880] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2c334606d4 [ 397.974890] R13: 00000000004bf67c R14: 00000000004cf550 R15: 0000000000000005 [ 398.088937] FAULT_INJECTION: forcing a failure. [ 398.088937] name failslab, interval 1, probability 0, space 0, times 0 [ 398.109412] device bond_slave_1 left promiscuous mode [ 398.185211] CPU: 1 PID: 19306 Comm: syz-executor3 Not tainted 4.19.0-rc8+ #285 [ 398.192625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 398.196207] vhci_hcd: invalid port number 0 [ 398.202009] Call Trace: [ 398.208944] dump_stack+0x1c4/0x2b4 [ 398.212598] ? dump_stack_print_info.cold.2+0x52/0x52 [ 398.217836] should_fail.cold.4+0xa/0x17 [ 398.221913] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 398.227029] ? check_preemption_disabled+0x48/0x200 [ 398.232066] ? graph_lock+0x170/0x170 [ 398.232097] ? graph_lock+0x170/0x170 [ 398.232131] ? find_held_lock+0x36/0x1c0 [ 398.243901] ? __lock_is_held+0xb5/0x140 [ 398.243936] ? ___might_sleep+0x1ed/0x300 [ 398.243956] ? arch_local_save_flags+0x40/0x40 [ 398.243977] ? print_usage_bug+0xc0/0xc0 [ 398.252494] __should_failslab+0x124/0x180 [ 398.252518] should_failslab+0x9/0x14 [ 398.252536] kmem_cache_alloc+0x2be/0x730 [ 398.252555] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 398.252588] ptlock_alloc+0x20/0x80 [ 398.261238] pte_alloc_one+0x6b/0x1a0 [ 398.261266] do_huge_pmd_anonymous_page+0xba9/0x17e0 [ 398.261295] ? __thp_get_unmapped_area+0x180/0x180 [ 398.261313] ? mark_held_locks+0x130/0x130 [ 398.269330] ? mark_held_locks+0x130/0x130 [ 398.269360] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 398.269378] ? check_preemption_disabled+0x48/0x200 [ 398.269397] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 398.279059] ? pud_val+0x88/0x100 [ 398.279076] ? __pmd+0x60/0x60 [ 398.279097] ? debug_smp_processor_id+0x1c/0x20 [ 398.279124] __handle_mm_fault+0x3880/0x53e0 [ 398.279153] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 398.279171] ? graph_lock+0x170/0x170 [ 398.279188] ? print_usage_bug+0xc0/0xc0 [ 398.279208] ? graph_lock+0x170/0x170 [ 398.286625] ? graph_lock+0x170/0x170 [ 398.286663] ? handle_mm_fault+0x42a/0xc70 [ 398.286681] ? lock_downgrade+0x900/0x900 [ 398.286697] ? check_preemption_disabled+0x48/0x200 [ 398.286719] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 398.296738] ? kasan_check_read+0x11/0x20 [ 398.296756] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 398.296773] ? rcu_bh_qs+0xc0/0xc0 [ 398.296789] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 398.296806] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 398.296823] ? check_preemption_disabled+0x48/0x200 [ 398.296852] handle_mm_fault+0x54f/0xc70 [ 398.305301] ? __handle_mm_fault+0x53e0/0x53e0 [ 398.305321] ? find_vma+0x34/0x190 [ 398.305343] __do_page_fault+0x67d/0xed0 [ 398.305368] ? mm_fault_error+0x380/0x380 [ 398.305388] ? graph_lock+0x170/0x170 [ 398.315947] ? debug_smp_processor_id+0x1c/0x20 [ 398.315972] do_page_fault+0xf2/0x7e0 [ 398.315999] ? vmalloc_sync_all+0x30/0x30 [ 398.316019] ? error_entry+0x76/0xd0 [ 398.316037] ? trace_hardirqs_off_caller+0xbb/0x310 [ 398.316062] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 398.325048] ? trace_hardirqs_on_caller+0x310/0x310 [ 398.325089] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 398.325120] page_fault+0x1e/0x30 [ 398.325140] RIP: 0010:__get_user_4+0x21/0x30 [ 398.332989] Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 55 65 48 8b 14 25 40 ee 01 00 48 3b 82 18 14 00 00 73 43 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 25 65 [ 398.332999] RSP: 0018:ffff88018911fa20 EFLAGS: 00010202 [ 398.333017] RAX: 0000000020000083 RBX: 0000000000005423 RCX: ffffc90007ebe000 [ 398.333028] RDX: ffffffffffffffff RSI: ffffffff81b15713 RDI: 0000000000000282 [ 398.333038] RBP: ffff88018911fc08 R08: 0000000000000000 R09: 0000000000000000 [ 398.333050] R10: ffff880187854f00 R11: 3ac10425b4e3c09a R12: 1ffff10031223f48 [ 398.333060] R13: ffff8801884b41c0 R14: 000000000000001a R15: ffff8801b8343cc0 [ 398.333090] ? __might_fault+0x1a3/0x1e0 [ 398.342501] ? tty_ioctl+0x353/0x1820 [ 398.342521] ? tty_vhangup+0x30/0x30 [ 398.342537] ? rcu_bh_qs+0xc0/0xc0 [ 398.342576] ? __fget+0x4d1/0x740 [ 398.350454] ? ksys_dup3+0x680/0x680 [ 398.350483] ? find_held_lock+0x36/0x1c0 [ 398.350510] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 398.350532] ? tty_vhangup+0x30/0x30 [ 398.366503] do_vfs_ioctl+0x1de/0x1720 [ 398.366531] ? __lock_is_held+0xb5/0x140 [ 398.366550] ? ioctl_preallocate+0x300/0x300 [ 398.366567] ? __fget_light+0x2e9/0x430 [ 398.366583] ? fget_raw+0x20/0x20 [ 398.366605] ? __sb_end_write+0xd9/0x110 [ 398.377411] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 398.377425] ? fput+0x130/0x1a0 [ 398.377443] ? do_syscall_64+0x9a/0x820 [ 398.377460] ? do_syscall_64+0x9a/0x820 [ 398.377489] ? lockdep_hardirqs_on+0x421/0x5c0 [ 398.377522] ? security_file_ioctl+0x94/0xc0 [ 398.377555] ksys_ioctl+0xa9/0xd0 [ 398.401498] __x64_sys_ioctl+0x73/0xb0 [ 398.401519] do_syscall_64+0x1b9/0x820 [ 398.401535] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 398.401554] ? syscall_return_slowpath+0x5e0/0x5e0 [ 398.401570] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 398.401589] ? trace_hardirqs_on_caller+0x310/0x310 [ 398.410652] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 398.410673] ? prepare_exit_to_usermode+0x291/0x3b0 [ 398.410698] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 398.410723] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 398.418819] RIP: 0033:0x457569 14:37:20 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) [ 398.418838] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 398.418848] RSP: 002b:00007f2c3345fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.418865] RAX: ffffffffffffffda RBX: 00007f2c3345fc90 RCX: 0000000000457569 [ 398.418880] RDX: 0000000020000080 RSI: 0000000000005423 RDI: 0000000000000004 [ 398.427068] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 398.427078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2c334606d4 14:37:20 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 14:37:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/keycreate\x00') ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000040)={0x6, 0x6a3}) 14:37:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x2}) [ 398.427088] R13: 00000000004bf67c R14: 00000000004cf550 R15: 0000000000000005 14:37:20 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:37:20 executing program 3 (fault-call:3 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:20 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) 14:37:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4}) 14:37:20 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:37:20 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x400000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:37:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x10000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00'}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x208000, 0x8) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 14:37:20 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) 14:37:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:20 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6000000000000000}) 14:37:21 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) [ 399.238545] vhci_hcd: invalid port number 0 14:37:21 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) accept4(r0, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x80, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@rand_addr, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000000200)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@multicast2, @in=@multicast2}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xfffffffffffffe6e) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={"6e001000008000", r1}) accept(r0, 0x0, &(0x7f0000000040)) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x3, 0x6, @broadcast}, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x101000, 0x0) 14:37:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x100000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000000)=0xffffffffe5e1eade) 14:37:21 executing program 0: openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f00000002c0)) 14:37:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x3}) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f00000000c0)) 14:37:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x68000000}) 14:37:21 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:37:21 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) prctl$setendian(0x14, 0x0) 14:37:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x10702, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000240)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4d0, 0x0, 0xc0, 0x300, 0x240, 0x240, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, &(0x7f00000001c0), {[{{@ip={@empty, @loopback, 0xffffffff, 0xff, 'veth0_to_bond\x00', 'ip6_vti0\x00', {}, {}, 0xff, 0x2, 0x19}, 0x0, 0x98, 0xc0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5, 0x800000}}}, {{@uncond, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@rand_addr=0x800, @empty, 0xff000000, 0xffffffff, 'yam0\x00', '\x00', {}, {0xff}, 0x2f, 0x1, 0x4}, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x7}}}, {{@uncond, 0x0, 0x98, 0xc0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x4, 0x2, 0x8, 0x1}}, @common=@osf={0x50, 'osf\x00', 0x0, {'syz1\x00', 0x9, 0x2, 0x0, 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xffffffff}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) r2 = semget(0x0, 0x3, 0x241) semctl$SEM_INFO(r2, 0x7, 0x13, &(0x7f0000000780)=""/211) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r3, 0x5423, &(0x7f0000000080)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop-control\x00', 0x40, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0xa0000, 0x0) setsockopt$bt_BT_SNDMTU(r4, 0x112, 0xc, &(0x7f0000000100)=0x80000000, 0x2) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) fanotify_mark(r4, 0x8, 0x8000000, r5, &(0x7f00000000c0)='./file0\x00') 14:37:21 executing program 0 (fault-call:1 fault-nth:0): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) 14:37:21 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1, 0x20) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000180)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x480, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) pivot_root(&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='./file0\x00') r2 = syz_open_pts(r1, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f00000000c0)="63e18d4b0c7183156f80e955dfe8a1ff0fd6d999102fe8648902d04d3e3b7b427404678a8d2d506c1aac375bf4d1c6983bc9dca848aa119b012a9254d5a818b60dc15987e76f3843b4d9041711f13b752a80aa39bd725d559370e54ad826b6081df955cf8886ad2115f41e4774da5edb61") openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x4000, 0x0) [ 399.623436] FAULT_INJECTION: forcing a failure. [ 399.623436] name failslab, interval 1, probability 0, space 0, times 0 14:37:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x68}) 14:37:21 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) [ 399.712433] CPU: 1 PID: 19404 Comm: syz-executor0 Not tainted 4.19.0-rc8+ #285 [ 399.719852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 399.729219] Call Trace: [ 399.731851] dump_stack+0x1c4/0x2b4 [ 399.735523] ? dump_stack_print_info.cold.2+0x52/0x52 [ 399.740774] should_fail.cold.4+0xa/0x17 [ 399.744892] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 399.750019] ? print_usage_bug+0xc0/0xc0 [ 399.754151] ? graph_lock+0x170/0x170 [ 399.758005] ? graph_lock+0x170/0x170 [ 399.761839] ? find_held_lock+0x36/0x1c0 [ 399.765921] ? __lock_is_held+0xb5/0x140 [ 399.770026] ? ___might_sleep+0x1ed/0x300 [ 399.774192] ? arch_local_save_flags+0x40/0x40 [ 399.774238] __should_failslab+0x124/0x180 [ 399.783044] should_failslab+0x9/0x14 [ 399.783064] kmem_cache_alloc_trace+0x2d7/0x750 [ 399.783082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 399.783103] ? check_preemption_disabled+0x48/0x200 [ 399.783133] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 399.783228] snd_mixer_oss_get_volume1_vol.isra.13+0xa3/0x5d0 [ 399.783265] snd_mixer_oss_get_volume1+0x231/0x618 [ 399.808597] vhci_hcd: invalid port number 104 [ 399.813216] snd_mixer_oss_ioctl1+0x305/0x1cd0 [ 399.813232] ? graph_lock+0x170/0x170 [ 399.813258] ? snd_mixer_oss_get_volume1_vol.isra.13+0x5d0/0x5d0 [ 399.813279] ? snd_mixer_oss_proc_read+0x290/0x290 [ 399.813299] ? find_held_lock+0x36/0x1c0 [ 399.813325] ? __fget+0x4aa/0x740 [ 399.813343] ? lock_downgrade+0x900/0x900 [ 399.853860] ? check_preemption_disabled+0x48/0x200 [ 399.858903] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 399.864718] ? kasan_check_read+0x11/0x20 [ 399.868890] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 399.874200] ? rcu_bh_qs+0xc0/0xc0 [ 399.877802] ? __fget+0x4d1/0x740 [ 399.881291] ? ksys_dup3+0x680/0x680 [ 399.885021] ? find_held_lock+0x36/0x1c0 [ 399.889107] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 399.894064] snd_mixer_oss_ioctl+0x47/0x60 [ 399.898317] ? snd_mixer_oss_ioctl_compat+0x70/0x70 [ 399.903348] do_vfs_ioctl+0x1de/0x1720 [ 399.907245] ? __lock_is_held+0xb5/0x140 [ 399.911332] ? ioctl_preallocate+0x300/0x300 [ 399.915752] ? __fget_light+0x2e9/0x430 [ 399.915771] ? fget_raw+0x20/0x20 [ 399.915790] ? __sb_end_write+0xd9/0x110 [ 399.915813] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 399.915825] ? fput+0x130/0x1a0 [ 399.915842] ? do_syscall_64+0x9a/0x820 [ 399.915861] ? do_syscall_64+0x9a/0x820 [ 399.923284] ? lockdep_hardirqs_on+0x421/0x5c0 [ 399.923314] ? security_file_ioctl+0x94/0xc0 [ 399.923336] ksys_ioctl+0xa9/0xd0 [ 399.923358] __x64_sys_ioctl+0x73/0xb0 [ 399.960451] do_syscall_64+0x1b9/0x820 [ 399.964363] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 399.969742] ? syscall_return_slowpath+0x5e0/0x5e0 [ 399.974695] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 399.979553] ? trace_hardirqs_on_caller+0x310/0x310 [ 399.984581] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 399.989724] ? prepare_exit_to_usermode+0x291/0x3b0 [ 399.994763] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 399.999643] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.004840] RIP: 0033:0x457569 [ 400.008046] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 400.026953] RSP: 002b:00007f58ffa9ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.034674] RAX: ffffffffffffffda RBX: 00007f58ffa9ec90 RCX: 0000000000457569 [ 400.041950] RDX: 00000000200002c0 RSI: 0000000080082407 RDI: 0000000000000003 [ 400.049224] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 400.056513] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f58ffa9f6d4 14:37:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x3d6) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6c}) 14:37:21 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x216, 0x280400) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x1}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r3, 0x6}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r4, 0xae}, &(0x7f0000000140)=0x8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x3, 0x6, @link_local}, 0x10) [ 400.061121] vhci_hcd: invalid port number 108 [ 400.063801] R13: 00000000004c05a0 R14: 00000000004d0768 R15: 0000000000000004 [ 400.102232] QAT: Invalid ioctl 14:37:21 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000080)) 14:37:21 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) [ 400.118444] QAT: Invalid ioctl 14:37:21 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) [ 400.184780] vhci_hcd: vhci_device speed not set 14:37:22 executing program 0 (fault-call:1 fault-nth:1): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) 14:37:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x200000003, 0x300) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x24000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)={r3, 0x0, 0x7, [0x1, 0x1, 0x3, 0xc9, 0x0, 0x100, 0x0]}, 0x16) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r4, 0x3, 0x6, @link_local}, 0xfedf) 14:37:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7a000000}) 14:37:22 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4800}) 14:37:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x8200, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000000)) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) [ 400.358166] FAULT_INJECTION: forcing a failure. [ 400.358166] name failslab, interval 1, probability 0, space 0, times 0 14:37:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6800000000000000}) [ 400.415599] CPU: 0 PID: 19455 Comm: syz-executor0 Not tainted 4.19.0-rc8+ #285 [ 400.422984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 400.431830] vhci_hcd: invalid port number 0 [ 400.432343] Call Trace: [ 400.439250] dump_stack+0x1c4/0x2b4 [ 400.442898] ? dump_stack_print_info.cold.2+0x52/0x52 [ 400.448111] should_fail.cold.4+0xa/0x17 [ 400.452199] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 400.457307] ? save_stack+0xa9/0xd0 [ 400.460939] ? graph_lock+0x170/0x170 [ 400.464743] ? save_stack+0x43/0xd0 [ 400.464777] ? kasan_kmalloc+0xc7/0xe0 [ 400.464794] ? kmem_cache_alloc_trace+0x152/0x750 [ 400.464811] ? snd_mixer_oss_get_volume1_vol.isra.13+0xa3/0x5d0 [ 400.464826] ? snd_mixer_oss_get_volume1+0x231/0x618 [ 400.464842] ? graph_lock+0x170/0x170 [ 400.464861] ? ksys_ioctl+0xa9/0xd0 [ 400.472372] ? __x64_sys_ioctl+0x73/0xb0 [ 400.472390] ? do_syscall_64+0x1b9/0x820 [ 400.472407] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.472433] ? find_held_lock+0x36/0x1c0 14:37:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x1000000}) [ 400.472453] ? __lock_is_held+0xb5/0x140 [ 400.510464] vhci_hcd: invalid port number 0 [ 400.513415] ? ___might_sleep+0x1ed/0x300 [ 400.525922] ? arch_local_save_flags+0x40/0x40 [ 400.530528] __should_failslab+0x124/0x180 [ 400.534788] should_failslab+0x9/0x14 [ 400.538610] kmem_cache_alloc_trace+0x2d7/0x750 [ 400.543288] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 400.548843] ? check_preemption_disabled+0x48/0x200 [ 400.553902] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 400.558961] snd_mixer_oss_get_volume1_vol.isra.13+0xde/0x5d0 [ 400.564878] snd_mixer_oss_get_volume1+0x231/0x618 [ 400.569829] snd_mixer_oss_ioctl1+0x305/0x1cd0 [ 400.574429] ? graph_lock+0x170/0x170 [ 400.574450] ? snd_mixer_oss_get_volume1_vol.isra.13+0x5d0/0x5d0 [ 400.574482] ? snd_mixer_oss_proc_read+0x290/0x290 [ 400.574505] ? find_held_lock+0x36/0x1c0 [ 400.574531] ? __fget+0x4aa/0x740 [ 400.574550] ? lock_downgrade+0x900/0x900 [ 400.584510] ? check_preemption_disabled+0x48/0x200 [ 400.584537] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 400.584551] ? kasan_check_read+0x11/0x20 14:37:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x200000000000000}) [ 400.584569] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 400.584587] ? rcu_bh_qs+0xc0/0xc0 [ 400.584618] ? __fget+0x4d1/0x740 [ 400.584643] ? ksys_dup3+0x680/0x680 [ 400.584662] ? find_held_lock+0x36/0x1c0 [ 400.621686] vhci_hcd: invalid port number 0 [ 400.624983] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 400.645445] snd_mixer_oss_ioctl+0x47/0x60 [ 400.649705] ? snd_mixer_oss_ioctl_compat+0x70/0x70 [ 400.654735] do_vfs_ioctl+0x1de/0x1720 [ 400.658636] ? __lock_is_held+0xb5/0x140 [ 400.662713] ? ioctl_preallocate+0x300/0x300 [ 400.667147] ? __fget_light+0x2e9/0x430 [ 400.671137] ? fget_raw+0x20/0x20 [ 400.674634] ? __sb_end_write+0xd9/0x110 [ 400.678764] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 400.680024] vhci_hcd: invalid port number 0 [ 400.684316] ? fput+0x130/0x1a0 [ 400.691922] ? do_syscall_64+0x9a/0x820 [ 400.695917] ? do_syscall_64+0x9a/0x820 [ 400.699907] ? lockdep_hardirqs_on+0x421/0x5c0 [ 400.704515] ? security_file_ioctl+0x94/0xc0 [ 400.708951] ksys_ioctl+0xa9/0xd0 [ 400.712424] __x64_sys_ioctl+0x73/0xb0 [ 400.716332] do_syscall_64+0x1b9/0x820 [ 400.720234] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 400.725614] ? syscall_return_slowpath+0x5e0/0x5e0 [ 400.730569] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.735433] ? trace_hardirqs_on_caller+0x310/0x310 [ 400.740490] ? prepare_exit_to_usermode+0x291/0x3b0 [ 400.745565] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 400.750427] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 400.755628] RIP: 0033:0x457569 14:37:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6}) [ 400.758836] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 400.777753] RSP: 002b:00007f58ffa9ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 400.777774] RAX: ffffffffffffffda RBX: 00007f58ffa9ec90 RCX: 0000000000457569 [ 400.777785] RDX: 00000000200002c0 RSI: 0000000080082407 RDI: 0000000000000003 [ 400.777795] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 400.777810] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f58ffa9f6d4 14:37:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000000)=""/72) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e6}) r1 = syz_open_pts(r0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000240)) r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000280)="6d6fde9074bf156e662c4063da3c86b98750b7fe949c2d1897faafa7844617e96ef481aa2ff1c8a4ad0e285d3463d55c3ba8fa002fcaaab152046af87ff6dd594a2dcf3bf5d86154618a8ac3f26f576cc39c18b0e6") fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000000c0)) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040)={0x1, 0x3}, 0x2) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) [ 400.777821] R13: 00000000004c05a0 R14: 00000000004d0768 R15: 0000000000000004 14:37:22 executing program 0 (fault-call:1 fault-nth:2): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) 14:37:22 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x801) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040)=0x6, 0x4) r2 = syz_open_pts(r0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x3f, @ipv4={[], [], @multicast1}}}, 0x96, 0xff, 0x5, 0x1, 0xc0}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}}}, &(0x7f0000000280)=0x84) ioctl$FIONREAD(r2, 0x5423, &(0x7f0000000080)) 14:37:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x10000) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:37:22 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = dup(r2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x130, r4, 0x804, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x20}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x23}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x33}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x16, 0x30}}, @IPVS_SVC_ATTR_AF={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x86a}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xd41}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3c85}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1d}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x44051}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_team\x00', r1}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:37:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7a00000000000000}) [ 401.029144] vhci_hcd: invalid port number 0 14:37:22 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:37:22 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) 14:37:22 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCLINUX2(r0, 0x541c, &(0x7f00000000c0)={0x2, 0x7, 0x2, 0xb5e, 0x2, 0xeff2}) r1 = syz_open_pts(r0, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000040)={0x2, 0xff}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:37:22 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x400000000000006) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:22 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @remote, @dev}, &(0x7f0000000240)=0xc) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x5, r1, 0x1, 0xfd2}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team0\x00', r2}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @link_local}, 0xfedf) 14:37:22 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x48000000}) 14:37:23 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:37:23 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x5460, &(0x7f00000002c0)) 14:37:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0xfffffffffffffffe, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x8000000000000000) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000200)) syz_open_dev$adsp(&(0x7f0000000240)='/dev/adsp#\x00', 0x3, 0x2000) r2 = socket(0x3, 0x1, 0xcd) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0xf72e}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r3, 0x2, 0xa6, 0x9, 0xffffffff, 0x1}, 0x14) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000180)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x4) [ 401.300261] device team_slave_0 entered promiscuous mode [ 401.306088] device team_slave_1 entered promiscuous mode 14:37:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x200, 0x0) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f0000000040)) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000140)={r3, 0x1}, &(0x7f0000000180)=0x8) 14:37:23 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:37:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x74}) [ 401.372873] device team_slave_0 left promiscuous mode [ 401.378333] device team_slave_1 left promiscuous mode 14:37:23 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0xc020660b, &(0x7f00000002c0)) [ 401.448323] device team_slave_0 entered promiscuous mode [ 401.453928] device team_slave_1 entered promiscuous mode [ 401.479106] device team_slave_0 left promiscuous mode [ 401.484404] device team_slave_1 left promiscuous mode 14:37:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x200, 0x400) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f00000000c0)={{0x1, 0x3, 0x72, 0x0, 0xfffffffffffffffa}, 0x7f, 0x3}) r2 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r2, 0x5423, &(0x7f0000000080)) [ 401.531077] vhci_hcd: invalid port number 116 14:37:23 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082402, &(0x7f00000002c0)) 14:37:23 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:37:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40000, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) sched_setattr(r2, &(0x7f0000000100)={0x0, 0x7, 0x1, 0x3, 0xb4, 0x6, 0x6, 0x3ff}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @link_local}, 0xfedf) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r3, 0x1, 0x6, @random="9459ae73a147"}, 0x10) ftruncate(r1, 0x100000001) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={r3, @loopback, @broadcast}, 0xc) 14:37:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0xfffffffffffffffe, 0x0) r1 = memfd_create(&(0x7f0000000000)='em1nodevvmnet0-\x00', 0x4) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f00000000c0)=""/106) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) r3 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x8, 0x200000) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000180)) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 14:37:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8}) 14:37:23 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x5450, &(0x7f00000002c0)) 14:37:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb}) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:23 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:37:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6c00000000000000}) 14:37:23 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x400001, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1a400000000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000100)={r3, 0x9}, &(0x7f0000000140)=0x8) getsockopt$netlink(r2, 0x10e, 0x8, &(0x7f0000000180)=""/242, &(0x7f0000000280)=0xf2) 14:37:23 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x40049409, &(0x7f00000002c0)) 14:37:23 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000000)) 14:37:23 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001140)='/dev/vsock\x00', 0x800, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001380)={0xffffffffffffffff, r0, 0x0, 0x6, &(0x7f0000000080)='tunl0\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000013c0)=r2, 0x4) r3 = dup2(r1, r1) connect$bt_rfcomm(r3, &(0x7f0000001340)={0x1f, {0x1, 0x8, 0x7, 0x100000005, 0x7, 0xc5b6}, 0x1ff}, 0x139) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) ioctl$TIOCCONS(r3, 0x541d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, &(0x7f0000000000)="31649cb2234b", &(0x7f0000000140)=""/4096}, 0x18) openat$vcs(0xffffffffffffff9c, &(0x7f0000001300)='/dev/vcs\x00', 0x10000, 0x0) fstat(r3, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getegid() write$P9_RGETATTR(r0, &(0x7f0000001240)={0xa0, 0x19, 0x2, {0x1001, {0xf6, 0x0, 0x4}, 0x0, r5, r6, 0xb72, 0xffffffffffffff46, 0xfffffffffffffffe, 0x5, 0xfffffffeffffffff, 0x6, 0xff, 0x2, 0x3f, 0x200, 0xa2f, 0x9, 0x7f, 0x5, 0x1}}, 0xa0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x3, 0xffffffffffffffdf, @dev={[], 0x19}}, 0x10) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000001180), 0x2) [ 401.946152] vhci_hcd: invalid port number 0 14:37:23 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:37:23 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0xc0045878, &(0x7f00000002c0)) 14:37:23 executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x80, 0x800) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000000)={'bond0\x00', {0x2, 0x4e24, @broadcast}}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r2, 0x0) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000080)) 14:37:23 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x300000000000000}) 14:37:23 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082403, &(0x7f00000002c0)) 14:37:23 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup2(r0, r0) ioctl$TIOCCBRK(r1, 0x5428) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0x10) [ 402.163652] vhci_hcd: invalid port number 0 14:37:24 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) 14:37:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x1000000000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x8, 0x4000) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f00000000c0)={0x401, 0x2, 0x9}) 14:37:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x74000000}) 14:37:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000000)=0x4) 14:37:24 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x8008241e, &(0x7f00000002c0)) 14:37:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x100000001, 0x80000) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000180)=0xffffffffffffff61) socket$netlink(0x10, 0x3, 0x1f) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0xfedf) 14:37:24 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:37:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4c000000}) 14:37:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x4b34, 0x61c) r1 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x800) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000200)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) fcntl$addseals(r1, 0x409, 0x4) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1032) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) setsockopt$inet6_int(r3, 0x29, 0x24, &(0x7f0000000040)=0x8, 0x4) 14:37:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000018d27bc3b80000b8e90faaa3fddebc7f2fbe4fc19f85c9406fe8e393ba836887dadb84f61f26a4b41c5a60a4689786cf2d5b0100000000000000000000000000b258dc29ce"]) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) r2 = accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x80000) sendto(r2, &(0x7f0000000000)="3f99bb984fac50b8ba955432e04e4f74bf03434435617ebc221b38dc44f1b4e1c5b2df21342a86f051ff1b6aa7c789603d2c02cad1a9e086f0e8012c2e03b5f174cf11f3f8f4fd3c6fedf9cceeebba2de1ec83b1e54dab17c09f8c2e71a0007b4c108444dd64f4f8b2a67c30febe8f1c9bd725ee6dc6b2ef56715f838dc24dab99e290ca203283b6d0c81eac83d750ae90279f5458aa5c", 0x97, 0x4000000, &(0x7f0000000100)=@in={0x2, 0x4e22}, 0x80) ioctl$FIONREAD(r0, 0x5423, &(0x7f00000000c0)) epoll_create1(0x80000) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f00000001c0)) 14:37:24 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082404, &(0x7f00000002c0)) 14:37:24 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x10}) 14:37:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000640)='/proc/self/net/pfkey\x00', 0xa002, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000680)={0x0, 0x100000001}, &(0x7f00000006c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000700)={r2, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r3, 0x3, 0x6, @link_local}, 0xfedf) [ 402.688176] vhci_hcd: invalid port number 16 14:37:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0xfffffffffffffefe}) r1 = syz_open_pts(r0, 0x81bfe0925d9cc4fd) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:24 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082408, &(0x7f00000002c0)) 14:37:24 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x0, 0x0, &(0x7f0000008f37)}) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r3 = socket$inet_smc(0x2b, 0x1, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) r4 = memfd_create(&(0x7f0000000400)="e83779d80efa45bb7f48bebc95870bd0cd39bd2830ee47afe7b33fc778bde252c50d2e", 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x1) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0000000008013950323030302e75"], 0x15) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, "7175657565310000000000000000313b0000000000000000000000000000000000000000060000000000ccbf7ddd00"}) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="48c7ac000000000006400000acea5f451c406e3c0000000000000000"], 0x1c) write$sndseq(r4, &(0x7f0000000000)=[{0x0, 0xf401, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r7, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r7, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) 14:37:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0xa}) 14:37:24 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:24 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082406, &(0x7f00000002c0)) 14:37:24 executing program 2: r0 = socket$packet(0x11, 0x7, 0x300) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'gre0\x00'}) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x3da, 0x8, 0xffffffffffffffff, 0x20}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) [ 402.890224] vhci_hcd: invalid port number 10 [ 402.899058] binder: 19715 invalid dec weak, ref 2 desc 0 s 1 w 0 14:37:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x22e, 0x4, 0x63, 0x2, 0x8, 0x59, 0x8}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000040)={0x8, 0x4}) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) [ 402.981066] binder: BINDER_SET_CONTEXT_MGR already set 14:37:24 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000feffff00"}, &(0x7f0000000700)}) 14:37:24 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0xc0045878, &(0x7f00000002c0)) 14:37:24 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x2000000000000000}) [ 403.036664] binder: 19715:19731 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 403.056517] binder: 19715:19717 ioctl 40046207 0 returned -16 14:37:24 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040), 0x4) [ 403.138921] vhci_hcd: invalid port number 0 14:37:24 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x8, 0x0, 0x7fffffff}) 14:37:24 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000000)="f6a7f4501864ff9e91ad9429f3573bf2b0447276216a34938c3157ff8ba0fbd353cfc4") ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000040)={0x5, 0x8001, 0x4}) 14:37:25 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x2, &(0x7f00000002c0)) 14:37:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x8000000}) 14:37:25 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x5b36, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)="6c6f809dfda342f901a042275f1e000000000200", r0}, 0x10) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='trusted.overlay.nlink\x00', &(0x7f00000001c0)={'U+', 0x3}, 0x28, 0x7704cadd45deb93e) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000000)=0x1, 0x4) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x401) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0xfedf) getsockname$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000002c0)=0x1c) 14:37:25 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:25 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x5451, &(0x7f00000002c0)) [ 403.396982] vhci_hcd: invalid port number 0 14:37:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8000, 0x200080) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) 14:37:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000380)=""/4096, &(0x7f00000000c0)=0x1000) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x1, 0x80000000258802) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000040)=""/46) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0x0, r1, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff}, 0x30) getpgrp(r3) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0xfedf) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000140)={'irlan0\x00', 0x7ff}) socket$packet(0x11, 0x3, 0x300) 14:37:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7000000}) 14:37:25 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:25 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x5452, &(0x7f00000002c0)) [ 403.608717] vhci_hcd: invalid port number 0 14:37:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x127d}) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1000, 0x200200) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000180)=0x7, 0x4) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) r3 = dup(r1) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f00000000c0)={0x0, 0x0, {0x51, 0x6, 0x0, {0xff, 0x4}, {0x2157}, @rumble={0x0, 0xdbda}}, {0x57, 0x4, 0x8000, {0xfffffffffffffffb, 0xf7c}, {0x0, 0x9}, @ramp={0x0, 0x2, {0x9, 0x7fffffff, 0x0, 0x6}}}}) r4 = semget(0x3, 0x6, 0x244) semtimedop(r4, &(0x7f0000000000)=[{0x3, 0x7, 0x1800}, {0x4, 0x342840dd, 0x800}, {0x2, 0x9, 0x1000}, {0x2, 0x5ac, 0x1800}, {0x7, 0x5, 0x1000}], 0x5, &(0x7f0000000040)={0x0, 0x989680}) 14:37:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000580)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x2, 0x8}, &(0x7f00000001c0)=0x8) fstat(r1, &(0x7f0000000480)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e24, 0x4, @ipv4={[], [], @multicast1}, 0xffffffffffffffff}}, 0x3}, 0x90) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x2) splice(r0, &(0x7f0000000400), r0, &(0x7f0000000440)=0x10, 0xfff, 0x6) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_dev$adsp(&(0x7f00000002c0)='/dev/adsp#\x00', 0xead0, 0x2) r3 = syz_open_pts(r0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000040)) getdents(r4, &(0x7f0000000340)=""/129, 0x81) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000080)) epoll_pwait(r4, &(0x7f00000000c0)=[{}], 0x1, 0x4, &(0x7f0000000100)={0xde}, 0x8) getsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) 14:37:25 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:37:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0xa00}) 14:37:25 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x4020940d, &(0x7f00000002c0)) [ 403.810030] vhci_hcd: invalid port number 0 14:37:25 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:37:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @dev={[], 0x1c}}, 0x10) bind$packet(r0, &(0x7f0000000000)={0x11, 0x7, r1, 0x1, 0x5, 0x6, @broadcast}, 0x14) socket$nl_crypto(0x10, 0x3, 0x15) 14:37:25 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x58) ioctl$TIOCCBRK(r0, 0x5428) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$FIONREAD(r2, 0x5423, &(0x7f0000000080)) 14:37:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x10000000000000}) 14:37:25 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x5421, &(0x7f00000002c0)) 14:37:25 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x1ffd, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:37:25 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) [ 404.014158] vhci_hcd: invalid port number 0 14:37:25 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0xc0189436, &(0x7f00000002c0)) 14:37:25 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) getcwd(&(0x7f0000000000)=""/73, 0x49) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)=ANY=[@ANYBLOB="080000000000000007000000000000000500000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r0, @ANYBLOB="00000000ff0300000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000d75800000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="000000000c0200000000000000000000000000000000000000000000031f29e033209987fd289327e06c0fe6", @ANYRES32=r0, @ANYBLOB="00000000000000000000030000000000000000000000000000000000"]) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:37:25 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f00000001c0)={r3, 0x2, &(0x7f00000000c0)=[0x6, 0x14a], &(0x7f0000000100)=[0x4, 0x9, 0x1b9, 0xfffffffffffffff9, 0xff, 0xa87, 0x3, 0x1], 0x21, 0x3, 0x8, &(0x7f0000000140)=[0x3f, 0x2, 0x8], &(0x7f0000000180)=[0x4, 0x9, 0x0]}) 14:37:25 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x500000000000000}) 14:37:25 executing program 4: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x9) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x1000, 0x7fffffff, 0x80000000, 0x400, 0x101, 0x7fff, 0x2, 0x6, 0x400, 0x1, 0x3, 0x4}) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 14:37:26 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:37:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000040)={0x6, 0x9}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x10000006}) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) [ 404.253608] vhci_hcd: invalid port number 0 14:37:26 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082405, &(0x7f00000002c0)) 14:37:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$KDADDIO(r0, 0x4b34, 0xfffffffffffffffc) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) listxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/184, 0xb8) r2 = syz_open_pts(r0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x8, 0x100) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r3, 0xf, 0x3}, 0x14) ioctl$TIOCSCTTY(r2, 0x540e, 0x8001) write$UHID_DESTROY(r3, &(0x7f0000000000), 0x4) ioctl$FIONREAD(r2, 0x5423, &(0x7f0000000080)) ioctl$void(r0, 0x5450) 14:37:26 executing program 2: ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x20000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f00000000c0)=[@request_death={0x400c630e, 0x4, 0x2}, @enter_looper], 0xae, 0x0, &(0x7f0000000100)="a1472f5bc606769aa268320cddf576e46abcca67918ec7c90a9e4b8d4911540e7f9021cb553e5012282d2b50f4735c17f9446518f5ff444f7880986cf956ec213b42f1b42fb845ea4e7a5cf698268138c22511a2b293728748ca684c6bcfbfc974ecc15cf94f8ddb3186c1912f7b125e75ffac6a2cab835acd1398853d75d37983aaa7df30438b794bfb4609871484278baab82612e431546574f2a388f32351eee30a76b2d577a61aeeaab85b6c"}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x2) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) sync_file_range(r1, 0x1, 0x3, 0x5) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000200)={0x7, 0x18, [0x100000000, 0x7, 0x101, 0x0, 0x800, 0x4712a958]}) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x20000000) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = accept4(r2, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x100000000001f, 0x87) sendmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x1500000000000000}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x3, 0x6, @link_local}, 0xfedf) 14:37:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6000000}) 14:37:26 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:37:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) [ 404.479487] vhci_hcd: invalid port number 0 14:37:26 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x7400}) 14:37:26 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:26 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) 14:37:26 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000fffffe00"}, &(0x7f0000000700)}) [ 404.666216] vhci_hcd: invalid port number 0 14:37:26 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x80040) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x3, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r2, &(0x7f00000001c0), 0x0, 0x200007fc, &(0x7f0000deaff0)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000240)='illinois\x00', 0x9) sendto$inet(r2, &(0x7f00000005c0)="1a8c443d3a568c81cc096aa87ddab0f1b182da383fd71795f41053261e63b0b9f1283f7431b6146106716c21b43625f9194bf4b6a5dba53c46b82862a2f804121cda7e6be8fd507bb1545de629746d878f10be8036e98a270c42d6458f97b342303464e94ccb6d6f4f81941e3f3fa371596cdf17e160c992140c9dc81362f019f017", 0x82, 0x0, &(0x7f0000000100)={0x2, 0x0, @multicast2}, 0x10) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000000)=""/226, 0xfffffd85}], 0x1) recvfrom(r2, &(0x7f0000000380)=""/239, 0xff4e, 0x0, 0x0, 0x307) close(r2) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x400080) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x1, 0x6, 0x0, 0x3ff, 0x4, 0x4, 0x401, 0x0, 0x0, 0x1ff, 0x3, 0x80000001}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000000c0)=0x10000, 0x4) 14:37:26 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:37:26 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x600000000000000}) [ 404.900876] vhci_hcd: invalid port number 0 [ 404.919993] vhci_hcd: invalid port number 0 14:37:27 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x2080, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x244001, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f00000000c0)=r3) 14:37:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) 14:37:27 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) inotify_init1(0x80800) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080)) openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80400, 0x0) 14:37:27 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:37:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4800000000000000}) 14:37:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x400000) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000100)) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) [ 405.326279] vhci_hcd: invalid port number 0 14:37:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ipddp0\x00', 0x1000}) r2 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r2, 0x5423, &(0x7f0000000080)) 14:37:27 executing program 0: r0 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000080)=0x1c) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond_slave_0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="1000000006000010000300000000800000090000000400000045005d108a98099abd5b567573445e6c09dea5cdfbb173c27ce30ec629c66563ca0957674ad46d068e59430b5e4bbd2ea9aa7263375a3792f25fadfd8c89716f69738680ed8649777b80cd0a2cdb2a9e1eb0d6c85ec8a00c4e839e99e3be42868176f7735da0d34cdef142451280d88b7bc6862344e1fbd1a050300ef490626a9def8bb18e1c95f7ebb132d44fb5571c85"]}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40, 0x0) getpeername$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000200)=0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'eql\x00', r2}) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000002c0)) 14:37:27 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:37:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x4000000000000, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x4}) syz_open_pts(r0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) 14:37:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x800000000000000}) [ 405.475036] vhci_hcd: invalid port number 0 14:37:27 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) r2 = pkey_alloc(0x0, 0x2) pkey_free(r2) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0xfffffffffffffc55, @link_local}, 0xfedf) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffc, 0x2000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xc, 0x5, 0xfffffffffffffffc, 0x78, 0x4, r3, 0x8001}, 0x2c) 14:37:27 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) ioctl(r0, 0x4, &(0x7f0000000040)="8e34584c4f5edb060e30ec2e5c21f59b784f718ee40158b83fc7df18eb9fb5cae0bae3dbe041a7ae4b523acfd9ab3aca419e03138a8c14d8c82400b39d60fa1822393e10d98e841dad850c23ddf1bde735d23b2314d1dd0a90297d87354369ec622050335741c5c0d523b386febf") 14:37:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2000, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x2}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000240)={r2, 0x0, 0x23fd, 0x400000, 0x10001, 0x10000}, &(0x7f0000000280)=0x14) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r3 = syz_open_pts(r0, 0x4800) getpeername(r1, &(0x7f00000002c0)=@nl, &(0x7f0000000340)=0x80) r4 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x9, 0x200000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="7365637572697479000000000000000000000000000000000000000000000000030000855c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x58) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x2}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x7e, 0x0) ioctl$FIONREAD(r3, 0x5423, &(0x7f0000000080)) 14:37:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$VT_RELDISP(r0, 0x5605) r1 = accept$inet6(0xffffffffffffff9c, &(0x7f00000004c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000500)=0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x2, 0x4) r2 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xf1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={r3, 0x20, &(0x7f0000000100)=[@in={0x2, 0x4e23}, @in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000180)=0x10) 14:37:27 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x5000000}) 14:37:27 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x4100) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000380)={"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"}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) pwrite64(r2, &(0x7f0000000040), 0x0, 0x0) [ 405.717309] vhci_hcd: invalid port number 0 14:37:27 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{r0, 0x4000}, {r0}, {r0, 0x210}, {r0, 0x2}, {r0, 0x8001}], 0x5, 0x3789878f) umount2(&(0x7f0000000100)='./file0\x00', 0x4) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) accept4$packet(r0, 0x0, &(0x7f0000000080), 0x800) 14:37:27 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000feffffff00"}, &(0x7f0000000700)}) 14:37:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x4b5, 0x9a9, 0x7ff, 0x5, 0x0, 0x9, 0xffffffffa36e2d26, 0xfff, 0x6, 0xffffffffffff8000, 0x100, 0x9}) r1 = syz_open_pts(r0, 0x20400) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) 14:37:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:37:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x3}) 14:37:27 executing program 2: recvmmsg(0xffffffffffffff9c, &(0x7f0000002a80)=[{{&(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000140)=""/146, 0x92}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f0000001380)=""/113, 0x71}, {&(0x7f0000001400)=""/123, 0x7b}, {&(0x7f0000001480)=""/188, 0xbc}], 0x8, &(0x7f00000015c0)=""/186, 0xba, 0x5}, 0x9}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001680)=""/218, 0xda}, {&(0x7f0000001780)=""/131, 0x83}, {&(0x7f0000001840)=""/217, 0xd9}, {&(0x7f0000001940)=""/224, 0xe0}, {&(0x7f0000001a40)=""/177, 0xb1}, {&(0x7f0000001b00)=""/233, 0xe9}, {&(0x7f0000001c00)=""/7, 0x7}, {&(0x7f0000001c40)=""/75, 0x4b}], 0x8, &(0x7f0000001d40)=""/107, 0x6b, 0x7fff}, 0x40}, {{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001dc0)=""/161, 0xa1}, {&(0x7f0000001e80)=""/158, 0x9e}], 0x2, &(0x7f0000001f80)=""/152, 0x98, 0x1ff}, 0x9}, {{&(0x7f0000002040)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000002500)=[{&(0x7f00000020c0)=""/58, 0x3a}, {&(0x7f0000002100)=""/86, 0x56}, {&(0x7f0000002180)=""/58, 0x3a}, {&(0x7f00000021c0)=""/230, 0xe6}, {&(0x7f00000022c0)=""/168, 0xa8}, {&(0x7f0000002380)=""/217, 0xd9}, {&(0x7f0000002480)=""/77, 0x4d}], 0x7, 0x0, 0x0, 0x5941}, 0x20}, {{&(0x7f0000002580)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000002840)=[{&(0x7f0000002600)=""/50, 0x32}, {&(0x7f0000002640)=""/120, 0x78}, {&(0x7f00000026c0)=""/152, 0x98}, {&(0x7f0000002780)=""/125, 0x7d}, {&(0x7f0000002800)=""/27, 0x1b}], 0x5, 0x0, 0x0, 0x8}, 0xfffffffffffffffe}, {{&(0x7f00000028c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000002940)=""/46, 0x2e}, {&(0x7f0000002980)=""/27, 0x1b}], 0x2, &(0x7f0000002a00)=""/127, 0x7f, 0x2}, 0x5}], 0x6, 0x10000, &(0x7f0000002c00)={0x77359400}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000002c40)={0x0, 0xaf, "b243adb4113b59caf13e16924fb10030370d7a5040499251a7cb79540735fb4e165d38b2c9c9bd112bda9cc3e5d0ef5a28b77b4301c54e006e638e08306dc3a266a5de5eab209fb6a0cbdddf0449dc501654ae56fc09d80b4c7abe98ea5b99fc0d3ab1be423e4605d7f4dffe3f549b330efab5c3400e8f27a36d84be688201f821e645e407d9e8bc4ac8f90497149bcc10b2102860b7ad1c2697ae300a844593fc4bd987688d6bd02278ffa5618384"}, &(0x7f0000002d00)=0xb7) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000002d40)={0x81, 0x8000, 0x20, 0x3, r1}, &(0x7f0000002d80)=0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x8) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x3, 0x6, @link_local}, 0xfedf) 14:37:27 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:37:27 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x1, 0x0) getdents(r0, &(0x7f00000000c0)=""/222, 0xde) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000002c0)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x82000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000001c0)) 14:37:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4c00000000000000}) 14:37:27 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x440, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000000c0)=""/116) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/ptmx\x00', 0xfffffffffffffffe, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00005befdc)) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001940)='/dev/sequencer2\x00', 0x80000, 0x0) r4 = syz_open_pts(r0, 0x204) ioctl$FIONREAD(r4, 0x541b, &(0x7f0000000080)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) socket$inet_smc(0x2b, 0x1, 0x0) accept4$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14, 0x0) fstat(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$packet(0x11, 0x2, 0x300) getresgid(&(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000001980)={'ipddp0\x00', 0x80000001}) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) sendmsg$nl_xfrm(r0, &(0x7f0000001840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x18002081}, 0xc, &(0x7f0000001800)={&(0x7f0000001a00)=ANY=[@ANYBLOB="d01200001700000128bd7000ffdbdf25fe80000000000000000000000000001b000004d36f000000ac1414aa00000000000000000000000000000000000000000000000000000000e00000020000000000000000000000004e2000014e2400040a0020201d00000033530d585863831a9af982d747242dfa126acd5cb13d0305f9d26b2c3b5fe9d710b1bf651559e17f6ede30a18eebb72becce673255fcc4db7475cffa92929de4ffbe817c71", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="ac1414aa000000000000000000000000ac1414bb0000000000000000000000004e237fff4e2100040200808000000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="00000080000000008e00000000000000040000000000000080ff07d70000000006000000000010000000000000070000000000000006000000000000000010000000000000080000000000000003000000000000000900000000000000010000000000000002000102000000000c001c00000000", @ANYRES32=0x0, @ANYBLOB="0100000014000e00fe8000000000000000000000000000bb0c000f0001000000000000008000020073616c73613230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b801000013d7b967a9455c5cc59a0a77fb160ce6d73f08bf875ef222b284ff585554aeb269f81194fcaf942d10ae648c92375720727171b8f7525d00"], 0x12d4}, 0x1, 0x0, 0x0, 0x40}, 0x40) 14:37:27 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r2, 0x5423, &(0x7f0000000080)) [ 406.077870] vhci_hcd: invalid port number 0 14:37:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4c00}) 14:37:27 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200"}) 14:37:27 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:28 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) getsockopt$inet6_buf(r0, 0x29, 0x0, &(0x7f00000015c0)=""/12, &(0x7f00000018c0)=0xc) process_vm_readv(r1, &(0x7f0000001840)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f00000000c0)=""/47, 0x2f}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000100)=""/170, 0xaa}, {&(0x7f00000001c0)=""/197, 0xc5}, {&(0x7f0000001300)=""/143, 0x8f}, {&(0x7f00000013c0)=""/190, 0xbe}, {&(0x7f0000001480)=""/247, 0xf7}], 0x8, &(0x7f00000017c0)=[{&(0x7f0000001600)=""/211, 0xd3}, {&(0x7f0000001700)=""/148, 0x94}], 0x2, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) timerfd_gettime(r0, &(0x7f0000001580)) prctl$intptr(0x26, 0xc346) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000001800)) [ 406.215071] vhci_hcd: invalid port number 0 14:37:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x101, 0x0, 0x3, 0x101, 0x3, 0x556, 0xc7, 0x0, 0x3, 0xa869, 0x7fffffff, 0x7}) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f0000000000)=0xa28) fsetxattr$security_smack_entry(r0, &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000100)='\x00', 0x1, 0x1) 14:37:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) syz_open_pts(r0, 0x200000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x185a4e4801acabf6}}, 0x20) fcntl$getown(r1, 0x9) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {r2, 0x1f, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0x6, {"caf3cb26fd9104b1e309a532bdd28f58"}, 0x20ca, 0x4, 0x7}, @ib={0x1b, 0x4, 0x1, {"7af02063744c13837de94c6cde837fa7"}, 0xbb0f, 0x7, 0x5}}}, 0x118) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000180)) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r3) 14:37:28 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d6163287874656129000000000000000000000000000000000000000000000000000000000000fffffffe00"}, &(0x7f0000000700)}) 14:37:28 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x900, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:37:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0xa00000000000000}) 14:37:28 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x4000, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) 14:37:28 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2578, 0x80000) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f00000000c0)={'ifb0\x00', {0x2, 0x4e20, @remote}}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000002c0)) [ 406.438557] vhci_hcd: invalid port number 0 14:37:28 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8100, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000040)={0x8, 0x2, 0x200, 0x5, 0x0, 0x4, 0x6, 0x3, 0x8, 0x2}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x0, @link_local}, 0xfedf) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000000c0)) 14:37:28 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x8}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000140)={r2, 0x800}, 0x8) sysfs$1(0x1, &(0x7f0000000000)='eth0proc@\x00') ioctl$FIONREAD(r0, 0x5423, &(0x7f0000000080)) 14:37:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) syz_open_pts(r0, 0x0) 14:37:28 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000000000000000000200"}, &(0x7f0000000700)}) 14:37:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x20000000}) 14:37:28 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x20000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) epoll_wait(r0, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x7) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000000c0)=""/132, &(0x7f0000000180)=0x84) 14:37:28 executing program 3: ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00005befdc)) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$FIONREAD(r0, 0x5423, &(0x7f0000000000)) 14:37:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x800, 0x0) 14:37:28 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d616328787465612900000000000000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:28 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:37:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0xa000000}) 14:37:28 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) 14:37:28 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000feffffff00"}, &(0x7f0000000700)}) 14:37:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2, 0xbac}) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) ioctl$TIOCCBRK(r0, 0x5428) 14:37:28 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = msgget(0x0, 0x32c) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000000c0)=""/157) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0xfedf) [ 406.922921] vhci_hcd: invalid port number 0 14:37:28 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x200, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x40) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) r3 = getegid() r4 = geteuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000600)=0xe8) getresgid(&(0x7f0000000640)=0x0, &(0x7f0000000680), &(0x7f00000006c0)) r8 = getuid() lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000007c0)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000008c0)=0xe8) lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=0x0) lstat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000f80)=ANY=[@ANYBLOB="e803000000000000050000000000000006000000000000000100000000000000ff000000000000000200000000000000b10600000600000001000000000000000600000000000000080000000000000007000000000000005300000000000000020000000000000009000000cc030000040000000800000094000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="520e0000ff070000000000000300000000000000070000000000000009000000008000002a7d766d6e657431280000000000000002000000000000000000000000000000050000000000000002000000000000006c000000090000000100000000000000ff07000000000000fdffffffffffffff0500000000000000000200000000000090000000000000000100000004000000ffffffff00040000290000006ee2fddce2240e5a40d544e732c3130ea28840e86ebf61b1278e0004698889b97d7571d59714235941cc9f44ee5a36e7ffb37ebd17acbb0025", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="060000008000000000000000030000000000000000040000000000000200000000000000525e000000000000040000000000000002000000000000000080000000000000f7ffffffffffffff03000000080000000300000000000000ff01000000000000050000000000000001000000000000000002000000000000fdffffffffffffff0100000001800000040000000100000007000000", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="07000000ff070000000000000500000000000000050000000000000002000000001000002d2f0000000000000600000000000000020000000000000000800000000000000300000000000000a40b0000050000000400000000000000bb0a00000000000000010000000000000400000000000000ffffffff000000000900000000000000e0e1000007000000000000000700000001010000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="ffff000034ddc211000000000500000000000000000000000000000001000000070000002d000000000000000400000000000000030000000000000008000000000000000100000000000000010400000000008005000000000000000200000000000000000000000000000001040000000000000900000000000000ff0000000000000006000000ff7f0000ccffffff3f0000000f000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="ff7f00003903000000000000060000000000000007000000000000000b000000040000002f6465762f6d696469230000000000000000000000000000030000000000000001feffffffffffff0800000000000000ff030000060000000000000000000000070000000000000009000000000000000000008000000000e70e0000000000000500000000000000050000000000fe1f090000000800000009000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="010000004300000000000000010000000000000003000000000000000b000000020000002f6465762f6d69646923000000000000"], 0x3e8) syz_extract_tcp_res(&(0x7f0000000140), 0x2b9, 0x6) r14 = syz_open_pts(r0, 0x0) r15 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1200000, 0x400) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x2}, &(0x7f00000000c0)=0x8) ioctl$UFFDIO_WAKE(r15, 0x8010aa02, &(0x7f0000000b40)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r15, 0x84, 0x75, &(0x7f0000000100)={r16, 0x4ac}, 0x8) ioctl$SG_GET_REQUEST_TABLE(r15, 0x2286, &(0x7f0000000180)) ioctl$FIONREAD(r14, 0x541b, &(0x7f0000000080)) 14:37:28 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'eql\x00', 0x7f}) 14:37:28 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x700}) 14:37:28 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000000000000000000100"}, &(0x7f0000000700)}) 14:37:28 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='/dev/ptmx\x00', 0x4) accept$alg(r1, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) r2 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r2, 0x5423, &(0x7f0000000080)) 14:37:28 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) r2 = dup3(r0, r0, 0x80000) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) [ 407.166856] vhci_hcd: invalid port number 0 14:37:29 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000080)='security.capability\x00', &(0x7f00000000c0)=@v1={0x1000000, [{0x4, 0x3}]}, 0xc, 0x3) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000140)) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0x7) 14:37:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6800}) 14:37:29 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000000000000000000500"}, &(0x7f0000000700)}) 14:37:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) socketpair$inet(0x2, 0x7, 0x101, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @local}}, 0xffff, 0x5, 0x1, 0x4, 0x2}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)={r3, 0x80000001, 0xa, [0x95, 0x4, 0x2, 0x9, 0x3, 0x5, 0x6e5a, 0x4, 0x3ff, 0x3]}, &(0x7f00000001c0)=0x1c) 14:37:29 executing program 3: getsockname(0xffffffffffffff9c, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000000)=0x80) getpeername$inet(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$FIONREAD(r2, 0x5423, &(0x7f0000000080)) ioctl$TIOCEXCL(r1, 0x540c) ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)={0x0, 0xfb, 0x7, 0x200, 0xffffffff7fffffff, 0xb6, 0x2, 0x30000000, 0x99, 0x321, 0x1, 0xad37}) [ 407.309974] vhci_hcd: invalid port number 0 14:37:29 executing program 2: r0 = socket$packet(0x11, 0x0, 0x300) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x210000, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0xf73, @mcast1, 0xa}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) fcntl$notify(r0, 0x402, 0x80000020) fremovexattr(r0, &(0x7f0000000100)=@known='system.posix_acl_access\x00') setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0xfedf) 14:37:29 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={"6362636d61632878746561290000000000000000000000000000000000000000000000000000000000000000000f00"}, &(0x7f0000000700)}) 14:37:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x6000}) 14:37:29 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x100, 0x8, '9P2000.u'}, 0x15) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) fcntl$getown(r0, 0x9) [ 407.515309] vhci_hcd: invalid port number 0 14:37:29 executing program 1: r0 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000440)="00cb", 0x2, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000540)={r1, r0, r0}, &(0x7f0000000240)=""/243, 0xf3, &(0x7f0000000740)={&(0x7f0000000580)={'cbcmac(xtea)\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'}, &(0x7f0000000700)}) 14:37:29 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xffffffffffff7f66, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'\x00', 0x0}) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f00000000c0)={0x7aa, {{0xa, 0x4e22, 0x200, @loopback, 0x1000}}}, 0x88) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @link_local}, 0xfedf) 14:37:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x800) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x17}, @in=@local, 0x4e22, 0x0, 0x4e24, 0x3, 0xa, 0xa0, 0xa0, 0x5e, r2, r3}, {0x6, 0xfffffffffffffffa, 0x0, 0x7fffffff, 0xd29, 0x1}, {0x0, 0x7, 0x100000000, 0x1}, 0x0, 0x6e6bc0, 0x2, 0x0, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x4d2, 0xff}, 0x2, @in6, 0x34ff, 0x3, 0x1, 0xfff, 0x7ff, 0x5c09, 0xffffffffffffff7f}}, 0xe8) r4 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r4, 0x5423, &(0x7f0000000080)) ioctl$TCSETS(r0, 0x5402, &(0x7f00000002c0)={0x3, 0x2, 0x0, 0x4f, 0x0, 0xc8c, 0x8, 0xe7ca, 0x800, 0x2, 0x200, 0x4}) 14:37:29 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = syz_open_dev$usb(&(0x7f0000000600)='/dev/bus/usb/00#/00#\x00', 0x40000ffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000000)={0xa3, 0x4c}) 14:37:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x800000000000, 0x200000000000000, 0x0, 0x0, 0xff8, 0x0, 0x2, 0x1, 0x800}) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) write$binfmt_aout(r0, &(0x7f0000000100)={{0xcc, 0x9, 0x3, 0x11d, 0x41, 0xffffffff80000001, 0x98, 0x7fffffff}, "75f05283b081010e50106ec2d24715b844db935ac46d0ebd0f800d0614e317a8bd0e00e12b8995aa2c39deee4c5254819199d2a479cd33580d4ebf34a109cf61017d8dc054428bbbab624f38ff3110e810cf032697d406b9aa302390a5de3140866d9dcc80b71dae96c17ced3dbd6af34bfd34e6d87b9c98c9ef6d779ec36fd106f39198cc3bb7571c8ac851f4a9b442732270688decc2c54317f7381a73e4926b03", [[], [], [], [], [], [], [], [], []]}, 0x9c2) 14:37:29 executing program 0: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x10040, 0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000080)=0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000140)='bond_slave_1\x00') setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0xfffffffffffffffa, 0xfff}, 0x8) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0)) inotify_init1(0x800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000001c0)={0x4, 0xff, 0x0, {0x0, 0x1c9c380}, 0x800, 0xd5e}) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x6, 0x800) [ 407.707506] vhci_hcd: invalid port number 76 [ 407.730540] ================================================================== [ 407.738174] BUG: KASAN: slab-out-of-bounds in vhci_hub_control+0x1b6d/0x1be0 [ 407.745377] Read of size 4 at addr ffff8801cdd6c4bc by task syz-executor5/20238 [ 407.752826] [ 407.754488] CPU: 1 PID: 20238 Comm: syz-executor5 Not tainted 4.19.0-rc8+ #285 [ 407.761863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 407.761876] Call Trace: [ 407.761902] dump_stack+0x1c4/0x2b4 [ 407.761936] ? dump_stack_print_info.cold.2+0x52/0x52 [ 407.761973] ? printk+0xa7/0xcf [ 407.761996] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 407.762031] print_address_description.cold.8+0x9/0x1ff [ 407.777596] kasan_report.cold.9+0x242/0x309 [ 407.777614] ? vhci_hub_control+0x1b6d/0x1be0 [ 407.777637] __asan_report_load4_noabort+0x14/0x20 [ 407.777655] vhci_hub_control+0x1b6d/0x1be0 [ 407.777681] ? vhci_hcd_probe+0x240/0x240 [ 407.777713] ? rcu_read_lock_sched_held+0x108/0x120 [ 407.823574] ? __kmalloc+0x5de/0x760 [ 407.827304] ? kasan_check_write+0x14/0x20 [ 407.831563] ? do_raw_spin_lock+0xc1/0x200 [ 407.835815] ? usb_hcd_submit_urb+0x6fc/0x20a0 [ 407.840424] usb_hcd_submit_urb+0x17bb/0x20a0 [ 407.844947] ? vhci_hcd_probe+0x240/0x240 [ 407.849125] ? usb_create_hcd+0x40/0x40 [ 407.853116] ? do_syscall_64+0x1b9/0x820 [ 407.853135] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.853154] ? __x64_sys_ioctl+0x73/0xb0 [ 407.853170] ? do_syscall_64+0x1b9/0x820 [ 407.853186] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 407.853208] ? find_held_lock+0x36/0x1c0 [ 407.853238] ? __lockdep_init_map+0x105/0x590 [ 407.853269] ? __lockdep_init_map+0x105/0x590 [ 407.862693] usb_submit_urb+0x893/0x14e0 [ 407.862713] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 407.862746] usb_start_wait_urb+0x13d/0x370 [ 407.862766] ? sg_clean+0x240/0x240 [ 407.862822] usb_control_msg+0x332/0x4e0 [ 407.911007] ? usb_start_wait_urb+0x370/0x370 [ 407.915523] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 407.921085] proc_control+0x99b/0xef0 [ 407.925137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 407.930696] ? proc_bulk+0xa70/0xa70 [ 407.934446] usbdev_do_ioctl+0x1eb8/0x3b50 [ 407.938716] ? processcompl_compat+0x680/0x680 [ 407.943433] ? futex_wait+0x5ec/0xa50 [ 407.947295] ? mark_held_locks+0x130/0x130 [ 407.951555] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 407.956795] ? drop_futex_key_refs.isra.15+0x6d/0xe0 [ 407.961914] ? futex_wake+0x304/0x760 [ 407.965751] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 407.971332] ? check_preemption_disabled+0x48/0x200 [ 407.976392] ? debug_smp_processor_id+0x1c/0x20 [ 407.981075] ? perf_trace_lock_acquire+0x15b/0x800 [ 407.986029] ? perf_trace_lock+0x7a0/0x7a0 [ 407.990293] ? mark_held_locks+0x130/0x130 [ 407.994545] ? graph_lock+0x170/0x170 [ 407.998381] ? do_futex+0x249/0x26d0 [ 408.002114] ? rcu_bh_qs+0xc0/0xc0 [ 408.005672] ? rcu_bh_qs+0xc0/0xc0 [ 408.009239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 408.014800] ? check_preemption_disabled+0x48/0x200 [ 408.014826] ? find_held_lock+0x36/0x1c0 [ 408.014854] ? __fget+0x4aa/0x740 [ 408.014873] ? lock_downgrade+0x900/0x900 [ 408.014890] ? check_preemption_disabled+0x48/0x200 [ 408.014914] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 408.014933] ? kasan_check_read+0x11/0x20 [ 408.036622] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 408.036642] ? rcu_bh_qs+0xc0/0xc0 [ 408.036674] ? __fget+0x4d1/0x740 [ 408.036707] ? ksys_dup3+0x680/0x680 [ 408.036728] ? __might_fault+0x12b/0x1e0 [ 408.036747] ? lock_downgrade+0x900/0x900 [ 408.036774] usbdev_ioctl+0x25/0x30 [ 408.036794] ? usbdev_compat_ioctl+0x30/0x30 [ 408.036811] do_vfs_ioctl+0x1de/0x1720 [ 408.036843] ? ioctl_preallocate+0x300/0x300 [ 408.036862] ? __fget_light+0x2e9/0x430 [ 408.092705] ? fget_raw+0x20/0x20 [ 408.096182] ? _copy_to_user+0xc8/0x110 [ 408.100190] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 408.105805] ? put_timespec64+0x10f/0x1b0 [ 408.109976] ? nsecs_to_jiffies+0x30/0x30 [ 408.114159] ? do_syscall_64+0x9a/0x820 [ 408.118146] ? do_syscall_64+0x9a/0x820 [ 408.122136] ? lockdep_hardirqs_on+0x421/0x5c0 [ 408.126740] ? security_file_ioctl+0x94/0xc0 [ 408.131174] ksys_ioctl+0xa9/0xd0 [ 408.134649] __x64_sys_ioctl+0x73/0xb0 [ 408.138560] do_syscall_64+0x1b9/0x820 [ 408.142471] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 408.147871] ? syscall_return_slowpath+0x5e0/0x5e0 [ 408.152823] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.152845] ? trace_hardirqs_on_caller+0x310/0x310 [ 408.152865] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 408.152885] ? prepare_exit_to_usermode+0x291/0x3b0 [ 408.152908] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.167812] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.167827] RIP: 0033:0x457569 [ 408.167845] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 408.167855] RSP: 002b:00007f7ac647bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.167875] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 408.167885] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000004 14:37:29 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000000c0)={{0x8, 0x8, 0x1, 0x8000000000000000, 0x8, 0x81}, 0x800, 0x0, 0x3, 0xb7, 0x3, "0f1e638d865daa487683fe409bb73a2aa7055837cbc4332680bbef4c289a79ef551a1272d1e5d13fd0b02f38c77216776b8ec2b91fa65b3f0df6bc1a83c2565da51c8deb130e88f24170c3249960f1885682a49f322789dc027c7c54e088f662240c1acc73c63b9e6aaa4a667a5e30e02b99956ef88d05e0e045a594ef8e9d0b"}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={"6c6f000000000200", 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r2, 0x3, 0x6, @link_local}, 0xfedf) 14:37:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) flock(r0, 0xa) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa739, 0xd2, 0x9b, 0x0, 0x0, 0x7, 0x4811}) r1 = syz_open_pts(r0, 0x20000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x10000, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000100)={0x2, 0x2}) 14:37:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x1000000, 0x0) times(&(0x7f0000000000)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0xfffe) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) 14:37:29 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000140)={0x6ae7, 0xd80}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000080)) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000000c0)=0x1, 0x4) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x440000, 0x0) recvfrom$inet(r3, &(0x7f0000000180)=""/130, 0x82, 0x40000100, 0x0, 0x0) 14:37:29 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$FIONREAD(r1, 0x5423, &(0x7f0000000080)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) 14:37:29 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x4) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) [ 408.167901] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 408.234535] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ac647c6d4 [ 408.242005] R13: 00000000004bf6ac R14: 00000000004cf598 R15: 00000000ffffffff [ 408.249394] [ 408.251036] Allocated by task 6888: [ 408.254677] save_stack+0x43/0xd0 [ 408.258142] kasan_kmalloc+0xc7/0xe0 [ 408.261873] kasan_slab_alloc+0x12/0x20 [ 408.265836] kmem_cache_alloc+0x12e/0x730 [ 408.269972] getname_flags+0xd0/0x5a0 [ 408.273770] user_path_at_empty+0x2d/0x50 [ 408.277919] vfs_statx+0x129/0x210 [ 408.281444] __do_sys_newstat+0x8f/0x110 [ 408.285499] __x64_sys_newstat+0x54/0x80 [ 408.289553] do_syscall_64+0x1b9/0x820 [ 408.293439] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.298616] [ 408.300342] Freed by task 6888: [ 408.303622] save_stack+0x43/0xd0 [ 408.307080] __kasan_slab_free+0x102/0x150 [ 408.311302] kasan_slab_free+0xe/0x10 [ 408.315104] kmem_cache_free+0x83/0x290 [ 408.319064] putname+0xf2/0x130 [ 408.322328] filename_lookup+0x39a/0x520 [ 408.326390] user_path_at_empty+0x40/0x50 [ 408.330575] vfs_statx+0x129/0x210 [ 408.334127] __do_sys_newstat+0x8f/0x110 [ 408.338174] __x64_sys_newstat+0x54/0x80 [ 408.342225] do_syscall_64+0x1b9/0x820 [ 408.346106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.351291] [ 408.352910] The buggy address belongs to the object at ffff8801cdd6cec0 [ 408.352910] which belongs to the cache names_cache of size 4096 [ 408.365639] The buggy address is located 2564 bytes to the left of [ 408.365639] 4096-byte region [ffff8801cdd6cec0, ffff8801cdd6dec0) [ 408.378120] The buggy address belongs to the page: [ 408.383036] page:ffffea0007375b00 count:1 mapcount:0 mapping:ffff8801da972d80 index:0x0 compound_mapcount: 0 [ 408.393016] flags: 0x2fffc0000008100(slab|head) [ 408.397823] raw: 02fffc0000008100 ffffea0007321988 ffffea000760c308 ffff8801da972d80 [ 408.405689] raw: 0000000000000000 ffff8801cdd6cec0 0000000100000001 0000000000000000 [ 408.413556] page dumped because: kasan: bad access detected [ 408.419265] [ 408.420887] Memory state around the buggy address: [ 408.425810] ffff8801cdd6c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 408.433166] ffff8801cdd6c400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 408.440513] >ffff8801cdd6c480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 408.447855] ^ [ 408.453040] ffff8801cdd6c500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 408.460411] ffff8801cdd6c580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 408.467770] ================================================================== [ 408.475129] Disabling lock debugging due to kernel taint [ 408.480562] Kernel panic - not syncing: panic_on_warn set ... [ 408.480562] [ 408.487909] CPU: 1 PID: 20238 Comm: syz-executor5 Tainted: G B 4.19.0-rc8+ #285 [ 408.496640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 408.506140] Call Trace: [ 408.508721] dump_stack+0x1c4/0x2b4 [ 408.512511] ? dump_stack_print_info.cold.2+0x52/0x52 [ 408.517815] ? lock_downgrade+0x900/0x900 [ 408.522000] panic+0x238/0x4e7 [ 408.525182] ? add_taint.cold.5+0x16/0x16 [ 408.529320] ? add_taint.cold.5+0x5/0x16 [ 408.533371] ? trace_hardirqs_off+0xaf/0x310 [ 408.537782] kasan_end_report+0x47/0x4f [ 408.541755] kasan_report.cold.9+0x76/0x309 [ 408.546071] ? vhci_hub_control+0x1b6d/0x1be0 [ 408.550556] __asan_report_load4_noabort+0x14/0x20 [ 408.555484] vhci_hub_control+0x1b6d/0x1be0 [ 408.559800] ? vhci_hcd_probe+0x240/0x240 [ 408.563941] ? rcu_read_lock_sched_held+0x108/0x120 [ 408.569034] ? __kmalloc+0x5de/0x760 [ 408.572760] ? kasan_check_write+0x14/0x20 [ 408.577003] ? do_raw_spin_lock+0xc1/0x200 [ 408.581239] ? usb_hcd_submit_urb+0x6fc/0x20a0 [ 408.585830] usb_hcd_submit_urb+0x17bb/0x20a0 [ 408.590315] ? vhci_hcd_probe+0x240/0x240 [ 408.594489] ? usb_create_hcd+0x40/0x40 [ 408.598470] ? do_syscall_64+0x1b9/0x820 [ 408.602525] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.608189] ? __x64_sys_ioctl+0x73/0xb0 [ 408.612234] ? do_syscall_64+0x1b9/0x820 [ 408.616283] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.621632] ? find_held_lock+0x36/0x1c0 [ 408.625698] ? __lockdep_init_map+0x105/0x590 [ 408.630188] ? __lockdep_init_map+0x105/0x590 [ 408.634673] usb_submit_urb+0x893/0x14e0 [ 408.638723] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 408.644002] usb_start_wait_urb+0x13d/0x370 [ 408.648310] ? sg_clean+0x240/0x240 [ 408.651935] usb_control_msg+0x332/0x4e0 [ 408.655987] ? usb_start_wait_urb+0x370/0x370 [ 408.660472] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 408.666075] proc_control+0x99b/0xef0 [ 408.669877] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 408.675403] ? proc_bulk+0xa70/0xa70 [ 408.679126] usbdev_do_ioctl+0x1eb8/0x3b50 [ 408.683382] ? processcompl_compat+0x680/0x680 [ 408.688000] ? futex_wait+0x5ec/0xa50 [ 408.691813] ? mark_held_locks+0x130/0x130 [ 408.696035] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 408.701211] ? drop_futex_key_refs.isra.15+0x6d/0xe0 [ 408.706299] ? futex_wake+0x304/0x760 [ 408.710089] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 408.715613] ? check_preemption_disabled+0x48/0x200 [ 408.720618] ? debug_smp_processor_id+0x1c/0x20 [ 408.725278] ? perf_trace_lock_acquire+0x15b/0x800 [ 408.730216] ? perf_trace_lock+0x7a0/0x7a0 [ 408.734561] ? mark_held_locks+0x130/0x130 [ 408.738789] ? graph_lock+0x170/0x170 [ 408.742576] ? do_futex+0x249/0x26d0 [ 408.746287] ? rcu_bh_qs+0xc0/0xc0 [ 408.749817] ? rcu_bh_qs+0xc0/0xc0 [ 408.753344] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 408.758869] ? check_preemption_disabled+0x48/0x200 [ 408.763886] ? find_held_lock+0x36/0x1c0 [ 408.767953] ? __fget+0x4aa/0x740 [ 408.771402] ? lock_downgrade+0x900/0x900 [ 408.775551] ? check_preemption_disabled+0x48/0x200 [ 408.780571] ? rcu_read_unlock_special.part.39+0x11f0/0x11f0 [ 408.786371] ? kasan_check_read+0x11/0x20 [ 408.790504] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 408.795780] ? rcu_bh_qs+0xc0/0xc0 [ 408.799315] ? __fget+0x4d1/0x740 [ 408.802767] ? ksys_dup3+0x680/0x680 [ 408.806487] ? __might_fault+0x12b/0x1e0 [ 408.810538] ? lock_downgrade+0x900/0x900 [ 408.814674] usbdev_ioctl+0x25/0x30 [ 408.818291] ? usbdev_compat_ioctl+0x30/0x30 [ 408.822685] do_vfs_ioctl+0x1de/0x1720 [ 408.826568] ? ioctl_preallocate+0x300/0x300 [ 408.830962] ? __fget_light+0x2e9/0x430 [ 408.834924] ? fget_raw+0x20/0x20 [ 408.838380] ? _copy_to_user+0xc8/0x110 [ 408.842361] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 408.847890] ? put_timespec64+0x10f/0x1b0 [ 408.852042] ? nsecs_to_jiffies+0x30/0x30 [ 408.856178] ? do_syscall_64+0x9a/0x820 [ 408.860136] ? do_syscall_64+0x9a/0x820 [ 408.864108] ? lockdep_hardirqs_on+0x421/0x5c0 [ 408.868694] ? security_file_ioctl+0x94/0xc0 [ 408.873104] ksys_ioctl+0xa9/0xd0 [ 408.876558] __x64_sys_ioctl+0x73/0xb0 [ 408.880435] do_syscall_64+0x1b9/0x820 [ 408.884310] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 408.889671] ? syscall_return_slowpath+0x5e0/0x5e0 [ 408.894601] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.899435] ? trace_hardirqs_on_caller+0x310/0x310 [ 408.904439] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 408.909452] ? prepare_exit_to_usermode+0x291/0x3b0 [ 408.914472] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 408.919327] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 408.924513] RIP: 0033:0x457569 [ 408.927714] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 408.946642] RSP: 002b:00007f7ac647bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 408.954357] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457569 [ 408.961626] RDX: 0000000020000000 RSI: 00000000c0185500 RDI: 0000000000000004 [ 408.968882] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 408.976135] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7ac647c6d4 [ 408.983388] R13: 00000000004bf6ac R14: 00000000004cf598 R15: 00000000ffffffff [ 408.991434] Kernel Offset: disabled [ 408.995071] Rebooting in 86400 seconds..